last executing test programs: 48.572771219s ago: executing program 3 (id=300): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001c40), 0x0, 0x20048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000054) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'rr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 47.407125118s ago: executing program 3 (id=302): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) readv(r4, &(0x7f0000004500)=[{&(0x7f0000003100)=""/141, 0x8d}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x2, 0x20343059, 0x2, @discrete={0x800003, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x89004bbf606e9490, 0x700, 0xe, 0x3, {{0x17, 0x4, 0x3, 0x1e, 0x5c, 0x65, 0x0, 0xe8, 0x2f, 0x0, @remote, @empty, {[@timestamp_prespec={0x44, 0x24, 0xf2, 0x3, 0x9, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x7, 0xa, "30877e7870d4596b"}, @lsrr={0x83, 0x3, 0x94}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x17, 0x0, 0x1, [0x8, 0x3, 0x3ff]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x1, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000c5000/0x3000)=nil, 0x3000, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000001140)=""/4102, 0x1006}], 0x1, 0x6, 0xfffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02df", 0x84) timer_gettime(r1, &(0x7f0000000100)) 44.428750952s ago: executing program 3 (id=308): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x14081, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_procfs(r0, &(0x7f0000000340)='net/if_inet6\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x0, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000100)="05000000010001", 0x7) write(r4, &(0x7f0000000200)="3000000019000100aaaaaaaaaa", 0xd) 42.627136423s ago: executing program 3 (id=312): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1800000037000303020000000000000003010000"], 0x18}}, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffefea, 0x23f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x200, 0x1000002, 0x57}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x20, 0x0, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x89623, 0x40000003, 0x1e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271f, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000000)) 41.43524447s ago: executing program 3 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) inotify_init() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0xf}) write$sndseq(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x8410, 0x0) 38.487508412s ago: executing program 3 (id=321): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x611}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x8, 0x5, 0x9, 0x6, 0x1}, @exit, @alu={0x7, 0x0, 0x7, 0xb, 0x9, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 25.17302806s ago: executing program 2 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) inotify_init() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0xf}) write$sndseq(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x8410, 0x0) 22.583992865s ago: executing program 32 (id=321): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x611}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x8, 0x5, 0x9, 0x6, 0x1}, @exit, @alu={0x7, 0x0, 0x7, 0xb, 0x9, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 22.568453379s ago: executing program 2 (id=348): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.811412741s ago: executing program 1 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) inotify_init() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0xf}) write$sndseq(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='ext4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x8410, 0x0) 16.26499876s ago: executing program 1 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16.224726851s ago: executing program 0 (id=358): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)}, {&(0x7f0000000400)="b273983129", 0x5}, {0x0}, {&(0x7f0000000540)="72b38e6e087bfb74a366b4ac40d688eb9400a3d455bdc8b788b73556acac3e5ee0c5d413c93bdf4a93da5b39657b1ea61c707b3ee80bef0e90eccfe680d6a7fb28f4a7083093709f1344d830840e6339d601af9566911d5dae54ba2b13ed6d886bf2d4a3575579cb0a10490808e3079e901ac7682f41e9dac3823e74dc08fc7e1dd46d03c80b52c502a80a2816d5255f2ae39d7d343844e1c17ee4388ef0671ddf60bcbd286b38ee1dd021cd728c4cf51072a1c4f3bae0d2944232ad57817c2326494c4de9a5111440ba220439fdbfd6", 0xd0}, {&(0x7f0000000640)="56d7ae012a2fbf03dedab3f58e7e1d9e02b8282a935d5a5be5766f7a10f59745c1fd556bda3d6d9d50e4074e4a4b0913f668e0fc3a9c0a511391f710c568613ecaf648f4b2580e6f21c7579ce0c50ba86a15b0aa37c5456f534bfee0fac32abb6cbfaa2251c7cb9b8c3cfbd5523a605e6d323a8b8a47c73f3cf91d691c8f815963b219627f9fe333dbab36478188746ccf083f0a995141a5f2424a3a87b2ff9c67be130f41d64a093369e4ef61fcec4e5f23dd8062f6be0805e0b7f596a5428be6a5ed623e1283952025df8a74812716683afaba06440f82df22dbc7fb09c28a5965dfca4eed503d", 0xe8}, {&(0x7f0000000740)="a1a4c4cc21e94459f1f86d5e64f0c22316109180feee1b9c8561c4620fcbe9ab9d75a97d8f459e14de24da1e24fdd4a9ff3b586a134a4410d592088eed7c898322eda927c10ead7f4175bb98b69f9fdf4f2a758d6e7869ecf01d47699954a61545872ce948337f8ad5d115b4517b2aa1e49531d9df7d1009a2f2ebbc1c6eb77715e36abcf6f409c5766492ce831797cc6a176ca94ddd92e934f74d472dd1b1e2eddccf1df061dfad8d05e6549073b23322dc822c48c18dd1f793508797529e80a81a4c871365a39d5da31b32", 0xcc}, {&(0x7f0000000840)="888b0bd1772a376a12ec114fc6a589db87b31d8a4c4bbb79168c7583ebb41a2f8819617630bd7dfa5758685afe3b96cd8f6433eedd65e1afdeabd55e365845fca66a31be8b35512b2d33b47babd341f8bea234e5ff84c7fa6d62870ace8b26a00e0ac75946fbc37ee2f5a0a3bf57b3ed3cc7df9c15283cb57dfef2622a5b6008d67932604bebb4c98d52d6b7ed450e201b027573c2db581e7b0131d76a6ed35266ec4590153f20e281b504911992", 0xae}, {&(0x7f0000000900)="3062b2cfdb98a53a9cff4c47a193dd31870a7aaf7ef44a759fb4d22f1f681f", 0x1f}], 0x8, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, r4, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x20004044}, 0x20000840) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x40000000800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r6, 0x100000000000011, 0x2000, 0x2f93) 14.661795742s ago: executing program 2 (id=360): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) pipe2(0x0, 0x4080) 13.889360189s ago: executing program 0 (id=362): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)}, {&(0x7f0000000400)="b273983129", 0x5}, {0x0}, {&(0x7f0000000540)="72b38e6e087bfb74a366b4ac40d688eb9400a3d455bdc8b788b73556acac3e5ee0c5d413c93bdf4a93da5b39657b1ea61c707b3ee80bef0e90eccfe680d6a7fb28f4a7083093709f1344d830840e6339d601af9566911d5dae54ba2b13ed6d886bf2d4a3575579cb0a10490808e3079e901ac7682f41e9dac3823e74dc08fc7e1dd46d03c80b52c502a80a2816d5255f2ae39d7d343844e1c17ee4388ef0671ddf60bcbd286b38ee1dd021cd728c4cf51072a1c4f3bae0d2944232ad57817c2326494c4de9a5111440ba220439fdbfd6", 0xd0}, {&(0x7f0000000640)="56d7ae012a2fbf03dedab3f58e7e1d9e02b8282a935d5a5be5766f7a10f59745c1fd556bda3d6d9d50e4074e4a4b0913f668e0fc3a9c0a511391f710c568613ecaf648f4b2580e6f21c7579ce0c50ba86a15b0aa37c5456f534bfee0fac32abb6cbfaa2251c7cb9b8c3cfbd5523a605e6d323a8b8a47c73f3cf91d691c8f815963b219627f9fe333dbab36478188746ccf083f0a995141a5f2424a3a87b2ff9c67be130f41d64a093369e4ef61fcec4e5f23dd8062f6be0805e0b7f596a5428be6a5ed623e1283952025df8a74812716683afaba06440f82df22dbc7fb09c28a5965dfca4eed503d", 0xe8}, {&(0x7f0000000740)="a1a4c4cc21e94459f1f86d5e64f0c22316109180feee1b9c8561c4620fcbe9ab9d75a97d8f459e14de24da1e24fdd4a9ff3b586a134a4410d592088eed7c898322eda927c10ead7f4175bb98b69f9fdf4f2a758d6e7869ecf01d47699954a61545872ce948337f8ad5d115b4517b2aa1e49531d9df7d1009a2f2ebbc1c6eb77715e36abcf6f409c5766492ce831797cc6a176ca94ddd92e934f74d472dd1b1e2eddccf1df061dfad8d05e6549073b23322dc822c48c18dd1f793508797529e80a81a4c871365a39d5da31b32", 0xcc}, {&(0x7f0000000840)="888b0bd1772a376a12ec114fc6a589db87b31d8a4c4bbb79168c7583ebb41a2f8819617630bd7dfa5758685afe3b96cd8f6433eedd65e1afdeabd55e365845fca66a31be8b35512b2d33b47babd341f8bea234e5ff84c7fa6d62870ace8b26a00e0ac75946fbc37ee2f5a0a3bf57b3ed3cc7df9c15283cb57dfef2622a5b6008d67932604bebb4c98d52d6b7ed450e201b027573c2db581e7b0131d76a6ed35266ec4590153f20e281b504911992", 0xae}, {&(0x7f0000000900)="3062b2cfdb98a53a9cff4c47a193dd31870a7aaf7ef44a759fb4d22f1f681f", 0x1f}], 0x8, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, r4, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x20004044}, 0x20000840) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x40000000800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r6, 0x100000000000011, 0x2000, 0x2f93) 12.40922709s ago: executing program 4 (id=363): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 11.484439198s ago: executing program 0 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4) ppoll(&(0x7f00000002c0)=[{r4, 0x1487}], 0x1, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', &(0x7f0000000100)='./file1\x00', r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TIOCMBIC(r6, 0x5417, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") 11.415831809s ago: executing program 2 (id=365): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffff9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r2, r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "7ba326de0ccbec3b56af72a9bc61d830ea774d4ad381099a7139716255b600e217d24bbc2206791eccc583ddeeca9f978e20a3e974a21cb6f6825cf53448c535", 0x11}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000280)='\x00', 0x0) getpriority(0x2, 0xffffffffffffffff) 11.138727736s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.433776559s ago: executing program 2 (id=368): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 7.419639302s ago: executing program 4 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/87, 0x57}, {&(0x7f0000002640)=""/203, 0xcb}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) 6.708853382s ago: executing program 0 (id=370): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) readv(r0, &(0x7f0000004500)=[{&(0x7f0000003100)=""/141, 0x8d}], 0x1) 6.508250143s ago: executing program 5 (id=371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x42b, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private1, 0x4e24, 0x0, 0x20, 0x4, 0x0, 0x20, 0x40, 0x87}, {@in6=@mcast1, 0x4d3, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x3ff, 0x0, 0x2, 0x0, 0x0, 0x1002, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x2, 0xfffffffffffffffc, 0x4}, {0x1ffe, 0x4, 0x3b6cc439}, 0x70bd2a, 0x0, 0xa, 0x4, 0x10, 0x2a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8090}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffefea, 0x23f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x200, 0x1000002, 0x57}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x20, 0x0, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x89623, 0x40000003, 0x1e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271f, 0x0, 0x0) 6.063572067s ago: executing program 5 (id=372): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.678294877s ago: executing program 1 (id=373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.945198108s ago: executing program 5 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x611}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x8, 0x5, 0x9, 0x6, 0x1}, @exit, @alu={0x7, 0x0, 0x7, 0xb, 0x9, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850008000000000295000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(&(0x7f0000000300)='./config\x00') 4.86143227s ago: executing program 0 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/87, 0x57}, {&(0x7f0000002640)=""/203, 0xcb}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) 4.053626257s ago: executing program 1 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000440)) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x40080) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58010}, 0x800) 3.842971622s ago: executing program 5 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@typed={0x8, 0x109, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x3a, 0x0, 0x0, @uid}, @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x4010) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) 3.301584009s ago: executing program 1 (id=378): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfe5f, 0x12) 3.213114703s ago: executing program 4 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, &(0x7f00000003c0), &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x2) 2.362273869s ago: executing program 5 (id=380): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 1.292065505s ago: executing program 4 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x2) 1.198528407s ago: executing program 2 (id=382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r3 = accept$alg(r0, 0x0, 0x0) fcntl$dupfd(r3, 0x406, r3) 1.164861978s ago: executing program 0 (id=383): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x48804) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) 103.426387ms ago: executing program 4 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 36.75709ms ago: executing program 1 (id=385): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pipe2$9p(&(0x7f00000001c0), 0x4000) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 77.492369][ T5599] cgroup: Unknown subsys name 'net' [ 77.585184][ T5599] cgroup: Unknown subsys name 'cpuset' [ 77.588738][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.017214][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.689728][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.693707][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.696429][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.697532][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.698324][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.699104][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.699693][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.700581][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.702241][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.702664][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.703090][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.703820][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.704471][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.705209][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.710599][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.711838][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.722241][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.730432][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.737819][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.738510][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.746854][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.761395][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.761559][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.763126][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.763466][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.764640][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.764984][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.781169][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.785674][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.789295][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.811942][ T4928] Bluetooth: hci5: command tx timeout [ 83.812150][ T5630] Bluetooth: hci0: command tx timeout [ 83.812157][ T4928] Bluetooth: hci1: command tx timeout [ 83.812843][ T52] Bluetooth: hci4: command tx timeout [ 83.891213][ T5630] Bluetooth: hci2: command tx timeout [ 83.891397][ T52] Bluetooth: hci3: command tx timeout [ 84.086431][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.086737][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.086864][ T5613] bridge_slave_0: entered allmulticast mode [ 84.088512][ T5613] bridge_slave_0: entered promiscuous mode [ 84.183393][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.183559][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.183980][ T5613] bridge_slave_1: entered allmulticast mode [ 84.186093][ T5613] bridge_slave_1: entered promiscuous mode [ 84.188885][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.189001][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.189131][ T5615] bridge_slave_0: entered allmulticast mode [ 84.191927][ T5615] bridge_slave_0: entered promiscuous mode [ 84.195458][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.195569][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.195700][ T5615] bridge_slave_1: entered allmulticast mode [ 84.197679][ T5615] bridge_slave_1: entered promiscuous mode [ 84.331336][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.379370][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.395410][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.431940][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.482364][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.482528][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.482866][ T5616] bridge_slave_0: entered allmulticast mode [ 84.484318][ T5616] bridge_slave_0: entered promiscuous mode [ 84.557017][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.557127][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.557251][ T5614] bridge_slave_0: entered allmulticast mode [ 84.559526][ T5614] bridge_slave_0: entered promiscuous mode [ 84.562682][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.562792][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.563197][ T5616] bridge_slave_1: entered allmulticast mode [ 84.565297][ T5616] bridge_slave_1: entered promiscuous mode [ 84.610379][ T5615] team0: Port device team_slave_0 added [ 84.623753][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.623839][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.623942][ T5611] bridge_slave_0: entered allmulticast mode [ 84.625485][ T5611] bridge_slave_0: entered promiscuous mode [ 84.627720][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.627829][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.627966][ T5614] bridge_slave_1: entered allmulticast mode [ 84.631868][ T5614] bridge_slave_1: entered promiscuous mode [ 84.652626][ T5613] team0: Port device team_slave_0 added [ 84.680455][ T5615] team0: Port device team_slave_1 added [ 84.694990][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.695093][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.695948][ T5611] bridge_slave_1: entered allmulticast mode [ 84.697720][ T5611] bridge_slave_1: entered promiscuous mode [ 84.733090][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.735071][ T5613] team0: Port device team_slave_1 added [ 84.777356][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.780133][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.804284][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.804446][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.804593][ T5612] bridge_slave_0: entered allmulticast mode [ 84.806118][ T5612] bridge_slave_0: entered promiscuous mode [ 84.810509][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.810524][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.810554][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.834107][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.895550][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895728][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.895862][ T5612] bridge_slave_1: entered allmulticast mode [ 84.897696][ T5612] bridge_slave_1: entered promiscuous mode [ 84.900529][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.900544][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.900574][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.907853][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.914968][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.956025][ T5614] team0: Port device team_slave_0 added [ 84.959531][ T5616] team0: Port device team_slave_0 added [ 84.964554][ T5616] team0: Port device team_slave_1 added [ 84.965294][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.965309][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.965339][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.014308][ T5614] team0: Port device team_slave_1 added [ 85.062430][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.062446][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.062477][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.090718][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.094822][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.143556][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.143576][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.143606][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.145002][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.145017][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.145047][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.234378][ T5611] team0: Port device team_slave_0 added [ 85.244691][ T5615] hsr_slave_0: entered promiscuous mode [ 85.245675][ T5615] hsr_slave_1: entered promiscuous mode [ 85.247570][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.247585][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.247612][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.259399][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.259415][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.259445][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.278802][ T5612] team0: Port device team_slave_0 added [ 85.282078][ T5611] team0: Port device team_slave_1 added [ 85.334693][ T5612] team0: Port device team_slave_1 added [ 85.399808][ T5613] hsr_slave_0: entered promiscuous mode [ 85.400750][ T5613] hsr_slave_1: entered promiscuous mode [ 85.401767][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 85.401837][ T5613] Cannot create hsr debugfs directory [ 85.418567][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.418586][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.418616][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.485521][ T5616] hsr_slave_0: entered promiscuous mode [ 85.486393][ T5616] hsr_slave_1: entered promiscuous mode [ 85.486994][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.487015][ T5616] Cannot create hsr debugfs directory [ 85.489569][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.489585][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.489616][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.493683][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.493699][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.493731][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.497086][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.497102][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.497131][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.712050][ T5614] hsr_slave_0: entered promiscuous mode [ 85.712909][ T5614] hsr_slave_1: entered promiscuous mode [ 85.713496][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.713517][ T5614] Cannot create hsr debugfs directory [ 85.891088][ T5630] Bluetooth: hci1: command tx timeout [ 85.891123][ T5630] Bluetooth: hci5: command tx timeout [ 85.891231][ T52] Bluetooth: hci4: command tx timeout [ 85.891589][ T5618] Bluetooth: hci0: command tx timeout [ 85.920320][ T5611] hsr_slave_0: entered promiscuous mode [ 85.921769][ T5611] hsr_slave_1: entered promiscuous mode [ 85.922740][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 85.922760][ T5611] Cannot create hsr debugfs directory [ 85.932142][ T5612] hsr_slave_0: entered promiscuous mode [ 85.933296][ T5612] hsr_slave_1: entered promiscuous mode [ 85.934171][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 85.934190][ T5612] Cannot create hsr debugfs directory [ 85.971612][ T52] Bluetooth: hci3: command tx timeout [ 85.971639][ T5618] Bluetooth: hci2: command tx timeout [ 86.063450][ T48] cfg80211: failed to load regulatory.db [ 86.413786][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.419644][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.456170][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.458927][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.459869][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.473011][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.499252][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.506056][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.569900][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.577385][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.579949][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.590240][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.593066][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.606186][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.617101][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.620672][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.706615][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.713898][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.730656][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.742165][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.742975][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.748329][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.749436][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.754340][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.832031][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.891825][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.895349][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.896193][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.899828][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.931305][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.938126][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.945416][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.966455][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.970701][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.004236][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.004412][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.007622][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.007699][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.084809][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.144138][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.147638][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.187495][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.190772][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.227215][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.232014][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.232889][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.242704][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.262348][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.326902][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.327013][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.384962][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.385072][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.429784][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.436519][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.449788][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.455230][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.466502][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.467358][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.470850][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.486118][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.507599][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.516786][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.604614][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.608555][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.655459][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.655561][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.689719][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.689826][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.692549][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.692653][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.716682][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.716789][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.905934][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.916484][ T5616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.972460][ T5618] Bluetooth: hci0: command tx timeout [ 87.972500][ T5618] Bluetooth: hci4: command tx timeout [ 87.972527][ T5618] Bluetooth: hci5: command tx timeout [ 87.972554][ T5618] Bluetooth: hci1: command tx timeout [ 88.051329][ T5618] Bluetooth: hci2: command tx timeout [ 88.051467][ T52] Bluetooth: hci3: command tx timeout [ 88.095397][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.137706][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.137838][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.194682][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.226978][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.380681][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.438705][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.438814][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.484297][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.484402][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.573470][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.916999][ T5615] veth0_vlan: entered promiscuous mode [ 88.986734][ T5615] veth1_vlan: entered promiscuous mode [ 89.193615][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.195460][ T5615] veth0_macvtap: entered promiscuous mode [ 89.239705][ T5615] veth1_macvtap: entered promiscuous mode [ 89.369761][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.393958][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.408032][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.453114][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.493534][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.531546][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.531599][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.531643][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.544697][ T5613] veth0_vlan: entered promiscuous mode [ 89.655750][ T5613] veth1_vlan: entered promiscuous mode [ 89.888671][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.888696][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.905437][ T5614] veth0_vlan: entered promiscuous mode [ 89.958605][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.010146][ T5613] veth0_macvtap: entered promiscuous mode [ 90.022672][ T5614] veth1_vlan: entered promiscuous mode [ 90.055637][ T52] Bluetooth: hci1: command tx timeout [ 90.055669][ T52] Bluetooth: hci5: command tx timeout [ 90.055696][ T52] Bluetooth: hci4: command tx timeout [ 90.055722][ T52] Bluetooth: hci0: command tx timeout [ 90.059052][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.059071][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.065517][ T5613] veth1_macvtap: entered promiscuous mode [ 90.108010][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.134256][ T5618] Bluetooth: hci3: command tx timeout [ 90.134293][ T5618] Bluetooth: hci2: command tx timeout [ 90.183729][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.216468][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.239421][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.298128][ T5614] veth0_macvtap: entered promiscuous mode [ 90.368569][ T5614] veth1_macvtap: entered promiscuous mode [ 90.448864][ T5616] veth0_vlan: entered promiscuous mode [ 90.563550][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.584164][ T5616] veth1_vlan: entered promiscuous mode [ 90.637105][ T5612] veth0_vlan: entered promiscuous mode [ 90.654430][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.662155][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664700][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664747][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.365271][ T5616] veth0_macvtap: entered promiscuous mode [ 91.370506][ T5616] veth1_macvtap: entered promiscuous mode [ 91.387760][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.414282][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.476640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.476663][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.483886][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.525141][ T5612] veth1_vlan: entered promiscuous mode [ 91.589741][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.589765][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.611370][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611426][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611470][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611513][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611557][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611601][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611644][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611687][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752928][ T187] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.856273][ T5611] veth0_vlan: entered promiscuous mode [ 91.861936][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.861956][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.899051][ T3380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.899073][ T3380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.903779][ T187] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.907165][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.907217][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.927542][ T187] usb 3-1: config 0 descriptor?? [ 91.943811][ T5612] veth0_macvtap: entered promiscuous mode [ 92.027240][ T5612] veth1_macvtap: entered promiscuous mode [ 92.090035][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.090055][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.118679][ T5611] veth1_vlan: entered promiscuous mode [ 92.181278][ T187] usbhid 3-1:0.0: can't add hid device: -71 [ 92.181390][ T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.239511][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.239533][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.255534][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.260394][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.280356][ T187] usb 3-1: USB disconnect, device number 2 [ 93.144472][ T85] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.144909][ T85] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.145099][ T85] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.145262][ T85] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.316318][ T5611] veth0_macvtap: entered promiscuous mode [ 93.551231][ T187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.725407][ T5611] veth1_macvtap: entered promiscuous mode [ 94.269525][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.269566][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.501008][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 94.595626][ T187] usb 3-1: device descriptor read/all, error -71 [ 94.610307][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.681974][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.692206][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.692226][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.857583][ T5879] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 94.858517][ T5879] CIFS: Attempting to mount //127.0.0.1/share [ 96.021964][ T3380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.022156][ T3380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.022510][ T3380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.110186][ T187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.146148][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.234433][ T5879] CIFS: VFS: cifs_mount failed w/return code = -112 [ 96.274212][ T187] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 96.278139][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 96.278166][ T187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.278215][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.325059][ T187] usb 3-1: config 0 descriptor?? [ 96.578801][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.578849][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.840819][ T5905] CIFS: Attempting to mount //127.0.0.1/share [ 96.951190][ T5757] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.983818][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.983857][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.146264][ T5757] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.224122][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.224351][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.435578][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.435759][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.435887][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.435993][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.436040][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.513072][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.513162][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.513266][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.513328][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.513505][ T187] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 97.754854][ T5905] CIFS: VFS: cifs_mount failed w/return code = -112 [ 97.886248][ T5757] usb 1-1: config 0 descriptor?? [ 97.924793][ T187] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 98.012085][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.035519][ T5911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.512656][ T5757] usbhid 1-1:0.0: can't add hid device: -71 [ 98.512796][ T5757] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 98.579076][ T5757] usb 1-1: USB disconnect, device number 2 [ 98.673909][ T187] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 98.673971][ T187] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 98.705917][ T187] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 98.762748][ T187] usb 3-1: USB disconnect, device number 4 [ 99.952597][ T5757] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.972309][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.130640][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.141244][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.141294][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.197767][ T9] usb 2-1: config 0 descriptor?? [ 101.642464][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 101.643100][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 101.862908][ T9] usb 2-1: USB disconnect, device number 2 [ 101.909685][ T5946] Need at least one configuration in g1. [ 101.920502][ T5946] udc dummy_udc.0: failed to start g1: -22 [ 101.920530][ T5946] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 101.943647][ T5946] UDC core: g1: couldn't find an available UDC or it's busy [ 102.236466][ T5950] CIFS: Attempting to mount //127.0.0.1/share [ 102.322084][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.612516][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 102.619667][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 102.643994][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.644047][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.648578][ T9] usb 2-1: config 0 descriptor?? [ 103.415555][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.419219][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.439564][ T5950] CIFS: VFS: cifs_mount failed w/return code = -112 [ 103.459930][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.591326][ T48] usb 2-1: USB disconnect, device number 3 [ 103.612913][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 103.614149][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.614180][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 103.614208][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 103.614236][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.614261][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.614303][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.629478][ T5954] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.629641][ T5954] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.629849][ T5954] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.647159][ T48] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 103.942666][ T10] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 104.851419][ T5981] CIFS: Attempting to mount //127.0.0.1/share [ 105.175779][ T5980] syzkaller0: entered promiscuous mode [ 105.175888][ T5980] syzkaller0: entered allmulticast mode [ 105.224686][ T5981] CIFS: VFS: cifs_mount failed w/return code = -112 [ 105.321833][ T10] usb 3-1: mos7720: usb_control_msg() failed: -32 [ 105.581261][ T5965] netlink: 168 bytes leftover after parsing attributes in process `syz.0.31'. [ 105.616300][ T10] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 105.654076][ T10] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 105.717894][ T10] usb 3-1: USB disconnect, device number 5 [ 105.718022][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 105.847783][ T10] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 105.870683][ T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 105.895232][ T10] mos7720 3-1:1.0: device disconnected [ 106.012244][ T5985] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 107.137449][ T5999] netlink: 88 bytes leftover after parsing attributes in process `syz.5.40'. [ 107.433854][ T6010] Need at least one configuration in g1. [ 107.433978][ T6010] udc dummy_udc.0: failed to start g1: -22 [ 107.434005][ T6010] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 107.470180][ T6010] UDC core: g1: couldn't find an available UDC or it's busy [ 107.491050][ T5757] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 107.641843][ T5757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.642909][ T5757] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.642946][ T5757] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.642978][ T5757] usb 6-1: config 1 interface 0 has no altsetting 0 [ 107.644810][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.644838][ T5757] usb 6-1: SerialNumber: syz [ 107.856434][ T5757] hub 6-1:1.0: bad descriptor, ignoring hub [ 107.856466][ T5757] hub 6-1:1.0: probe with driver hub failed with error -5 [ 107.876684][ T5757] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 109.975472][ T5757] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 110.521014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.632047][ T5757] usb 6-1: USB disconnect, device number 2 [ 110.871515][ T5344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.060701][ T6024] IPVS: rr: FWM 3 0x00000003 - no destination available [ 111.077278][ T5864] IPVS: starting estimator thread 0... [ 111.874319][ T6026] IPVS: using max 24 ests per chain, 57600 per kthread [ 114.393463][ T6040] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 115.429556][ T6056] CIFS: Attempting to mount //127.0.0.1/share [ 115.483547][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 118.185365][ T6056] CIFS: VFS: cifs_mount failed w/return code = -512 [ 118.197824][ T6061] CIFS: Attempting to mount //127.0.0.1/share [ 118.219992][ T6061] CIFS: VFS: Error connecting to socket. Aborting operation. [ 118.220040][ T6061] CIFS: VFS: cifs_mount failed w/return code = -4 [ 119.118571][ T6077] CIFS: Attempting to mount //127.0.0.1/share [ 119.494834][ T6076] netlink: 'syz.5.58': attribute type 1 has an invalid length. [ 120.010688][ T6077] CIFS: VFS: cifs_mount failed w/return code = -112 [ 120.286751][ T6090] netlink: 88 bytes leftover after parsing attributes in process `syz.0.64'. [ 120.496560][ T6098] CIFS: Attempting to mount //127.0.0.1/share [ 120.626178][ T5625] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 120.745291][ T6094] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 120.783912][ T5625] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.806278][ T5625] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.806317][ T5625] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.806349][ T5625] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.812935][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.812962][ T5625] usb 1-1: SerialNumber: syz [ 120.868471][ T5625] hub 1-1:1.0: bad descriptor, ignoring hub [ 120.868501][ T5625] hub 1-1:1.0: probe with driver hub failed with error -5 [ 120.869126][ T5625] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 121.071559][ T6098] CIFS: VFS: cifs_mount failed w/return code = -112 [ 121.169353][ T5625] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 121.221662][ T5625] usb 1-1: USB disconnect, device number 4 [ 121.271085][ T5757] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.352789][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 123.092897][ T5757] usb 5-1: Using ep0 maxpacket: 8 [ 123.096068][ T5757] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 123.097306][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.145625][ T5757] usb 5-1: config 0 descriptor?? [ 123.176232][ T5757] usb 5-1: probing VID:PID(0424:012C) [ 123.237089][ T5757] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 123.237124][ T5757] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 123.237146][ T5757] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 123.237169][ T5757] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 123.237190][ T5757] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 123.299247][ T6118] CIFS: Attempting to mount //127.0.0.1/share [ 123.696435][ T6118] CIFS: VFS: cifs_mount failed w/return code = -112 [ 124.002361][ T5757] vub300 5-1:0.0: probe with driver vub300 failed with error -71 [ 124.025000][ T5757] usb 5-1: USB disconnect, device number 2 [ 124.191059][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.341815][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.342981][ T9] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.343018][ T9] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.343050][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 124.344077][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.344103][ T9] usb 3-1: SerialNumber: syz [ 124.421080][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 124.421110][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 124.421744][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 124.743697][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 124.793513][ T9] usb 3-1: USB disconnect, device number 7 [ 128.441014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.371599][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.371688][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951121][ T5747] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 133.014822][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.883538][ T5747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.911615][ T5747] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.912680][ T5747] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.912762][ T5747] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.938634][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.938663][ T5747] usb 3-1: SerialNumber: syz [ 134.104828][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 134.132294][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 134.172823][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.173486][ T5747] hub 3-1:1.0: bad descriptor, ignoring hub [ 134.173511][ T5747] hub 3-1:1.0: probe with driver hub failed with error -5 [ 134.219932][ T5747] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 134.225791][ T10] usb 1-1: config 0 descriptor?? [ 134.240297][ T10] usb 1-1: probing VID:PID(0424:012C) [ 134.247540][ T10] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 134.247567][ T10] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 134.247588][ T10] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 134.247610][ T10] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 134.247631][ T10] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 134.400644][ T5747] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 134.692252][ T5747] usb 3-1: USB disconnect, device number 8 [ 134.752604][ T10] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 135.011044][ T10] vub300 1-1:0.0: probe with driver vub300 failed with error -71 [ 135.035407][ T10] usb 1-1: USB disconnect, device number 5 [ 137.501094][ T5757] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 137.623301][ T6199] Need at least one configuration in g1. [ 137.623424][ T6199] udc dummy_udc.0: failed to start g1: -22 [ 137.623448][ T6199] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 137.624326][ T6199] UDC core: g1: couldn't find an available UDC or it's busy [ 138.383747][ T6203] Need at least one configuration in g1. [ 138.383870][ T6203] udc dummy_udc.0: failed to start g1: -22 [ 138.383893][ T6203] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 138.387250][ T6203] UDC core: g1: couldn't find an available UDC or it's busy [ 138.390763][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.444706][ T5757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.446975][ T5757] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.447012][ T5757] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.447044][ T5757] usb 6-1: config 1 interface 0 has no altsetting 0 [ 138.453397][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.453423][ T5757] usb 6-1: SerialNumber: syz [ 138.482462][ T5757] hub 6-1:1.0: bad descriptor, ignoring hub [ 138.482489][ T5757] hub 6-1:1.0: probe with driver hub failed with error -5 [ 138.483196][ T5757] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 138.544964][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.555767][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.555816][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.573131][ T10] usb 4-1: config 0 descriptor?? [ 138.706853][ T5757] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 138.774320][ T5757] usb 6-1: USB disconnect, device number 3 [ 138.860112][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 138.923565][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 138.923671][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 138.936695][ T10] usb 4-1: USB disconnect, device number 2 [ 139.989442][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 140.082075][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.881046][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 140.881774][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 140.885307][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.885355][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.890227][ T10] usb 4-1: config 0 descriptor?? [ 142.241364][ T10] usb 4-1: can't set config #0, error -71 [ 142.250195][ T10] usb 4-1: USB disconnect, device number 3 [ 144.093568][ T6247] CIFS: Attempting to mount //127.0.0.1/share [ 144.252913][ T6247] CIFS: VFS: cifs_mount failed w/return code = -112 [ 144.357063][ T6262] CIFS: Attempting to mount //127.0.0.1/share [ 145.175458][ T6262] CIFS: VFS: cifs_mount failed w/return code = -112 [ 145.840101][ T6266] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 145.863920][ T5625] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.213880][ T5625] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 146.371973][ T5625] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 146.372015][ T5625] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 146.372044][ T5625] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 146.372072][ T5625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.372097][ T5625] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.372159][ T5625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.688376][ T6269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.688532][ T6269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.688674][ T6269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.749603][ T5625] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 147.015078][ T5625] usb 6-1: mos7720: usb_control_msg() failed: -32 [ 147.087165][ T5625] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 147.148615][ T5625] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 147.302689][ T5625] usb 6-1: USB disconnect, device number 4 [ 147.302754][ C1] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 147.508265][ T5625] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 147.535960][ T5625] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 147.539032][ T5625] mos7720 6-1:1.0: device disconnected [ 147.904651][ T6297] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 148.107785][ T6310] netlink: 88 bytes leftover after parsing attributes in process `syz.2.123'. [ 148.351980][ T5625] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 148.512667][ T5625] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.513758][ T5625] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.513794][ T5625] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.513827][ T5625] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.515011][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.515037][ T5625] usb 3-1: SerialNumber: syz [ 148.525353][ T5625] hub 3-1:1.0: bad descriptor, ignoring hub [ 148.525379][ T5625] hub 3-1:1.0: probe with driver hub failed with error -5 [ 148.527494][ T5625] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 149.463992][ T5625] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 149.731669][ T5625] usb 3-1: USB disconnect, device number 9 [ 149.770301][ T9] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 149.894267][ T6340] loop4: detected capacity change from 0 to 512 [ 149.895444][ T6340] EXT4-fs: Ignoring removed nobh option [ 149.928100][ T6340] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 149.955431][ T6340] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.134: attempt to clear invalid blocks 1 len 1 [ 149.955594][ T6340] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 149.981149][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 149.981174][ C1] EXT4-fs (loop4): initial error at time 1789637710: ext4_clear_blocks:876: inode 13 [ 149.981209][ C1] EXT4-fs (loop4): last error at time 1789637710: ext4_clear_blocks:876: inode 13 [ 149.987405][ T6340] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 149.989244][ T6340] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.134: invalid indirect mapped block 1819239214 (level 0) [ 149.989280][ T6340] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 150.009404][ T6340] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.134: invalid indirect mapped block 1819239214 (level 1) [ 150.009439][ T6340] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 150.025544][ T6340] EXT4-fs (loop4): 1 truncate cleaned up [ 150.116679][ T6340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.144193][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.279637][ T6340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.308000][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 150.320302][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.320357][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.320384][ T9] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.320412][ T9] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.351123][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.351175][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.351202][ T9] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.351229][ T9] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.379276][ T6346] fido_id[6346]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 150.430298][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.430327][ T9] usb 6-1: Product: syz [ 150.430345][ T9] usb 6-1: Manufacturer: syz [ 150.430363][ T9] usb 6-1: SerialNumber: syz [ 150.472323][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 150.496395][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 150.521935][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 150.685116][ T5747] usb 6-1: USB disconnect, device number 5 [ 150.716173][ T5747] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 150.753282][ T5747] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 150.759732][ T5747] ti_usb_3410_5052 6-1:2.0: device disconnected [ 151.281560][ T6317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.301277][ T5845] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.112592][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 152.169968][ T5845] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 152.180467][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.291810][ T6380] netlink: Unknown nat attribute (0) [ 152.291848][ T6380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.334983][ T5845] usb 4-1: config 0 descriptor?? [ 152.366716][ T5845] usb 4-1: probing VID:PID(0424:012C) [ 152.368487][ T5845] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 152.388076][ T5845] vub300 4-1:0.0: probe with driver vub300 failed with error -22 [ 152.490295][ T1114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 152.582959][ T6383] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 152.603380][ T48] usb 4-1: USB disconnect, device number 4 [ 153.080072][ T6392] loop0: detected capacity change from 0 to 512 [ 153.089543][ T6392] EXT4-fs: Ignoring removed nobh option [ 153.452313][ T6392] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 153.453508][ T6392] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.146: attempt to clear invalid blocks 1 len 1 [ 153.453545][ T6392] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.456564][ T6392] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 153.456707][ T6392] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.146: invalid indirect mapped block 1819239214 (level 0) [ 153.456738][ T6392] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.461001][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 153.461021][ C1] EXT4-fs (loop0): initial error at time 1789637713: ext4_clear_blocks:876: inode 13 [ 153.461056][ C1] EXT4-fs (loop0): last error at time 1789637713: ext4_free_branches:1023: inode 13 [ 153.513336][ T6392] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.146: invalid indirect mapped block 1819239214 (level 1) [ 153.513390][ T6392] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.545441][ T6392] EXT4-fs (loop0): 1 truncate cleaned up [ 153.600438][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.628530][ T6392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.116716][ T6374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.120392][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 155.238546][ T6411] Need at least one configuration in g1. [ 155.238665][ T6411] udc dummy_udc.0: failed to start g1: -22 [ 155.238689][ T6411] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 155.239524][ T6411] UDC core: g1: couldn't find an available UDC or it's busy [ 156.639243][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 156.639273][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 156.683695][ T6420] syzkaller0: entered promiscuous mode [ 156.683717][ T6420] syzkaller0: entered allmulticast mode [ 156.894924][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 158.208690][ T6430] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 159.424326][ T5625] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 159.980979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.160979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.170982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 160.963736][ T5625] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.965220][ T5625] usb 2-1: config 0 has no interfaces? [ 160.965573][ T6436] CIFS: Attempting to mount //127.0.0.1/share [ 160.999579][ T5625] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.999628][ T5625] usb 2-1: Manufacturer: syz [ 161.008337][ T5625] usb 2-1: config 0 descriptor?? [ 161.125544][ T6436] CIFS: VFS: cifs_mount failed w/return code = -112 [ 161.911294][ T6469] loop3: detected capacity change from 0 to 512 [ 161.919807][ T6469] EXT4-fs: Ignoring removed nobh option [ 163.040354][ T6469] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 163.051537][ T6469] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.165: attempt to clear invalid blocks 1 len 1 [ 163.051573][ T6469] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.056087][ T6469] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.056208][ T6469] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.165: invalid indirect mapped block 1819239214 (level 0) [ 163.056232][ T6469] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.056995][ T6469] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.165: invalid indirect mapped block 1819239214 (level 1) [ 163.057031][ T6469] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.058465][ T6469] EXT4-fs (loop3): 1 truncate cleaned up [ 163.060777][ T6469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.193258][ T6469] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.310211][ T6476] Need at least one configuration in g1. [ 163.317346][ T6476] udc dummy_udc.0: failed to start g1: -22 [ 163.317374][ T6476] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 163.365305][ T6476] UDC core: g1: couldn't find an available UDC or it's busy [ 164.002072][ T5740] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.122943][ T5845] usb 2-1: USB disconnect, device number 4 [ 164.152337][ T5740] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 164.153514][ T5740] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 164.153541][ T5740] usb 3-1: config 1 has no interface number 0 [ 164.157663][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.157691][ T5740] usb 3-1: Product: syz [ 164.157709][ T5740] usb 3-1: Manufacturer: syz [ 164.157727][ T5740] usb 3-1: SerialNumber: syz [ 164.256407][ T5740] usb 3-1: 3:0 : does not exist [ 164.258243][ T5740] usb 3-1: 3:0 : does not exist [ 164.363257][ T6492] Need at least one configuration in g1. [ 164.363384][ T6492] udc dummy_udc.0: failed to start g1: -22 [ 164.363409][ T6492] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.364373][ T6492] UDC core: g1: couldn't find an available UDC or it's busy [ 164.840327][ T6489] Need at least one configuration in g1. [ 164.840482][ T6489] udc dummy_udc.0: failed to start g1: -22 [ 164.840507][ T6489] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.886298][ T6489] UDC core: g1: couldn't find an available UDC or it's busy [ 165.181781][ T5625] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 165.271116][ T5757] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 165.333031][ T5625] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.333962][ T5625] usb 4-1: config 0 has no interfaces? [ 165.335355][ T5625] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.335382][ T5625] usb 4-1: Manufacturer: syz [ 165.369912][ T5625] usb 4-1: config 0 descriptor?? [ 165.621816][ T5757] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.622484][ T5757] usb 6-1: config 0 has no interfaces? [ 165.623909][ T5757] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.623935][ T5757] usb 6-1: Manufacturer: syz [ 166.192315][ T5757] usb 6-1: config 0 descriptor?? [ 167.236112][ T6510] CIFS: Attempting to mount //127.0.0.1/share [ 167.401538][ T6510] CIFS: VFS: cifs_mount failed w/return code = -112 [ 168.333810][ T6521] loop0: detected capacity change from 0 to 512 [ 168.343938][ T6521] EXT4-fs: Ignoring removed nobh option [ 168.649274][ T6521] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 168.672176][ T6521] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.180: attempt to clear invalid blocks 1 len 1 [ 168.672214][ T6521] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 168.674071][ T6521] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.674250][ T6521] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.180: invalid indirect mapped block 1819239214 (level 0) [ 168.674284][ T6521] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 168.674967][ T6521] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.180: invalid indirect mapped block 1819239214 (level 1) [ 168.675004][ T6521] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 168.677250][ T6521] EXT4-fs (loop0): 1 truncate cleaned up [ 168.679693][ T6521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.814324][ T6521] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.896183][ T10] usb 6-1: USB disconnect, device number 6 [ 169.177952][ T5625] usb 4-1: USB disconnect, device number 5 [ 169.997262][ T6533] loop0: detected capacity change from 0 to 512 [ 170.005402][ T6533] EXT4-fs: Ignoring removed nobh option [ 170.508352][ T6533] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 170.508975][ T6533] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.184: attempt to clear invalid blocks 1 len 1 [ 170.509010][ T6533] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.509538][ T6533] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 170.509688][ T6533] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.184: invalid indirect mapped block 1819239214 (level 0) [ 170.509721][ T6533] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.510108][ T6533] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.184: invalid indirect mapped block 1819239214 (level 1) [ 170.510144][ T6533] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 170.510999][ C1] EXT4-fs (loop0): error count since last fsck: 4 [ 170.511021][ C1] EXT4-fs (loop0): initial error at time 1789637731: ext4_clear_blocks:876: inode 13 [ 170.511055][ C1] EXT4-fs (loop0): last error at time 1789637731: ext4_free_branches:1023: inode 13 [ 170.548659][ T6533] EXT4-fs (loop0): 1 truncate cleaned up [ 170.604101][ T6533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.720704][ T6533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.805972][ T5740] usb 3-1: USB disconnect, device number 10 [ 171.938437][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.202167][ T6558] syzkaller0: entered promiscuous mode [ 172.202193][ T6558] syzkaller0: entered allmulticast mode [ 172.281517][ T6560] CIFS: Attempting to mount //127.0.0.1/share [ 172.994589][ T30] audit: type=1800 audit(1789637733.399:2): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.195" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 173.967311][ T6560] CIFS: VFS: cifs_mount failed w/return code = -112 [ 174.691236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.730054][ T5845] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.880083][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 176.001040][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 176.002876][ T5845] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 176.008494][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.018332][ T5845] usb 2-1: config 0 descriptor?? [ 176.034600][ T5845] usb 2-1: probing VID:PID(0424:012C) [ 176.050264][ T5845] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 176.058140][ T5845] vub300 2-1:0.0: probe with driver vub300 failed with error -22 [ 176.119985][ T6599] kernel profiling enabled (shift: 7) [ 176.266701][ T5740] usb 2-1: USB disconnect, device number 5 [ 176.351086][ T5344] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.173753][ T30] audit: type=1800 audit(1789637737.669:3): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.205" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 177.228407][ T30] audit: type=1800 audit(1789637737.699:4): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.206" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 177.228875][ T5344] usb 1-1: Using ep0 maxpacket: 8 [ 177.287094][ T5344] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 177.855776][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.867492][ T5344] usb 1-1: config 0 descriptor?? [ 177.890289][ T5344] usb 1-1: probing VID:PID(0424:012C) [ 177.898441][ T5344] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 177.898468][ T5344] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 177.898490][ T5344] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 177.898512][ T5344] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 177.898533][ T5344] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 178.311853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.570978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.640974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.670988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.237805][ T5344] vub300 1-1:0.0: probe with driver vub300 failed with error -110 [ 180.611124][ T5740] usb 1-1: USB disconnect, device number 6 [ 182.889867][ T6647] futex_wake_op: syz.0.216 tries to shift op by 144; fix this program [ 183.083036][ T5740] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.251784][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 183.312447][ T5740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.312741][ T5740] usb 4-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 183.404563][ T5740] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.404864][ T5740] usb 4-1: config 1 has no interface number 0 [ 183.406145][ T5740] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 183.407418][ T5740] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 183.523508][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.523543][ T5740] usb 4-1: Product: syz [ 183.523561][ T5740] usb 4-1: Manufacturer: syz [ 183.523579][ T5740] usb 4-1: SerialNumber: syz [ 184.763247][ T6658] loop1: detected capacity change from 0 to 512 [ 184.768294][ T6658] EXT4-fs: Ignoring removed nobh option [ 185.450575][ T6658] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 185.472792][ T6658] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.220: attempt to clear invalid blocks 1 len 1 [ 185.472828][ T6658] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 185.476688][ T6658] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 185.476825][ T6658] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.220: invalid indirect mapped block 1819239214 (level 0) [ 185.476849][ T6658] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 185.480985][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 185.481007][ C1] EXT4-fs (loop1): initial error at time 1789637745: ext4_clear_blocks:876: inode 13 [ 185.481042][ C1] EXT4-fs (loop1): last error at time 1789637745: ext4_free_branches:1023: inode 13 [ 185.597177][ T6658] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.220: invalid indirect mapped block 1819239214 (level 1) [ 185.597219][ T6658] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 185.649383][ T6658] EXT4-fs (loop1): 1 truncate cleaned up [ 185.651077][ T6658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.719627][ T6658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.064712][ T5740] usb 4-1: USB disconnect, device number 6 [ 187.284469][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.566794][ T6672] Bluetooth: MGMT ver 1.23 [ 188.329226][ T6676] Need at least one configuration in g1. [ 188.330804][ T6676] udc dummy_udc.0: failed to start g1: -22 [ 188.330909][ T6676] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 188.336435][ T6676] UDC core: g1: couldn't find an available UDC or it's busy [ 188.783024][ T6662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.230470][ T6689] futex_wake_op: syz.5.227 tries to shift op by 144; fix this program [ 190.103337][ T6684] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 190.607743][ T6696] 9p: Bad value for 'wfdno' [ 191.540750][ T6703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.619388][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.619474][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.503607][ T6718] loop2: detected capacity change from 0 to 512 [ 194.511450][ T6718] EXT4-fs: Ignoring removed nobh option [ 194.983710][ T6718] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 195.005622][ T6718] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.235: attempt to clear invalid blocks 1 len 1 [ 195.005650][ T6718] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.007916][ T6718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 195.008035][ T6718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.235: invalid indirect mapped block 1819239214 (level 0) [ 195.008060][ T6718] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.008435][ T6718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.235: invalid indirect mapped block 1819239214 (level 1) [ 195.008462][ T6718] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 195.009633][ T6718] EXT4-fs (loop2): 1 truncate cleaned up [ 195.011462][ T6718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.028955][ T6718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.766981][ T30] audit: type=1800 audit(1789637757.279:5): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 198.225562][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 198.497260][ T6749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 202.299075][ T6778] ALSA: seq fatal error: cannot create timer (-22) [ 203.392619][ T6777] CIFS: Attempting to mount //127.0.0.1/share [ 203.609973][ T6777] CIFS: VFS: cifs_mount failed w/return code = -112 [ 203.692122][ T30] audit: type=1800 audit(1789637764.189:6): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.254" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 205.033928][ T6790] warning: `syz.4.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.415583][ T6795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.141544][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 206.141847][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 206.141877][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 206.214399][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 206.339950][ T6796] ALSA: seq fatal error: cannot create timer (-22) [ 206.365320][ T6800] netlink: 'syz.1.260': attribute type 11 has an invalid length. [ 206.661824][ T5740] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 206.722810][ T6807] Need at least one configuration in g1. [ 206.724666][ T6807] udc dummy_udc.0: failed to start g1: -22 [ 206.725032][ T6807] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 206.730658][ T6807] UDC core: g1: couldn't find an available UDC or it's busy [ 207.581997][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 207.584324][ T5740] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 207.590232][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.686724][ T5740] usb 6-1: config 0 descriptor?? [ 207.701903][ T5740] usb 6-1: probing VID:PID(0424:012C) [ 207.708678][ T5740] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 207.728308][ T5740] vub300 6-1:0.0: probe with driver vub300 failed with error -22 [ 208.258366][ T5740] usb 6-1: USB disconnect, device number 7 [ 208.534211][ T6812] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 209.156857][ T6828] 9p: Bad value for 'wfdno' [ 211.864025][ T5344] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.923287][ T4928] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.261621][ T5344] usb 2-1: Using ep0 maxpacket: 8 [ 213.311387][ T5344] usb 2-1: device descriptor read/all, error -71 [ 214.223779][ T6859] Zero length message leads to an empty skb [ 215.271362][ T6865] netlink: NAT attribute has 8 unknown bytes [ 215.271401][ T6865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.557894][ T6870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.186447][ T6871] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 218.218520][ T6892] futex_wake_op: syz.3.288 tries to shift op by 144; fix this program [ 218.851611][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 219.191591][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.284540][ T10] usb 5-1: config 0 has no interfaces? [ 219.295074][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.295102][ T10] usb 5-1: Manufacturer: syz [ 219.302075][ T30] audit: type=1800 audit(1789637779.819:7): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.284" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 219.337302][ T10] usb 5-1: config 0 descriptor?? [ 219.439793][ T6904] Need at least one configuration in g1. [ 219.439916][ T6904] udc dummy_udc.0: failed to start g1: -22 [ 219.439939][ T6904] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 219.440742][ T6904] UDC core: g1: couldn't find an available UDC or it's busy [ 221.839533][ T6913] vivid-009: kernel_thread() failed [ 221.964485][ T6919] netlink: 'syz.5.293': attribute type 3 has an invalid length. [ 222.245064][ T6924] netlink: 'syz.0.295': attribute type 11 has an invalid length. [ 223.447931][ T5747] usb 5-1: USB disconnect, device number 3 [ 225.295539][ T6944] ALSA: seq fatal error: cannot create timer (-22) [ 226.325402][ T5747] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 226.562292][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 226.563038][ T5747] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 226.568583][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 226.568615][ T5747] usb 5-1: Product: syz [ 226.568633][ T5747] usb 5-1: Manufacturer: syz [ 226.568651][ T5747] usb 5-1: SerialNumber: syz [ 226.602851][ T5747] usb 5-1: config 0 descriptor?? [ 226.631656][ T5747] gspca_main: sq905-2.14.0 probing 2770:9120 [ 226.790622][ T5747] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 226.790714][ T5747] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 226.796351][ T5747] usb 5-1: USB disconnect, device number 4 [ 226.904426][ T6953] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 227.015483][ T6959] UDC core: g1: couldn't find an available UDC or it's busy [ 227.395846][ T5864] IPVS: starting estimator thread 0... [ 227.484260][ T6961] IPVS: using max 24 ests per chain, 57600 per kthread [ 227.731482][ T5845] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 227.814973][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.891757][ T5845] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 227.892817][ T5845] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 227.892843][ T5845] usb 1-1: config 1 has no interface number 0 [ 227.895837][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.895863][ T5845] usb 1-1: Product: syz [ 227.895881][ T5845] usb 1-1: Manufacturer: syz [ 227.895898][ T5845] usb 1-1: SerialNumber: syz [ 227.956408][ T5845] usb 1-1: 3:0 : does not exist [ 227.956435][ T5845] usb 1-1: 3:0 : does not exist [ 228.027475][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 228.045492][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.045542][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 228.048198][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.048226][ T10] usb 2-1: config 1 has no interface number 0 [ 228.048268][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 228.048316][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 228.145228][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.145259][ T10] usb 2-1: Product: syz [ 228.145277][ T10] usb 2-1: Manufacturer: syz [ 228.145295][ T10] usb 2-1: SerialNumber: syz [ 229.316209][ T5845] usb 1-1: USB disconnect, device number 7 [ 229.533335][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.754561][ T30] audit: type=1800 audit(1789637790.239:8): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 230.371054][ T4928] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 230.521784][ T10] usb 2-1: 2:1 : can't get Cluster Descriptor [ 230.885533][ T10] usb 2-1: USB disconnect, device number 8 [ 230.891092][ T6985] FAULT_INJECTION: forcing a failure. [ 230.891092][ T6985] name failslab, interval 1, probability 0, space 0, times 1 [ 230.891128][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) [ 230.891156][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 230.891171][ T6985] Call Trace: [ 230.891181][ T6985] [ 230.891192][ T6985] dump_stack_lvl+0xe8/0x150 [ 230.891237][ T6985] should_fail_ex+0x410/0x560 [ 230.891271][ T6985] ? __alloc_skb+0x1db/0x7a0 [ 230.891302][ T6985] should_failslab+0xa8/0x100 [ 230.891338][ T6985] ? __alloc_skb+0x1db/0x7a0 [ 230.891367][ T6985] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 230.891409][ T6985] ? __alloc_skb+0x18d/0x7a0 [ 230.891446][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.891479][ T6985] ? __alloc_skb+0x1db/0x7a0 [ 230.891518][ T6985] __alloc_skb+0x1db/0x7a0 [ 230.891555][ T6985] tcp_make_synack+0xf4/0x1fd0 [ 230.891601][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.891642][ T6985] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 230.891680][ T6985] ? __pfx_tcp_make_synack+0x10/0x10 [ 230.891720][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.891754][ T6985] ? inet_csk_route_req+0x57/0xe00 [ 230.891800][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.891831][ T6985] ? inet_csk_route_req+0x8b8/0xe00 [ 230.891871][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.891905][ T6985] ? inet_csk_route_req+0x57/0xe00 [ 230.891951][ T6985] tcp_v4_send_synack+0x147/0xb60 [ 230.891983][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892019][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892050][ T6985] ? lockdep_hardirqs_on+0x7b/0x110 [ 230.892078][ T6985] ? get_random_u32+0x13a/0x8b0 [ 230.892111][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892141][ T6985] ? get_random_u32+0x4ce/0x8b0 [ 230.892175][ T6985] ? __pfx_tcp_v4_send_synack+0x10/0x10 [ 230.892213][ T6985] ? __pfx_get_random_u32+0x10/0x10 [ 230.892247][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892277][ T6985] ? __lock_acquire+0x747/0x2de0 [ 230.892313][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892352][ T6985] ? __lock_acquire+0x747/0x2de0 [ 230.892387][ T6985] tcp_rtx_synack+0x19d/0x660 [ 230.892414][ T6985] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 230.892462][ T6985] ? __pfx_tcp_rtx_synack+0x10/0x10 [ 230.892499][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892530][ T6985] ? lock_acquire+0x115/0x350 [ 230.892556][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892587][ T6985] ? tcp_oow_rate_limited+0x22d/0x390 [ 230.892619][ T6985] tcp_check_req+0xb17/0x1fa0 [ 230.892664][ T6985] ? __pfx_tcp_check_req+0x10/0x10 [ 230.892688][ T6985] ? sk_filter_trim_cap+0x192/0xd70 [ 230.892732][ T6985] ? tcp_v4_fill_cb+0x3d/0x4b0 [ 230.892768][ T6985] ? __entry_text_end+0x102035/0x102039 [ 230.892798][ T6985] ? __asan_memmove+0x40/0x70 [ 230.892841][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.892871][ T6985] ? tcp_v4_fill_cb+0x25c/0x4b0 [ 230.892913][ T6985] tcp_v4_rcv+0x183c/0x3170 [ 230.892989][ T6985] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 230.893022][ T6985] ? raw_local_deliver+0x345/0x1010 [ 230.893065][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893098][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893130][ T6985] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 230.893167][ T6985] ip_protocol_deliver_rcu+0x21d/0x440 [ 230.893203][ T6985] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 230.893240][ T6985] ip_local_deliver_finish+0x3bb/0x6f0 [ 230.893283][ T6985] NF_HOOK+0x336/0x3c0 [ 230.893316][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893349][ T6985] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 230.893383][ T6985] ? NF_HOOK+0x9e/0x3c0 [ 230.893415][ T6985] ? __pfx_NF_HOOK+0x10/0x10 [ 230.893458][ T6985] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 230.893493][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893529][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893560][ T6985] ? ip_local_deliver+0x113/0x190 [ 230.893597][ T6985] NF_HOOK+0x336/0x3c0 [ 230.893628][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893662][ T6985] ? __pfx_ip_rcv_finish+0x10/0x10 [ 230.893696][ T6985] ? NF_HOOK+0x9e/0x3c0 [ 230.893728][ T6985] ? __pfx_NF_HOOK+0x10/0x10 [ 230.893764][ T6985] ? __pfx_ip_rcv_finish+0x10/0x10 [ 230.893807][ T6985] ? netif_receive_skb+0x102/0xbf0 [ 230.893833][ T6985] ? __pfx_ip_rcv+0x10/0x10 [ 230.893865][ T6985] netif_receive_skb+0x45b/0xbf0 [ 230.893894][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893928][ T6985] ? __pfx_netif_receive_skb+0x10/0x10 [ 230.893958][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.893989][ T6985] ? rcu_is_watching+0x16/0xb0 [ 230.894020][ T6985] ? tun_rx_batched+0x185/0x790 [ 230.894053][ T6985] tun_rx_batched+0x1de/0x790 [ 230.894089][ T6985] ? __pfx_tun_rx_batched+0x10/0x10 [ 230.894118][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894148][ T6985] ? lock_acquire+0x115/0x350 [ 230.894176][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894213][ T6985] ? tun_get_user+0x23ba/0x44d0 [ 230.894241][ T6985] ? __local_bh_enable_ip+0xd6/0x140 [ 230.894276][ T6985] ? tun_get_user+0x27b0/0x44d0 [ 230.894308][ T6985] tun_get_user+0x2be0/0x44d0 [ 230.894353][ T6985] ? tun_get_user+0x27b0/0x44d0 [ 230.894388][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894418][ T6985] ? aa_file_perm+0x4ed/0x15f0 [ 230.894460][ T6985] ? __pfx_tun_get_user+0x10/0x10 [ 230.894490][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894520][ T6985] ? __lock_acquire+0x747/0x2de0 [ 230.894563][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894594][ T6985] ? ref_tracker_alloc+0x341/0x4b0 [ 230.894630][ T6985] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 230.894665][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894695][ T6985] ? lock_acquire+0x115/0x350 [ 230.894722][ T6985] ? tun_get+0x1c/0x2f0 [ 230.894752][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894787][ T6985] ? tun_get+0x1c/0x2f0 [ 230.894814][ T6985] ? tun_get+0x1c/0x2f0 [ 230.894841][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.894877][ T6985] tun_chr_write_iter+0x113/0x200 [ 230.894909][ T6985] vfs_write+0x612/0xba0 [ 230.894960][ T6985] ? __pfx_vfs_write+0x10/0x10 [ 230.895012][ T6985] ? __fget_files+0x2a/0x420 [ 230.895054][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.895090][ T6985] ksys_write+0x150/0x270 [ 230.895134][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 230.895188][ T6985] do_syscall_64+0x166/0x520 [ 230.895218][ T6985] ? trace_irq_disable+0x3b/0x140 [ 230.895245][ T6985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.895279][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.895305][ T6985] RIP: 0033:0x7f0d9675e98e [ 230.895328][ T6985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.895349][ T6985] RSP: 002b:00007f0d975bdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.895376][ T6985] RAX: ffffffffffffffda RBX: 00007f0d975be6c0 RCX: 00007f0d9675e98e [ 230.895395][ T6985] RDX: 0000000000000036 RSI: 0000200000000740 RDI: 00000000000000c8 [ 230.895412][ T6985] RBP: 00007f0d9683506b R08: 0000000000000000 R09: 0000000000000000 [ 230.895434][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.895450][ T6985] R13: 00007f0d96a26038 R14: 00007f0d96a25fa0 R15: 00007ffc0bd72858 [ 230.895490][ T6985] [ 232.310386][ T6991] ALSA: seq fatal error: cannot create timer (-22) [ 233.998465][ T5344] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.151266][ T5344] usb 3-1: Using ep0 maxpacket: 16 [ 234.224295][ T5344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.226731][ T5344] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 234.282434][ T5344] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.282894][ T5344] usb 3-1: config 1 has no interface number 0 [ 234.285261][ T5344] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 234.287722][ T5344] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 234.405771][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.406161][ T5344] usb 3-1: Product: syz [ 234.406734][ T5344] usb 3-1: Manufacturer: syz [ 234.408042][ T5344] usb 3-1: SerialNumber: syz [ 234.756774][ T7001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.128862][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.222761][ T5344] usb 3-1: can't set config #1, error -71 [ 237.242990][ T5344] usb 3-1: USB disconnect, device number 11 [ 237.354615][ T7019] Need at least one configuration in g1. [ 237.355636][ T7019] udc dummy_udc.0: failed to start g1: -22 [ 237.355712][ T7019] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 237.361838][ T7019] UDC core: g1: couldn't find an available UDC or it's busy [ 239.089227][ T7027] netlink: 'syz.5.328': attribute type 3 has an invalid length. [ 241.191327][ T5625] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 242.230128][ T4928] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 244.652753][ T5625] usb 3-1: device descriptor read/all, error -71 [ 246.691403][ T5845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 246.955376][ T5845] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 246.960481][ T5845] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 246.960507][ T5845] usb 6-1: config 1 has no interface number 0 [ 247.022907][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.022940][ T5845] usb 6-1: Product: syz [ 247.022959][ T5845] usb 6-1: Manufacturer: syz [ 247.022976][ T5845] usb 6-1: SerialNumber: syz [ 247.658114][ T5845] usb 6-1: 3:0 : does not exist [ 247.658144][ T5845] usb 6-1: 3:0 : does not exist [ 248.336236][ T7088] ALSA: seq fatal error: cannot create timer (-22) [ 249.639974][ T5845] usb 6-1: USB disconnect, device number 8 [ 249.863857][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.394851][ T7095] IPVS: rr: FWM 3 0x00000003 - no destination available [ 250.396807][ T6940] IPVS: starting estimator thread 0... [ 250.483886][ T7096] IPVS: using max 24 ests per chain, 57600 per kthread [ 250.517301][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.520690][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.521941][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.524269][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.529852][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.052710][ T7111] loop1: detected capacity change from 0 to 512 [ 251.061075][ T7111] EXT4-fs: Ignoring removed nobh option [ 251.297965][ T7111] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 251.325512][ T7111] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.350: attempt to clear invalid blocks 1 len 1 [ 251.325605][ T7111] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.330600][ T7111] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 251.331085][ T7111] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.350: invalid indirect mapped block 1819239214 (level 0) [ 251.331123][ T7111] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.343977][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 251.343997][ C1] EXT4-fs (loop1): initial error at time 1789637811: ext4_clear_blocks:876: inode 13 [ 251.344032][ C1] EXT4-fs (loop1): last error at time 1789637811: ext4_free_branches:1023: inode 13 [ 251.473549][ T7111] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.350: invalid indirect mapped block 1819239214 (level 1) [ 251.473589][ T7111] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.493519][ T7111] EXT4-fs (loop1): 1 truncate cleaned up [ 251.495605][ T7111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.553900][ T7111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.612087][ T52] Bluetooth: hci6: command tx timeout [ 253.620525][ T7126] ALSA: seq fatal error: cannot create timer (-22) [ 254.634489][ T7133] ALSA: seq fatal error: cannot create timer (-22) [ 255.648587][ T52] Bluetooth: hci6: command tx timeout [ 255.654949][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655007][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903100][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.342537][ T7140] Need at least one configuration in g1. [ 256.342658][ T7140] udc dummy_udc.0: failed to start g1: -22 [ 256.342682][ T7140] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 256.344155][ T7140] UDC core: g1: couldn't find an available UDC or it's busy [ 257.468617][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.679755][ T52] Bluetooth: hci6: command tx timeout [ 258.380378][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.575167][ T7158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.857275][ T7156] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 259.735581][ T52] Bluetooth: hci6: command tx timeout [ 260.607109][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.432178][ T7177] loop0: detected capacity change from 0 to 512 [ 261.433052][ T7177] EXT4-fs: Ignoring removed nobh option [ 265.225990][ T7177] EXT4-fs: error -4 creating inode table initialization thread [ 265.227182][ T7177] EXT4-fs (loop0): mount failed [ 265.673647][ T12] bridge_slave_1: left allmulticast mode [ 265.673688][ T12] bridge_slave_1: left promiscuous mode [ 265.674189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.747656][ T12] bridge_slave_0: left allmulticast mode [ 265.747683][ T12] bridge_slave_0: left promiscuous mode [ 265.747876][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.470257][ T7222] Need at least one configuration in g1. [ 267.471095][ T7222] udc dummy_udc.0: failed to start g1: -22 [ 267.471168][ T7222] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 267.475757][ T7222] UDC core: g1: couldn't find an available UDC or it's busy [ 268.108546][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.204259][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.283797][ T12] bond0 (unregistering): Released all slaves [ 268.919544][ T7210] netlink: 168 bytes leftover after parsing attributes in process `syz.2.368'. [ 272.373486][ T7244] CIFS: Attempting to mount //127.0.0.1/share [ 272.633390][ T7244] CIFS: VFS: \\127.0.0.1 Er ** replaying previous printk message ** [ 272.633390][ T7244] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 272.644450][ T7255] ------------[ cut here ]------------ [ 272.644462][ T7255] server->in_flight == 0 [ 272.644471][ T7255] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1249/0x2b70, CPU#1: cifsd/7255 [ 272.677361][ T7255] Modules linked in: [ 272.681591][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: cifsd Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.690426][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 272.700541][ T7255] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 272.707290][ T7255] Code: de 83 e6 01 31 ff e8 36 c6 b8 fe f6 c3 01 75 0a e8 2c c1 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 1d c1 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d c4 b1 54 0d 01 0f 85 9e 03 00 00 e8 02 c1 b8 fe 49 [ 272.727481][ T7255] RSP: 0018:ffffc900033e7458 EFLAGS: 00010246 [ 272.734257][ T7255] RAX: ffffffff830f02f8 RBX: 1ffff11008a27861 RCX: ffff888028ae1f40 [ 272.742383][ T7255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.750356][ T7255] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 272.760133][ T7255] R10: dffffc0000000000 R11: ffffffff830f3050 R12: ffff88804513c308 [ 272.768171][ T7255] R13: ffffc900033e7520 R14: ffff88804513c000 R15: 0000000000000000 [ 272.776547][ T7255] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 272.785833][ T7255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.792518][ T7255] CR2: 00007f18d9ed8eb8 CR3: 000000005937b000 CR4: 0000000000350ef0 [ 272.800506][ T7255] Call Trace: [ 272.803959][ T7255] [ 272.806957][ T7255] cifs_compound_last_callback+0x181/0x2d0 [ 272.812806][ T7255] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 272.819130][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.825128][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.830793][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.836616][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 272.841192][ T7244] CIFS: VFS: cifs_mount failed w/return code = -103 [ 272.848380][ T7255] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 272.854904][ T7255] cifs_abort_connection+0x949/0xf60 [ 272.860214][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.865957][ T7255] ? __pfx_cifs_abort_connection+0x10/0x10 [ 272.871828][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.877470][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.883264][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 272.888435][ T7255] _cifs_reconnect+0xbba/0x1670 [ 272.893451][ T7255] ? __local_bh_enable_ip+0xd6/0x140 [ 272.898753][ T7255] ? tcp_recvmsg+0x288/0x7f0 [ 272.903394][ T7255] ? rcu_is_watching+0x16/0xb0 [ 272.908183][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.913867][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.918908][ T7255] ? __pfx__cifs_reconnect+0x10/0x10 [ 272.924236][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.930251][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.936212][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.942007][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 272.947141][ T7255] cifs_readv_from_socket+0x78b/0x8e0 [ 272.952588][ T7255] cifs_demultiplex_thread+0x53a/0x3310 [ 272.958155][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.963880][ T7255] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 272.969882][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.975588][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.980635][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 272.986057][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 272.991480][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.997129][ T7255] ? __lock_acquire+0x747/0x2de0 [ 273.002147][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.007788][ T7255] ? __kthread_parkme+0x199/0x1f0 [ 273.012865][ T7255] kthread+0x38b/0x480 [ 273.016939][ T7255] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 273.022943][ T7255] ? __pfx_kthread+0x10/0x10 [ 273.027520][ T7255] ret_from_fork+0x514/0xb70 [ 273.032530][ T7255] ? __pfx_ret_from_fork+0x10/0x10 [ 273.037917][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.043620][ T7255] ? __switch_to+0xc89/0x1420 [ 273.048317][ T7255] ? __pfx_kthread+0x10/0x10 [ 273.053040][ T7255] ret_from_fork_asm+0x1a/0x30 [ 273.057846][ T7255] [ 273.060862][ T7255] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.068135][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: cifsd Not tainted syzkaller #0 PREEMPT(full) [ 273.076980][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 273.087035][ T7255] Call Trace: [ 273.090311][ T7255] [ 273.093242][ T7255] vpanic+0x56d/0xa60 [ 273.097246][ T7255] ? __pfx__printk+0x10/0x10 [ 273.101836][ T7255] ? __pfx_vpanic+0x10/0x10 [ 273.106353][ T7255] ? is_bpf_text_address+0x292/0x2b0 [ 273.111658][ T7255] ? is_bpf_text_address+0x26/0x2b0 [ 273.116876][ T7255] panic+0xc5/0xd0 [ 273.120612][ T7255] ? __pfx_panic+0x10/0x10 [ 273.125062][ T7255] ? ret_from_fork_asm+0x1a/0x30 [ 273.130025][ T7255] __warn+0x315/0x4c0 [ 273.134054][ T7255] ? smb2_add_credits+0x1249/0x2b70 [ 273.139267][ T7255] ? smb2_add_credits+0x1249/0x2b70 [ 273.144650][ T7255] __report_bug+0x276/0x570 [ 273.149163][ T7255] ? kthread+0x38b/0x480 [ 273.153403][ T7255] ? ret_from_fork+0x514/0xb70 [ 273.158164][ T7255] ? ret_from_fork_asm+0x1a/0x30 [ 273.163112][ T7255] ? smb2_add_credits+0x1249/0x2b70 [ 273.168313][ T7255] ? __pfx___report_bug+0x10/0x10 [ 273.173332][ T7255] ? __lock_acquire+0x747/0x2de0 [ 273.178282][ T7255] ? smb2_add_credits+0x1249/0x2b70 [ 273.183479][ T7255] report_bug+0x16b/0x220 [ 273.187813][ T7255] ? smb2_add_credits+0x1249/0x2b70 [ 273.193005][ T7255] ? smb2_add_credits+0x124b/0x2b70 [ 273.198198][ T7255] handle_bug+0x9c/0x200 [ 273.202447][ T7255] exc_invalid_op+0x1a/0x50 [ 273.206952][ T7255] asm_exc_invalid_op+0x1a/0x20 [ 273.211793][ T7255] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 273.217595][ T7255] Code: de 83 e6 01 31 ff e8 36 c6 b8 fe f6 c3 01 75 0a e8 2c c1 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 1d c1 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d c4 b1 54 0d 01 0f 85 9e 03 00 00 e8 02 c1 b8 fe 49 [ 273.237223][ T7255] RSP: 0018:ffffc900033e7458 EFLAGS: 00010246 [ 273.243322][ T7255] RAX: ffffffff830f02f8 RBX: 1ffff11008a27861 RCX: ffff888028ae1f40 [ 273.251291][ T7255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.259257][ T7255] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 273.267215][ T7255] R10: dffffc0000000000 R11: ffffffff830f3050 R12: ffff88804513c308 [ 273.275201][ T7255] R13: ffffc900033e7520 R14: ffff88804513c000 R15: 0000000000000000 [ 273.283171][ T7255] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 273.289067][ T7255] ? smb2_add_credits+0x3f8/0x2b70 [ 273.294184][ T7255] ? smb2_add_credits+0x3f8/0x2b70 [ 273.299314][ T7255] cifs_compound_last_callback+0x181/0x2d0 [ 273.305127][ T7255] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 273.311456][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.317088][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.322718][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.328345][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 273.333458][ T7255] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 273.339792][ T7255] cifs_abort_connection+0x949/0xf60 [ 273.345084][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.350721][ T7255] ? __pfx_cifs_abort_connection+0x10/0x10 [ 273.356530][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.362168][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.367796][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 273.372911][ T7255] _cifs_reconnect+0xbba/0x1670 [ 273.377762][ T7255] ? __local_bh_enable_ip+0xd6/0x140 [ 273.383072][ T7255] ? tcp_recvmsg+0x288/0x7f0 [ 273.387666][ T7255] ? rcu_is_watching+0x16/0xb0 [ 273.392433][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.398059][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.403085][ T7255] ? __pfx__cifs_reconnect+0x10/0x10 [ 273.408371][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.413998][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.419630][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.425264][ T7255] ? do_raw_spin_unlock+0xf5/0x200 [ 273.430383][ T7255] cifs_readv_from_socket+0x78b/0x8e0 [ 273.435821][ T7255] cifs_demultiplex_thread+0x53a/0x3310 [ 273.441386][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.447060][ T7255] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 273.453051][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.458679][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.463706][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.469109][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.474488][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.480114][ T7255] ? __lock_acquire+0x747/0x2de0 [ 273.485090][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.490717][ T7255] ? __kthread_parkme+0x199/0x1f0 [ 273.495750][ T7255] kthread+0x38b/0x480 [ 273.499813][ T7255] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 273.505791][ T7255] ? __pfx_kthread+0x10/0x10 [ 273.510377][ T7255] ret_from_fork+0x514/0xb70 [ 273.514962][ T7255] ? __pfx_ret_from_fork+0x10/0x10 [ 273.520064][ T7255] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.525690][ T7255] ? __switch_to+0xc89/0x1420 [ 273.530371][ T7255] ? __pfx_kthread+0x10/0x10 [ 273.534954][ T7255] ret_from_fork_asm+0x1a/0x30 [ 273.539773][ T7255] [ 273.542991][ T7255] Kernel Offset: disabled [ 273.547300][ T7255] Rebooting in 86400 seconds..