last executing test programs: 9m43.025784761s ago: executing program 2 (id=3): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 9m41.812134932s ago: executing program 2 (id=7): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) lchown(&(0x7f0000000040)='.\x02\x00', r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x10, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0xff]}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x800) mkdir(0x0, 0x12) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) getdents64(r2, 0x0, 0x0) 9m40.477403044s ago: executing program 2 (id=8): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = socket$inet6(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}], 0x1, 0x10120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 9m39.283146078s ago: executing program 2 (id=9): creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) migrate_pages(0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x80, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffeffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a000006"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) write(r3, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 9m37.060007478s ago: executing program 2 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) 9m21.362179852s ago: executing program 32 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) 8m11.697874624s ago: executing program 4 (id=122): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)={0x6, 0x10, [0xa1, 0xa4f2, 0x6, 0x4]}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d0000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000cd7000/0x4000)=nil, 0x2000, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) 8m8.456612058s ago: executing program 4 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) 8m8.120757718s ago: executing program 4 (id=131): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0x8000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e220064"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e}, 0x28) 8m5.546555994s ago: executing program 4 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000680), 0x1006, r1}, 0x38) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000010201040000010000000000020000071800028014000180080001"], 0x2c}}, 0x800) 8m3.642804717s ago: executing program 4 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0xffffffffffffffd3, &(0x7f00000002c0)=0x20000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, 0x0) 8m0.624822281s ago: executing program 4 (id=142): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x40, 0x0) ptrace$cont(0x20, r0, 0x200, 0x7) socket$inet6_sctp(0xa, 0x0, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) 7m45.144549877s ago: executing program 33 (id=142): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x40, 0x0) ptrace$cont(0x20, r0, 0x200, 0x7) socket$inet6_sctp(0xa, 0x0, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) 6m32.594734665s ago: executing program 3 (id=295): unshare(0x2a020480) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 6m29.258349037s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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") symlink(0x0, 0x0) lstat(0x0, &(0x7f0000003980)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfffffdcf) 6m28.15262413s ago: executing program 3 (id=299): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, &(0x7f0000000300)=""/227, 0xe3) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_disconnect(r0) 6m22.965131846s ago: executing program 3 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x126) 6m21.917968078s ago: executing program 3 (id=308): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m19.302995802s ago: executing program 3 (id=312): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='12345678-123445', 0xf, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, 0x0, 0x0, 0xd2b) pwrite64(r0, &(0x7f0000000140)="9e6f6e66696794cc33fa6921a02f32aea4dec397d9a8947b7fd088586bbe39d4bfff67a7d15c3ecd84bb0d17fab1b9b33127612ff1263956a156bd35d98d0fd5a76894822452853dd51383751db92afd7a", 0x51, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 6m18.207869611s ago: executing program 34 (id=312): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='12345678-123445', 0xf, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, 0x0, 0x0, 0xd2b) pwrite64(r0, &(0x7f0000000140)="9e6f6e66696794cc33fa6921a02f32aea4dec397d9a8947b7fd088586bbe39d4bfff67a7d15c3ecd84bb0d17fab1b9b33127612ff1263956a156bd35d98d0fd5a76894822452853dd51383751db92afd7a", 0x51, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2m48.688114691s ago: executing program 0 (id=628): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0xc, 0xffffffffffffffff, 0xffffffff}, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2m48.044115951s ago: executing program 0 (id=630): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0x8000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) 2m47.759338442s ago: executing program 0 (id=631): timer_create(0x2, 0x0, &(0x7f00000006c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}}, &(0x7f0000000740)) 2m47.383361218s ago: executing program 0 (id=633): socket$kcm(0x29, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_cancel(0x0, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x1, 0xf5, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0) 2m45.184733813s ago: executing program 0 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) pread64(r1, &(0x7f0000000380)=""/78, 0x4e, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m42.94538987s ago: executing program 0 (id=641): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r3 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) epoll_create1(0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 2m27.199805802s ago: executing program 35 (id=641): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r3 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) epoll_create1(0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 14.671257973s ago: executing program 5 (id=809): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000edc4000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000c4ed0000ffffffff00000000"]}, 0x108) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x402, 0x12) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="86ae7ae3f53aca5aeb6857b9d7b9168397711407f5f2f321ac655cebc266df84a71e8fae0b882d1774158b2387b42d774f626a032b9d5f5cb82baa3e87bfb7ffe66beef9013c745a7d7a83e2a691930d76b0b6c1f1fafe93df29e90815c93b3e8900ecacea2ceca61f069467a12881287788afc70d6e781aa474c48b55c927b5b83e399df649a39809f747ec7cc66666209149880d48753d35013e3bc5baee77619d809ea651a1ddb29e45de8c10bcca2c5f69e5", 0xb4}, {&(0x7f0000000700)="74adf3039f01162cdc1a938f34b0b90309078b4ee0e55382d9129e0af8b38412ac8b4f94557c7ecb0f48c1a8ab58f94cb6bc87", 0x33}, {&(0x7f0000000b00)="5f7e2deeac0f820d8bfa26c88de87bdc8af5b1d77e728715a413495407edc4643bec20d2742f92154f68a088c444dea64d7d0e6684fff07d2db5b6867d263bda1fb1b81b1c36de1f2d2496bd42f3879bdba96c301a58a7c040afa35ebcc46e497787d8f2535e23672611b9c9ad3cfac2c663130aecb703e4f3a2b3a840f92a53b090453fadd72f313c2bd14ba2ffbbbbea0b9d2fa2982f5fa7ce6d5220fb3840b562744b51f25bf49ce298a13d828abcd1444eecbec18b5c166bf462b9239fa120ecdd47d4e1aa87da2b741301337b152d8e832325dbf74846e84e2c9cf0", 0xde}, {&(0x7f0000000c00)="a569c7a3b986842901051774d47b89ba6490be1a2c6cc4cbd2182db962514511d48fa12066975e945e0b5a1e173fbddfacef8efff0d5009507074c112295c65a8a9c", 0x42}], 0x4}, 0xc851) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x279, @remote}}, 0x1000, 0xffff}, 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r3], 0x20) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 10.36587034s ago: executing program 5 (id=813): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x20, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x20}}, 0x20000000) 9.037164892s ago: executing program 5 (id=815): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)={0x6, 0x10, [0xa1, 0xa4f2, 0x6, 0x4]}) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d0000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x4) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000cd7000/0x4000)=nil, 0x2000, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) 7.545999428s ago: executing program 5 (id=817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 6.913455848s ago: executing program 5 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x20000844) mount(0x0, &(0x7f0000000100)='./configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='0x0', 0x3) 5.978670958s ago: executing program 1 (id=819): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x43000002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f0000000000)="5a0003", 0x3) listen(0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)}], 0x2) 4.179505134s ago: executing program 5 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xd, 0x2, 0x0, 0x0, @binary="81555deb70e322dba3"}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.78211142s ago: executing program 1 (id=821): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000edc4000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000c4ed0000ffffffff00000000"]}, 0x108) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x402, 0x12) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc851) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x279, @remote}}, 0x1000, 0xffff}, 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r3], 0x20) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 3.00078123s ago: executing program 1 (id=822): socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000004180)={0x0, 0x7, 0x80}) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d, 0x10000}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x200000003ff}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x14d4a1, 0xa2) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1.797920345s ago: executing program 1 (id=823): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0), 0x0, 0x0) gettid() pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 320.76531ms ago: executing program 1 (id=824): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, 0x0, 0x0, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-123', 0xc, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000140)="9e6f6e66696794cc33fa6921a02f32aea4dec397d9a8947b7fd088586bbe39d4bfff67a7d15c3ecd84bb0d17fab1b9b33127612ff1263956a156bd35d98d0fd5a76894822452853dd51383751db92afd7a", 0x51, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 0s ago: executing program 1 (id=825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(0x0, 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r8, @ANYBLOB="79a9"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): roblem. [ 344.907231][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 345.028263][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.423518][ T5636] Bluetooth: hci5: command tx timeout [ 345.518622][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 345.645468][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.661313][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.739407][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.627879][ T4926] Bluetooth: hci5: command tx timeout [ 347.676224][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.412507][ T4976] udevd[4976]: worker [5637] /devices/virtual/block/nbd0 is taking a long time [ 349.472669][ T4976] udevd[4976]: worker [6206] /devices/virtual/block/nbd1 is taking a long time [ 349.481686][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.573971][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.616658][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.633259][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.707219][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.102534][ T7375] hsr_slave_0: entered promiscuous mode [ 350.133533][ T7375] hsr_slave_1: entered promiscuous mode [ 350.147132][ T7375] debugfs: 'hsr0' already exists in 'hsr' [ 350.168048][ T7375] Cannot create hsr debugfs directory [ 350.226962][ T7399] hsr_slave_0: entered promiscuous mode [ 350.249263][ T7399] hsr_slave_1: entered promiscuous mode [ 350.270011][ T7399] debugfs: 'hsr0' already exists in 'hsr' [ 350.296622][ T7399] Cannot create hsr debugfs directory [ 350.315610][ T7622] lo speed is unknown, defaulting to 1000 [ 351.854341][ T7713] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 352.127712][ T6300] bridge_slave_1: left allmulticast mode [ 352.134775][ T6300] bridge_slave_1: left promiscuous mode [ 352.142970][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.160399][ T6300] bridge_slave_0: left allmulticast mode [ 352.166539][ T6300] bridge_slave_0: left promiscuous mode [ 352.176761][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.499161][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.512787][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.523874][ T6300] bond0 (unregistering): Released all slaves [ 352.669873][ T7713] CIFS: VFS: cifs_mount failed w/return code = -112 [ 352.813286][ T6300] hsr_slave_0: left promiscuous mode [ 354.325785][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 354.335591][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 90 seconds [ 354.336926][ T6300] hsr_slave_1: left promiscuous mode [ 354.347491][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 90 seconds [ 354.362661][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 90 seconds [ 354.373671][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 90 seconds [ 354.398413][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.538591][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.552472][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.560018][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.587183][ T7732] Invalid ELF header type: 3 != 1 [ 354.648398][ T6300] veth1_macvtap: left promiscuous mode [ 354.662122][ T6300] veth0_macvtap: left promiscuous mode [ 354.676324][ T6300] veth1_vlan: left promiscuous mode [ 354.681713][ T6300] veth0_vlan: left promiscuous mode [ 355.097995][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 355.125867][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 355.364962][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'. [ 358.237802][ T7399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 358.287380][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.260994][ T7399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 360.246878][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.255451][ T7399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 360.715594][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.823434][ T7764] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 360.926001][ T7399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 360.991014][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.653646][ T7764] CIFS: VFS: Error connecting to socket. Aborting operation. [ 361.762022][ T7764] CIFS: VFS: cifs_mount failed w/return code = -4 [ 362.107944][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.169497][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.380381][ T7622] bridge_slave_0: entered allmulticast mode [ 362.579699][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 362.776852][ T7622] bridge_slave_0: entered promiscuous mode [ 363.822650][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.017534][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.292103][ T7622] bridge_slave_1: entered allmulticast mode [ 364.424094][ T7622] bridge_slave_1: entered promiscuous mode [ 364.636549][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.766545][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.864442][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.885294][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.893923][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.907272][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.915216][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.008076][ T4926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.023230][ T4926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.032871][ T4926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.043452][ T4926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.257422][ T4926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.468641][ T7622] team0: Port device team_slave_0 added [ 365.521975][ T7622] team0: Port device team_slave_1 added [ 365.928170][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.956183][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.054679][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.231968][ T7823] siw: device registration error -23 [ 366.986022][ T4926] Bluetooth: hci1: command tx timeout [ 367.266409][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.294573][ T4926] Bluetooth: hci7: command tx timeout [ 367.398617][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.550327][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.254396][ T7622] hsr_slave_0: entered promiscuous mode [ 368.291307][ T7622] hsr_slave_1: entered promiscuous mode [ 368.325804][ T6300] bridge_slave_1: left allmulticast mode [ 368.350502][ T6300] bridge_slave_1: left promiscuous mode [ 368.380392][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.418491][ T6300] bridge_slave_0: left allmulticast mode [ 368.440687][ T6300] bridge_slave_0: left promiscuous mode [ 369.052347][ T4926] Bluetooth: hci1: command tx timeout [ 369.304928][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.372355][ T4926] Bluetooth: hci7: command tx timeout [ 371.317701][ T4926] Bluetooth: hci1: command tx timeout [ 371.323785][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 150 seconds [ 371.336826][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 150 seconds [ 371.347919][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 150 seconds [ 371.453496][ T5636] Bluetooth: hci7: command tx timeout [ 371.566346][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.617222][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.655243][ T6300] bond0 (unregistering): Released all slaves [ 372.182709][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 372.498589][ T7802] lo speed is unknown, defaulting to 1000 [ 372.850591][ T6300] hsr_slave_0: left promiscuous mode [ 372.870255][ T6300] hsr_slave_1: left promiscuous mode [ 372.886067][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.920455][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.372262][ T5636] Bluetooth: hci1: command tx timeout [ 373.444999][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 373.534154][ T5636] Bluetooth: hci7: command tx timeout [ 373.540552][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 374.087083][ T7880] futex_wake_op: syz.5.405 tries to shift op by 144; fix this program [ 377.476717][ T7807] lo speed is unknown, defaulting to 1000 [ 377.614077][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 379.411729][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.419928][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.982092][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 385.424764][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 120 seconds [ 385.435691][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 120 seconds [ 385.446857][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 120 seconds [ 385.458715][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 120 seconds [ 385.591093][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 386.942703][ T5344] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 387.306961][ T5344] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 387.480699][ T5344] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 387.694218][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.725066][ T5344] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.800521][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.971266][ T7802] bridge_slave_0: entered allmulticast mode [ 387.997360][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.127366][ T5344] usb 2-1: Product: syz [ 388.229772][ T5344] usb 2-1: Manufacturer: syz [ 388.300725][ T7802] bridge_slave_0: entered promiscuous mode [ 388.339784][ T5344] usb 2-1: SerialNumber: syz [ 388.593830][ T5344] usb 2-1: config 0 descriptor?? [ 388.875814][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.908386][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.940776][ T5344] usb 2-1: can't set config #0, error -71 [ 388.953787][ T7802] bridge_slave_1: entered allmulticast mode [ 389.000595][ T5344] usb 2-1: USB disconnect, device number 6 [ 389.041421][ T7802] bridge_slave_1: entered promiscuous mode [ 389.414002][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 390.451061][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.505302][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.698312][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 392.149331][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 392.230284][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.240175][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.249077][ T7807] bridge_slave_0: entered allmulticast mode [ 392.260528][ T7807] bridge_slave_0: entered promiscuous mode [ 392.270498][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.278038][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.288479][ T7807] bridge_slave_1: entered allmulticast mode [ 392.298866][ T7807] bridge_slave_1: entered promiscuous mode [ 392.310204][ T7802] team0: Port device team_slave_0 added [ 392.324287][ T7802] team0: Port device team_slave_1 added [ 392.353758][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 392.385218][ T43] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 392.422575][ T43] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 392.454015][ T43] usb 6-1: config 220 has no interface number 2 [ 392.471615][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.472384][ T43] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 392.484948][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.525495][ T7802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.532225][ T43] usb 6-1: config 220 interface 0 has no altsetting 0 [ 392.563846][ T43] usb 6-1: config 220 interface 76 has no altsetting 0 [ 392.591423][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.592228][ T43] usb 6-1: config 220 interface 1 has no altsetting 0 [ 392.625744][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.643487][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.648896][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.662597][ T43] usb 6-1: Product: syz [ 392.669038][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.675060][ T43] usb 6-1: Manufacturer: syz [ 392.722227][ T7802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.762368][ T43] usb 6-1: SerialNumber: syz [ 392.896089][ T7622] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.910443][ T7622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.034148][ T43] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 393.056190][ T43] uvcvideo 6-1:220.0: No valid video chain found. [ 393.066735][ T43] usb 6-1: selecting invalid altsetting 0 [ 393.113283][ T7622] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.117901][ T43] usb 6-1: selecting invalid altsetting 0 [ 393.139067][ T43] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 393.148123][ T7622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.175586][ T43] usb 6-1: USB disconnect, device number 7 [ 393.176394][ T7622] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.217917][ T7622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.286377][ T6300] bridge_slave_1: left allmulticast mode [ 393.306478][ T6300] bridge_slave_1: left promiscuous mode [ 393.322747][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.367556][ T6300] bridge_slave_0: left allmulticast mode [ 393.384234][ T6300] bridge_slave_0: left promiscuous mode [ 393.399617][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.676924][ T6300] bridge_slave_1: left allmulticast mode [ 394.653093][ T6300] bridge_slave_1: left promiscuous mode [ 394.674751][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.771328][ T6300] bridge_slave_0: left allmulticast mode [ 394.821110][ T6300] bridge_slave_0: left promiscuous mode [ 394.877770][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.741889][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.928177][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 400.136805][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.174912][ T6300] bond0 (unregistering): Released all slaves [ 400.295760][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.311529][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.322472][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.338182][ T8030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 400.355228][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.364902][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.555651][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.590463][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.615974][ T6300] bond0 (unregistering): Released all slaves [ 400.657457][ T7807] team0: Port device team_slave_0 added [ 400.691874][ T7802] hsr_slave_0: entered promiscuous mode [ 400.723256][ T7802] hsr_slave_1: entered promiscuous mode [ 400.736621][ T7802] debugfs: 'hsr0' already exists in 'hsr' [ 400.746439][ T7802] Cannot create hsr debugfs directory [ 400.808088][ T7622] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.852127][ T7622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.864145][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 401.095348][ T6300] hsr_slave_0: left promiscuous mode [ 401.145379][ T6300] hsr_slave_1: left promiscuous mode [ 401.163663][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.185383][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.224954][ T6300] hsr_slave_0: left promiscuous mode [ 401.258715][ T6300] hsr_slave_1: left promiscuous mode [ 401.273610][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.294093][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.624441][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 180 seconds [ 401.635377][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 180 seconds [ 401.647310][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 180 seconds [ 401.945330][ T5344] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 402.283234][ T5344] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 402.459617][ T5636] Bluetooth: hci4: command tx timeout [ 402.491246][ T5344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.512893][ T5344] usb 6-1: Product: syz [ 402.643887][ T5344] usb 6-1: Manufacturer: syz [ 402.653211][ T5344] usb 6-1: SerialNumber: syz [ 402.665491][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 402.687258][ T5344] usb 6-1: config 0 descriptor?? [ 402.720781][ T5344] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 402.737749][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 403.966072][ T8058] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 404.000105][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 404.010359][ T8058] CIFS: VFS: Error connecting to socket. Aborting operation. [ 404.030742][ T8058] CIFS: VFS: cifs_mount failed w/return code = -111 [ 404.043871][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 404.256183][ T7807] team0: Port device team_slave_1 added [ 404.492550][ T5636] Bluetooth: hci4: command tx timeout [ 404.532081][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.576200][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.665610][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.748032][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.774263][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.834403][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.915776][ T1212] usb 6-1: USB disconnect, device number 8 [ 406.316610][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 406.573963][ T5636] Bluetooth: hci4: command tx timeout [ 407.021515][ T8029] lo speed is unknown, defaulting to 1000 [ 407.063159][ T7807] hsr_slave_0: entered promiscuous mode [ 407.085435][ T7807] hsr_slave_1: entered promiscuous mode [ 407.103931][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 407.133574][ T7807] Cannot create hsr debugfs directory [ 407.958125][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16 [ 408.286414][ T8110] futex_wake_op: syz.0.448 tries to shift op by 144; fix this program [ 408.663773][ T5636] Bluetooth: hci4: command tx timeout [ 411.755414][ T7802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.788601][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.808493][ T8115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.454'. [ 411.863174][ T7802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.905177][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.933175][ T7802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.981486][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.375683][ T7802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.402432][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.422877][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.457'. [ 413.700369][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 414.362608][ T5773] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 414.653890][ T5773] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 414.780614][ T5773] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 414.889301][ T5773] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.993224][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 415.071145][ T5773] usb 1-1: Product: syz [ 415.107764][ T5773] usb 1-1: Manufacturer: syz [ 415.153218][ T5773] usb 1-1: SerialNumber: syz [ 415.404886][ T5773] usb 1-1: config 0 descriptor?? [ 415.702406][ T8148] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 150 seconds [ 415.727067][ T8148] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 150 seconds [ 415.767647][ T8148] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 150 seconds [ 415.811725][ T8148] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 150 seconds [ 415.871990][ T5773] usb 1-1: selecting invalid altsetting 0 [ 417.490749][ T5773] usb 1-1: USB disconnect, device number 6 [ 419.002257][ T6300] bridge_slave_1: left allmulticast mode [ 419.029161][ T6300] bridge_slave_1: left promiscuous mode [ 419.062360][ T12] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 419.086732][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.147659][ T6300] bridge_slave_0: left allmulticast mode [ 419.171891][ T8169] nvme nvme7: creating 2 I/O queues. [ 419.184377][ T6300] bridge_slave_0: left promiscuous mode [ 419.200098][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.247266][ T8169] nvme nvme7: new ctrl: "testsubsys" [ 419.725427][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.796450][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.838322][ T6300] bond0 (unregistering): Released all slaves [ 419.849788][ T8193] loop0: detected capacity change from 0 to 8 [ 421.221486][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.232467][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.239694][ T8029] bridge_slave_0: entered allmulticast mode [ 421.251293][ T8029] bridge_slave_0: entered promiscuous mode [ 421.262015][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.278175][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.286142][ T8029] bridge_slave_1: entered allmulticast mode [ 421.294430][ T8029] bridge_slave_1: entered promiscuous mode [ 422.108206][ T8208] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 423.018202][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.470'. [ 424.166723][ T1212] lo speed is unknown, defaulting to 1000 [ 424.605261][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.991645][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.004058][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.013364][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.025079][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.034967][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.112440][ T6300] hsr_slave_0: left promiscuous mode [ 425.219911][ T6300] hsr_slave_1: left promiscuous mode [ 425.268365][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.352983][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.398636][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.414070][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.424708][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.435815][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.446313][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.604459][ T8240] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 426.428255][ T8240] CIFS: VFS: Error connecting to socket. Aborting operation. [ 426.473018][ T8240] CIFS: VFS: cifs_mount failed w/return code = -4 [ 426.620922][ T141] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 426.641979][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 426.681686][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 426.691036][ T8254] nvme nvme8: creating 2 I/O queues. [ 426.727901][ T8254] nvme nvme8: new ctrl: "testsubsys" [ 427.134208][ T5636] Bluetooth: hci5: command tx timeout [ 427.294312][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.336522][ T8269] loop0: detected capacity change from 0 to 8 [ 427.545510][ T5636] Bluetooth: hci6: command tx timeout [ 428.336529][ T8029] team0: Port device team_slave_0 added [ 428.386538][ T8029] team0: Port device team_slave_1 added [ 428.624294][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 428.939154][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.888235][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.889485][ T5636] Bluetooth: hci5: command tx timeout [ 429.915075][ T4926] Bluetooth: hci6: command tx timeout [ 429.955264][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.060631][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.151608][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.942774][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 210 seconds [ 431.954241][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 210 seconds [ 431.962262][ T4926] Bluetooth: hci6: command tx timeout [ 431.966410][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 210 seconds [ 431.971512][ T5640] Bluetooth: hci5: command tx timeout [ 432.022367][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.400616][ T8029] hsr_slave_0: entered promiscuous mode [ 432.441636][ T8029] hsr_slave_1: entered promiscuous mode [ 432.796307][ T8225] lo speed is unknown, defaulting to 1000 [ 434.012634][ T5636] Bluetooth: hci6: command tx timeout [ 434.018910][ T5640] Bluetooth: hci5: command tx timeout [ 434.220227][ T8229] lo speed is unknown, defaulting to 1000 [ 436.115627][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 437.556069][ T8342] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 439.278551][ T8342] CIFS: VFS: cifs_mount failed w/return code = -112 [ 439.376016][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.492370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.317877][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 443.111547][ T8388] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 443.188425][ T6300] bridge_slave_1: left allmulticast mode [ 443.199130][ T6300] bridge_slave_1: left promiscuous mode [ 443.211270][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.253679][ T6300] bridge_slave_0: left allmulticast mode [ 443.266836][ T6300] bridge_slave_0: left promiscuous mode [ 443.280016][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.728784][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.786621][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.822077][ T6300] bond0 (unregistering): Released all slaves [ 444.054965][ T8388] CIFS: VFS: Error connecting to socket. Aborting operation. [ 444.110287][ T8388] CIFS: VFS: cifs_mount failed w/return code = -4 [ 444.183292][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 444.307976][ T6300] hsr_slave_0: left promiscuous mode [ 444.367359][ T6300] hsr_slave_1: left promiscuous mode [ 444.379927][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.411847][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.641646][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 444.862572][ T10] usb 1-1: device descriptor read/64, error -71 [ 445.017643][ T8410] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 445.192538][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 445.352614][ T10] usb 1-1: device descriptor read/64, error -71 [ 445.510208][ T10] usb usb1-port1: attempt power cycle [ 446.801466][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 180 seconds [ 446.814542][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 180 seconds [ 446.826396][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 180 seconds [ 446.837744][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 180 seconds [ 446.847558][ T8416] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 447.393616][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 447.487642][ T10] usb 1-1: device descriptor read/8, error -71 [ 447.820566][ T8416] CIFS: VFS: cifs_mount failed w/return code = -112 [ 447.848898][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 447.908338][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 449.586751][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.622704][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.642068][ T8229] bridge_slave_0: entered allmulticast mode [ 449.659682][ T8229] bridge_slave_0: entered promiscuous mode [ 449.700994][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.720070][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.734936][ T8229] bridge_slave_1: entered allmulticast mode [ 449.744737][ T8229] bridge_slave_1: entered promiscuous mode [ 449.754710][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.785962][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.807776][ T8225] bridge_slave_0: entered allmulticast mode [ 449.828638][ T8225] bridge_slave_0: entered promiscuous mode [ 449.946801][ T8029] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 449.999314][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.037862][ T8029] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 450.068373][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.290799][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 450.726728][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.741097][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.761756][ T8225] bridge_slave_1: entered allmulticast mode [ 450.790734][ T8225] bridge_slave_1: entered promiscuous mode [ 450.821196][ T8029] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 450.871843][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.884914][ T8447] nbd2: detected capacity change from 0 to 63 [ 450.905853][ T5640] block nbd2: Receive control failed (result -104) [ 450.920012][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.035383][ T8029] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.072070][ T8029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.093946][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.141753][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.193234][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.382615][ T188] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 451.542203][ T188] usb 6-1: device descriptor read/64, error -71 [ 451.667455][ T8225] team0: Port device team_slave_0 added [ 451.788320][ T188] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 451.808022][ T8225] team0: Port device team_slave_1 added [ 452.062426][ T188] usb 6-1: device descriptor read/64, error -71 [ 452.283691][ T8229] team0: Port device team_slave_0 added [ 452.294813][ T188] usb usb6-port1: attempt power cycle [ 452.426628][ T8229] team0: Port device team_slave_1 added [ 452.491021][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 452.551716][ T29] audit: type=1800 audit(1787302189.765:3): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.521" name="addr_trtype" dev="configfs" ino=20708 res=0 errno=0 [ 452.582851][ T8480] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 452.596867][ T29] audit: type=1800 audit(1787302189.815:4): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.521" name="addr_adrfam" dev="configfs" ino=20709 res=0 errno=0 [ 452.619087][ T8480] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 452.653479][ T188] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 452.683602][ T188] usb 6-1: device descriptor read/8, error -71 [ 452.730856][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.740206][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.775662][ T8225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.791616][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.798657][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.844014][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.862594][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.870041][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.905135][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.933479][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 452.953260][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.970841][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.009212][ T188] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 453.026126][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.047726][ T188] usb 6-1: device descriptor read/8, error -71 [ 453.165295][ T188] usb usb6-port1: unable to enumerate USB device [ 453.384609][ T8225] hsr_slave_0: entered promiscuous mode [ 453.400311][ T8225] hsr_slave_1: entered promiscuous mode [ 453.417346][ T8225] debugfs: 'hsr0' already exists in 'hsr' [ 453.426297][ T8225] Cannot create hsr debugfs directory [ 453.443820][ T8229] hsr_slave_0: entered promiscuous mode [ 453.450685][ T8229] hsr_slave_1: entered promiscuous mode [ 453.457828][ T8229] debugfs: 'hsr0' already exists in 'hsr' [ 453.465582][ T8229] Cannot create hsr debugfs directory [ 456.301641][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.323931][ T6300] bridge_slave_1: left allmulticast mode [ 459.349341][ T6300] bridge_slave_1: left promiscuous mode [ 459.376931][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.437873][ T6300] bridge_slave_0: left allmulticast mode [ 459.459124][ T6300] bridge_slave_0: left promiscuous mode [ 459.480477][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.707878][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.720800][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.729158][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.740986][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.756725][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.079980][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.120026][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.149277][ T6300] bond0 (unregistering): Released all slaves [ 460.675282][ T6300] hsr_slave_0: left promiscuous mode [ 460.724652][ T6300] hsr_slave_1: left promiscuous mode [ 460.762602][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.786218][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.067191][ T8544] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 461.093724][ T8544] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 461.860819][ T5636] Bluetooth: hci1: command tx timeout [ 462.408479][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 462.417756][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 240 seconds [ 462.430157][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 240 seconds [ 462.442681][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 240 seconds [ 463.247624][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 463.951915][ T5636] Bluetooth: hci1: command tx timeout [ 464.022069][ T8566] futex_wake_op: syz.0.537 tries to shift op by 144; fix this program [ 464.537832][ T8547] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.773965][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 465.786651][ T8571] siw: device registration error -23 [ 466.013453][ T5636] Bluetooth: hci1: command tx timeout [ 466.082537][ T10] usb 1-1: device descriptor read/64, error -71 [ 466.359395][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 466.602066][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.543'. [ 466.636967][ T10] usb 1-1: device descriptor read/64, error -71 [ 466.913078][ T10] usb usb1-port1: attempt power cycle [ 466.991649][ T8523] lo speed is unknown, defaulting to 1000 [ 467.263678][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 467.304306][ T10] usb 1-1: device descriptor read/8, error -71 [ 467.806611][ T8225] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.985253][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 468.117484][ T5636] Bluetooth: hci1: command tx timeout [ 468.157679][ T8591] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 468.862619][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.974586][ T8225] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.004530][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.261120][ T10] usb 1-1: device not accepting address 14, error -71 [ 469.281124][ T10] usb usb1-port1: unable to enumerate USB device [ 469.309600][ T8225] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 470.090333][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.099258][ T8225] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 470.140330][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.463684][ T8613] jffs2: notice: (8613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 470.605556][ T8615] netlink: 72 bytes leftover after parsing attributes in process `syz.5.548'. [ 472.404239][ T8638] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 472.956810][ T6300] bridge_slave_1: left allmulticast mode [ 472.971365][ T6300] bridge_slave_1: left promiscuous mode [ 472.992851][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.023390][ T8642] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 473.034776][ T6300] bridge_slave_0: left allmulticast mode [ 473.043436][ T6300] bridge_slave_0: left promiscuous mode [ 473.060685][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.341961][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.376060][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.399621][ T6300] bond0 (unregistering): Released all slaves [ 473.434641][ T8638] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 473.732317][ T6300] hsr_slave_0: left promiscuous mode [ 473.759276][ T6300] hsr_slave_1: left promiscuous mode [ 473.979355][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.984229][ T8642] CIFS: VFS: Error connecting to socket. Aborting operation. [ 473.999633][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.058528][ T8642] CIFS: VFS: cifs_mount failed w/return code = -4 [ 475.768368][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 475.960687][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 477.136014][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 210 seconds [ 477.150086][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 210 seconds [ 477.161538][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 210 seconds [ 477.174196][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 210 seconds [ 477.325304][ T8229] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.469291][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.592721][ T8699] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 478.330767][ T8229] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.561176][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.652613][ T8229] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.720997][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.779663][ T8705] overlayfs: missing 'lowerdir' [ 478.826729][ T8229] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.856911][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.572'. [ 478.870668][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.633574][ T188] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 479.978924][ T188] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.166134][ T188] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 480.369548][ T188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 480.547701][ T188] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.689906][ T188] usb 6-1: Product: syz [ 480.775038][ T188] usb 6-1: Manufacturer: syz [ 480.857404][ T188] usb 6-1: SerialNumber: syz [ 481.136713][ T188] usb 6-1: config 0 descriptor?? [ 481.489591][ T8180] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 30 seconds [ 481.496532][ T188] usb 6-1: selecting invalid altsetting 0 [ 482.154955][ T8725] loop0: detected capacity change from 0 to 2049 [ 482.211799][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.243166][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.261792][ T8727] loop0: [ 482.276175][ T8523] bridge_slave_0: entered allmulticast mode [ 482.305704][ T8523] bridge_slave_0: entered promiscuous mode [ 482.343007][ T188] usb 6-1: USB disconnect, device number 13 [ 482.384254][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.414558][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.443195][ T8523] bridge_slave_1: entered allmulticast mode [ 482.478693][ T8523] bridge_slave_1: entered promiscuous mode [ 482.649063][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.675912][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.958308][ T8523] team0: Port device team_slave_0 added [ 482.990458][ T8523] team0: Port device team_slave_1 added [ 483.825002][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.858727][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.915758][ T8225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.926760][ T8225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.069841][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.077135][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.283567][ T8758] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 484.736821][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.744028][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.767210][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.774278][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.815397][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.862362][ T8758] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 485.009095][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.044599][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.103259][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.227799][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.262917][ T8523] hsr_slave_0: entered promiscuous mode [ 485.269656][ T8523] hsr_slave_1: entered promiscuous mode [ 485.459285][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.799801][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.811489][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.821666][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.837989][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.848375][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.949852][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.972405][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.988187][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.997686][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.006535][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.073331][ T8714] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 488.254442][ T8714] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 489.377229][ T8714] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 489.388302][ T8714] usb 2-1: can't read configurations, error -71 [ 490.005878][ T5636] Bluetooth: hci4: command tx timeout [ 490.096377][ T5636] Bluetooth: hci5: command tx timeout [ 491.108110][ T8824] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 491.877898][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 492.104760][ T5636] Bluetooth: hci4: command tx timeout [ 492.182941][ T5636] Bluetooth: hci5: command tx timeout [ 492.514876][ T8750] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 492.664639][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 270 seconds [ 492.676187][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 270 seconds [ 492.694590][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 270 seconds [ 492.934267][ T8750] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 493.077829][ T8750] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 493.242039][ T8750] usb 1-1: config 0 interface 0 has no altsetting 0 [ 493.375915][ T8750] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 493.510289][ T8750] usb 1-1: Product: syz [ 493.578418][ T8750] usb 1-1: Manufacturer: syz [ 493.684451][ T8750] usb 1-1: SerialNumber: syz [ 494.173039][ T5636] Bluetooth: hci4: command tx timeout [ 494.206271][ T8750] usb 1-1: config 0 descriptor?? [ 494.252490][ T5636] Bluetooth: hci5: command tx timeout [ 494.909988][ T8750] usb 1-1: selecting invalid altsetting 0 [ 495.302702][ T8781] lo speed is unknown, defaulting to 1000 [ 495.538447][ T8750] usb 1-1: USB disconnect, device number 15 [ 495.672739][ T8733] udevd[8733]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.818999][ T8557] bridge_slave_1: left allmulticast mode [ 495.833368][ T8557] bridge_slave_1: left promiscuous mode [ 495.842064][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.858505][ T8557] bridge_slave_0: left allmulticast mode [ 495.864541][ T8557] bridge_slave_0: left promiscuous mode [ 495.870472][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.258928][ T5636] Bluetooth: hci4: command tx timeout [ 496.342471][ T5636] Bluetooth: hci5: command tx timeout [ 498.901984][ T8870] futex_wake_op: syz.0.599 tries to shift op by 144; fix this program [ 500.898977][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.910312][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.285619][ T8886] loop0: detected capacity change from 0 to 2049 [ 501.354036][ T8886] loop0: [ 501.387946][ T8557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.422639][ T8557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.436900][ T8557] bond0 (unregistering): Released all slaves [ 501.641731][ T8785] lo speed is unknown, defaulting to 1000 [ 501.650182][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 501.961580][ T8557] hsr_slave_0: left promiscuous mode [ 501.974843][ T8557] hsr_slave_1: left promiscuous mode [ 501.984368][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.999057][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.784812][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 503.813294][ T8557] team0 (unregistering): Port device team_slave_1 removed [ 503.823959][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 503.860427][ T8557] team0 (unregistering): Port device team_slave_0 removed [ 506.430069][ T8523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.500834][ T8924] loop0: detected capacity change from 0 to 2049 [ 506.521780][ T8523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.556011][ T8924] loop0: [ 506.613032][ T8523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.668549][ T8523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.685215][ T8523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.718036][ T8523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.809044][ T8523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.862517][ T8523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.214586][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 240 seconds [ 507.227669][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 240 seconds [ 507.239171][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 240 seconds [ 507.250860][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 240 seconds [ 509.742409][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 510.696085][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.704619][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.720623][ T8781] bridge_slave_0: entered allmulticast mode [ 510.743162][ T8781] bridge_slave_0: entered promiscuous mode [ 511.358087][ T8991] loop0: detected capacity change from 0 to 2049 [ 511.440496][ T8991] loop0: [ 511.548607][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.582658][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.617141][ T8781] bridge_slave_1: entered allmulticast mode [ 511.660797][ T8781] bridge_slave_1: entered promiscuous mode [ 511.716796][ T1581] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 60 seconds [ 511.840015][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 511.949931][ T8781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.295828][ T8781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.667066][ T8781] team0: Port device team_slave_0 added [ 512.719669][ T8781] team0: Port device team_slave_1 added [ 512.757774][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.801289][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.836354][ T8785] bridge_slave_0: entered allmulticast mode [ 512.867974][ T8785] bridge_slave_0: entered promiscuous mode [ 513.142218][ T9009] CIFS mount error: No usable UNC path provided in device string! [ 513.142218][ T9009] [ 513.205878][ T9009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 513.211678][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.252348][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.344759][ T8781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.386760][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.407593][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.431836][ T8785] bridge_slave_1: entered allmulticast mode [ 513.463022][ T8785] bridge_slave_1: entered promiscuous mode [ 513.796307][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 515.005939][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.041701][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.121326][ T8781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.250819][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.485638][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.036190][ T8785] team0: Port device team_slave_0 added [ 517.175282][ T1002] bridge_slave_1: left allmulticast mode [ 517.207460][ T1002] bridge_slave_1: left promiscuous mode [ 517.236517][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.300650][ T1002] bridge_slave_0: left allmulticast mode [ 517.319893][ T1002] bridge_slave_0: left promiscuous mode [ 517.339548][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.012829][ T4976] udevd[4976]: worker [5637] /devices/virtual/block/nbd0 timeout; kill it [ 520.082356][ T4976] udevd[4976]: seq 11983 '/devices/virtual/block/nbd0' killed [ 520.096752][ T4976] udevd[4976]: worker [6206] /devices/virtual/block/nbd1 timeout; kill it [ 520.147516][ T4976] udevd[4976]: seq 12994 '/devices/virtual/block/nbd1' killed [ 520.165164][ T4976] udevd[4976]: worker [5627] /devices/virtual/block/nbd2 is taking a long time [ 520.739632][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.810940][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.877606][ T1002] bond0 (unregistering): Released all slaves [ 520.953221][ T8785] team0: Port device team_slave_1 added [ 521.122851][ T8781] hsr_slave_0: entered promiscuous mode [ 521.183460][ T9053] netlink: 'syz.1.635': attribute type 2 has an invalid length. [ 522.014337][ T8781] hsr_slave_1: entered promiscuous mode [ 522.073163][ T8781] debugfs: 'hsr0' already exists in 'hsr' [ 522.129779][ T8781] Cannot create hsr debugfs directory [ 522.132727][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.157500][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.168505][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.187701][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.196924][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.331479][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.656254][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 523.557186][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 300 seconds [ 523.567993][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 300 seconds [ 523.578483][ T9062] CIFS mount error: No usable UNC path provided in device string! [ 523.578483][ T9062] [ 523.579144][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 300 seconds [ 523.724672][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.832044][ T9062] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 523.849798][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.082824][ T1002] hsr_slave_0: left promiscuous mode [ 524.116704][ T1002] hsr_slave_1: left promiscuous mode [ 524.144120][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.197014][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.265651][ T5640] Bluetooth: hci6: command tx timeout [ 524.957613][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 525.044074][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 525.619731][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.656913][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.749272][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.844182][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 526.031236][ T9079] process 'syz.1.646' launched './file2' with NULL argv: empty string added [ 526.332857][ T5640] Bluetooth: hci6: command tx timeout [ 526.733409][ T9090] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 527.797753][ T8785] hsr_slave_0: entered promiscuous mode [ 527.852988][ T8785] hsr_slave_1: entered promiscuous mode [ 527.888704][ T8785] debugfs: 'hsr0' already exists in 'hsr' [ 527.925280][ T8785] Cannot create hsr debugfs directory [ 528.311650][ T9097] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 528.413660][ T5640] Bluetooth: hci6: command tx timeout [ 529.108011][ T9097] CIFS: VFS: cifs_mount failed w/return code = -112 [ 530.492236][ T5640] Bluetooth: hci6: command tx timeout [ 531.552348][ T9054] lo speed is unknown, defaulting to 1000 [ 533.126385][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 534.098085][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.127040][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.141836][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.171415][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.201892][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.255528][ T5636] Bluetooth: hci1: command tx timeout [ 536.674581][ T9158] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 536.867748][ T141] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 536.946679][ T9162] nvme nvme9: creating 2 I/O queues. [ 536.964086][ T1002] bridge_slave_1: left allmulticast mode [ 536.994957][ T1002] bridge_slave_1: left promiscuous mode [ 537.018609][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.042580][ T9162] nvme nvme9: new ctrl: "testsubsys" [ 537.057991][ T1002] bridge_slave_0: left allmulticast mode [ 537.081309][ T1002] bridge_slave_0: left promiscuous mode [ 537.094885][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.716237][ T5636] Bluetooth: hci1: command tx timeout [ 538.734497][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 270 seconds [ 538.745300][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 270 seconds [ 538.950335][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 270 seconds [ 538.962362][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 270 seconds [ 539.122947][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.140752][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.151728][ T1002] bond0 (unregistering): Released all slaves [ 539.347680][ T9179] jffs2: notice: (9179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 539.389549][ T9179] netlink: 72 bytes leftover after parsing attributes in process `syz.1.664'. [ 540.324645][ T9132] lo speed is unknown, defaulting to 1000 [ 540.427790][ T1002] hsr_slave_0: left promiscuous mode [ 540.450441][ T1002] hsr_slave_1: left promiscuous mode [ 540.465601][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.485143][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.733437][ T5636] Bluetooth: hci1: command tx timeout [ 541.268166][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 541.303637][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 541.745553][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.774583][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.795738][ T1581] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 90 seconds [ 541.796461][ T9054] bridge_slave_0: entered allmulticast mode [ 541.851091][ T9054] bridge_slave_0: entered promiscuous mode [ 541.938940][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.976559][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.994238][ T9054] bridge_slave_1: entered allmulticast mode [ 542.018631][ T9054] bridge_slave_1: entered promiscuous mode [ 542.214090][ T9221] futex_wake_op: syz.5.668 tries to shift op by 144; fix this program [ 542.842219][ T5636] Bluetooth: hci1: command tx timeout [ 543.087800][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.100462][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.269867][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.669'. [ 543.279134][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.669'. [ 543.288227][ T9227] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 543.297295][ T9227] iwpm_hello_cb: Unable to parse nlmsg [ 544.805421][ T9054] team0: Port device team_slave_0 added [ 544.855054][ T9054] team0: Port device team_slave_1 added [ 545.066646][ T8781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 545.090139][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.198732][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.214352][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.274357][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.305355][ T8781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.326007][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.420546][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.444812][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.477089][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.498795][ T8781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.518648][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.539237][ T8781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.566040][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.794531][ T9054] hsr_slave_0: entered promiscuous mode [ 545.808540][ T9054] hsr_slave_1: entered promiscuous mode [ 546.058336][ T8785] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 546.070529][ T8785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.109728][ T8785] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 546.133133][ T8785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.141782][ T8785] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 546.153787][ T8785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.208939][ T8785] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 546.224413][ T8785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.458425][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.472904][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.488806][ T9132] bridge_slave_0: entered allmulticast mode [ 546.514358][ T9132] bridge_slave_0: entered promiscuous mode [ 546.533603][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.547410][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 546.557096][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 546.569918][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 546.592428][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.889632][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.922331][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.937665][ T9132] bridge_slave_1: entered allmulticast mode [ 546.961784][ T9132] bridge_slave_1: entered promiscuous mode [ 547.178689][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.194780][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.203572][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.213409][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.221144][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 547.610367][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 547.713287][ T9299] loop5: detected capacity change from 0 to 512 [ 547.787433][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 548.049596][ T9299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.137456][ T9299] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.167972][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.199284][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.604770][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 548.654106][ T5640] Bluetooth: hci3: command tx timeout [ 548.682536][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 549.186400][ T9132] team0: Port device team_slave_0 added [ 549.217988][ T9132] team0: Port device team_slave_1 added [ 549.294253][ T5640] Bluetooth: hci4: command tx timeout [ 550.000665][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.019532][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.049599][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.102559][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.132959][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.194370][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.765003][ T5640] Bluetooth: hci3: command tx timeout [ 550.779986][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.794895][ T9272] lo speed is unknown, defaulting to 1000 [ 551.288726][ T9132] hsr_slave_0: entered promiscuous mode [ 551.296432][ T9132] hsr_slave_1: entered promiscuous mode [ 551.325358][ T9132] debugfs: 'hsr0' already exists in 'hsr' [ 551.354779][ T9132] Cannot create hsr debugfs directory [ 551.383040][ T5640] Bluetooth: hci4: command tx timeout [ 552.550279][ T9290] lo speed is unknown, defaulting to 1000 [ 552.836499][ T9366] futex_wake_op: syz.5.685 tries to shift op by 144; fix this program [ 552.952345][ T5640] Bluetooth: hci3: command tx timeout [ 553.326561][ T9362] loop0: detected capacity change from 0 to 2049 [ 553.437891][ T9367] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 553.455092][ T5640] Bluetooth: hci4: command tx timeout [ 553.562289][ T9367] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 553.590454][ T9367] loop0: [ 553.739699][ T5905] bridge_slave_1: left allmulticast mode [ 554.330358][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 554.361049][ T5905] bridge_slave_1: left promiscuous mode [ 554.371850][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 554.702398][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 330 seconds [ 554.713202][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 330 seconds [ 554.724436][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 330 seconds [ 554.752263][ T4976] loop0: [ 554.762111][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.972823][ T5640] Bluetooth: hci3: command tx timeout [ 556.361499][ T5640] Bluetooth: hci4: command tx timeout [ 556.410558][ T5905] bridge_slave_0: left allmulticast mode [ 556.634205][ T5905] bridge_slave_0: left promiscuous mode [ 556.692940][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.418376][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.450313][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.478366][ T5905] bond0 (unregistering): Released all slaves [ 557.848186][ T5905] hsr_slave_0: left promiscuous mode [ 557.883641][ T5905] hsr_slave_1: left promiscuous mode [ 557.898434][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.914676][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.458837][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 559.705634][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 560.858892][ T9054] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 560.877938][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.900458][ T9054] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 560.945901][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.981286][ T9054] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 561.023508][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.146169][ T9054] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 561.187950][ T9054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.770261][ T9132] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 561.805537][ T9132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.163791][ T9132] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 562.179752][ T9132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.189157][ T9132] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 562.206436][ T9132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.254458][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.261342][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.385730][ T9132] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 564.425366][ T9132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.807601][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 564.852238][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 564.912468][ T4976] loop0: [ 566.030508][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.037861][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.053920][ T9272] bridge_slave_0: entered allmulticast mode [ 566.066709][ T9272] bridge_slave_0: entered promiscuous mode [ 566.080098][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.087937][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.095552][ T9272] bridge_slave_1: entered allmulticast mode [ 566.104724][ T9272] bridge_slave_1: entered promiscuous mode [ 566.288872][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.303414][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.318777][ T9290] bridge_slave_0: entered allmulticast mode [ 566.391008][ T9290] bridge_slave_0: entered promiscuous mode [ 566.938381][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.967551][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.979007][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.987109][ T9290] bridge_slave_1: entered allmulticast mode [ 567.019381][ T9290] bridge_slave_1: entered promiscuous mode [ 567.182747][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.256433][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.816299][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.578722][ T9290] team0: Port device team_slave_0 added [ 568.655600][ T9272] team0: Port device team_slave_0 added [ 568.670109][ T9518] loop1: detected capacity change from 0 to 512 [ 568.678773][ T9272] team0: Port device team_slave_1 added [ 568.700102][ T9290] team0: Port device team_slave_1 added [ 568.751957][ T9518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.802502][ T9518] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.940407][ T5905] bridge_slave_1: left allmulticast mode [ 568.951965][ T5905] bridge_slave_1: left promiscuous mode [ 568.971446][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.998987][ T5905] bridge_slave_0: left allmulticast mode [ 569.012205][ T5905] bridge_slave_0: left promiscuous mode [ 569.023656][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.301320][ T9531] siw: device registration error -23 [ 569.342804][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 300 seconds [ 569.357032][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 300 seconds [ 569.373948][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 300 seconds [ 569.395441][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 300 seconds [ 570.290923][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.352971][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.840623][ T5905] bond0 (unregistering): Released all slaves [ 570.885792][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.906185][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.916812][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.952222][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.965779][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.973795][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.004143][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.017273][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.024956][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.051017][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.100389][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.135155][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.382251][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.853060][ T8180] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 120 seconds [ 572.193677][ T5905] hsr_slave_0: left promiscuous mode [ 572.218124][ T5905] hsr_slave_1: left promiscuous mode [ 572.247245][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.263607][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.280514][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.402910][ T9543] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 572.456668][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 572.468866][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 572.476099][ T4976] loop0: [ 572.807341][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 573.040351][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 573.447053][ T9543] CIFS: VFS: Error connecting to socket. Aborting operation. [ 573.496693][ T9543] CIFS: VFS: cifs_mount failed w/return code = -4 [ 576.148150][ T9290] hsr_slave_0: entered promiscuous mode [ 576.197633][ T9290] hsr_slave_1: entered promiscuous mode [ 576.213405][ T9290] debugfs: 'hsr0' already exists in 'hsr' [ 576.223459][ T9290] Cannot create hsr debugfs directory [ 576.335586][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.487496][ T9272] hsr_slave_0: entered promiscuous mode [ 576.519438][ T9272] hsr_slave_1: entered promiscuous mode [ 576.561229][ T9272] debugfs: 'hsr0' already exists in 'hsr' [ 576.585608][ T9272] Cannot create hsr debugfs directory [ 576.913296][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.920517][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.141769][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 577.218510][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.225759][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.239457][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 577.308100][ T4976] loop0: [ 577.671316][ T9597] jffs2: notice: (9597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 577.763776][ T9599] netlink: 72 bytes leftover after parsing attributes in process `syz.5.719'. [ 580.068299][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 582.004152][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.030906][ T9610] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 582.296315][ T6850] nvmet: Created nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 582.342961][ T9610] nvme nvme10: creating 2 I/O queues. [ 582.361928][ T9610] nvme nvme10: new ctrl: "testsubsys" [ 582.371653][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.417359][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.424557][ T8557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.532584][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.539780][ T8557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.297306][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.316122][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.328582][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 583.346031][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 583.369903][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 585.573498][ T5636] Bluetooth: hci5: command tx timeout [ 586.034428][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 360 seconds [ 586.045220][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 360 seconds [ 586.056238][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 360 seconds [ 586.542382][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'. [ 587.219587][ T3364] bridge_slave_1: left allmulticast mode [ 587.256176][ T3364] bridge_slave_1: left promiscuous mode [ 587.290264][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.368303][ T3364] bridge_slave_0: left allmulticast mode [ 587.389036][ T3364] bridge_slave_0: left promiscuous mode [ 587.413665][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.612269][ T5636] Bluetooth: hci5: command tx timeout [ 587.779240][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.799024][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.825036][ T3364] bond0 (unregistering): Released all slaves [ 588.027289][ T3364] hsr_slave_0: left promiscuous mode [ 588.051182][ T3364] hsr_slave_1: left promiscuous mode [ 588.067658][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.099342][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.693954][ T5636] Bluetooth: hci5: command tx timeout [ 589.747024][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 589.847007][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 589.861913][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.5.733'. [ 590.448456][ T9620] lo speed is unknown, defaulting to 1000 [ 590.556146][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.774183][ T9290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 590.913841][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.939601][ T9290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 590.965452][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.032030][ T9290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 591.090729][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.124955][ T9290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 591.172589][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.282307][ T5758] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 591.456999][ T5758] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 591.491593][ T5758] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 591.513838][ T5758] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 591.732128][ T5758] usb 6-1: config 220 has no interface number 2 [ 591.754733][ T5758] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 591.852927][ T9691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.496951][ T5636] Bluetooth: hci5: command tx timeout [ 592.586374][ T5758] usb 6-1: config 220 interface 0 has no altsetting 0 [ 592.616675][ T5758] usb 6-1: config 220 interface 76 has no altsetting 0 [ 592.652020][ T5758] usb 6-1: config 220 interface 1 has no altsetting 0 [ 592.682314][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.469306][ T9272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.531157][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.640493][ T9272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.662272][ T5758] usb 6-1: Product: syz [ 593.695020][ T5758] usb 6-1: Manufacturer: syz [ 594.415802][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.435076][ T5758] usb 6-1: SerialNumber: syz [ 594.493161][ T9272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 594.579199][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.643527][ T5758] usb 6-1: can't set config #220, error -71 [ 594.679324][ T9272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 594.706066][ T5758] usb 6-1: USB disconnect, device number 14 [ 594.746637][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.827067][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 594.840539][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 594.852435][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 594.862244][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 594.871412][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 595.388626][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 596.589820][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.650098][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.685067][ T9620] bridge_slave_0: entered allmulticast mode [ 596.741985][ T9620] bridge_slave_0: entered promiscuous mode [ 596.864836][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.341197][ T5640] Bluetooth: hci6: command tx timeout [ 597.353644][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.388505][ T9620] bridge_slave_1: entered allmulticast mode [ 597.411805][ T9620] bridge_slave_1: entered promiscuous mode [ 597.514632][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 598.019685][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.081540][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.416819][ T5640] Bluetooth: hci6: command tx timeout [ 599.426697][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 330 seconds [ 599.439224][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 330 seconds [ 599.450462][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 330 seconds [ 599.461784][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 330 seconds [ 600.563579][ T9758] netlink: 52 bytes leftover after parsing attributes in process `syz.5.743'. [ 601.521945][ T5640] Bluetooth: hci6: command tx timeout [ 601.933445][ T1581] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 150 seconds [ 602.082546][ T9620] team0: Port device team_slave_0 added [ 602.126171][ T9620] team0: Port device team_slave_1 added [ 602.952763][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 603.039833][ T9704] lo speed is unknown, defaulting to 1000 [ 603.046946][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.071729][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.171192][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.228288][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.300557][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.321100][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.413304][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.602249][ T5640] Bluetooth: hci6: command tx timeout [ 603.865523][ T9620] hsr_slave_0: entered promiscuous mode [ 603.890600][ T9620] hsr_slave_1: entered promiscuous mode [ 604.626671][ T9778] binder: 9766:9778 ioctl 4018620d 0 returned -22 [ 606.378717][ T9290] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.706130][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.909874][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.917059][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.118784][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.125991][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.428687][ T9791] jffs2: notice: (9791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 607.545896][ T9793] netlink: 72 bytes leftover after parsing attributes in process `syz.5.744'. [ 609.229498][ T8557] bridge_slave_1: left allmulticast mode [ 609.274591][ T8557] bridge_slave_1: left promiscuous mode [ 609.323140][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.344945][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.381536][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.396905][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.427877][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.451890][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.257457][ T8557] bridge_slave_0: left allmulticast mode [ 611.299570][ T8557] bridge_slave_0: left promiscuous mode [ 611.491055][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.790449][ T5640] Bluetooth: hci1: command tx timeout [ 612.055757][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.070421][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.084486][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.096775][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.107041][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.629479][ T8557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.644631][ T8557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.657276][ T8557] bond0 (unregistering): Released all slaves [ 612.854667][ T9832] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 613.852235][ T5636] Bluetooth: hci1: command tx timeout [ 613.884393][ T8557] hsr_slave_0: left promiscuous mode [ 613.913538][ T8557] hsr_slave_1: left promiscuous mode [ 613.937509][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.974343][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.250722][ T9847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.752'. [ 615.560735][ T5636] Bluetooth: hci3: command tx timeout [ 615.932314][ T5636] Bluetooth: hci1: command tx timeout [ 616.229005][ T8557] team0 (unregistering): Port device team_slave_1 removed [ 616.275198][ T8557] team0 (unregistering): Port device team_slave_0 removed [ 616.367972][ T9853] Invalid ELF header type: 3 != 1 [ 616.653283][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 390 seconds [ 616.664305][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 390 seconds [ 616.676259][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 390 seconds [ 616.866343][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'. [ 617.443799][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.460901][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.469483][ T9704] bridge_slave_0: entered allmulticast mode [ 617.480739][ T9704] bridge_slave_0: entered promiscuous mode [ 617.493258][ T9802] lo speed is unknown, defaulting to 1000 [ 617.496244][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.502681][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.522351][ T9704] bridge_slave_1: entered allmulticast mode [ 617.547208][ T9704] bridge_slave_1: entered promiscuous mode [ 617.616438][ T5636] Bluetooth: hci3: command tx timeout [ 618.012245][ T5636] Bluetooth: hci1: command tx timeout [ 619.692192][ T5636] Bluetooth: hci3: command tx timeout [ 619.879109][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.900332][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.918383][ T9819] lo speed is unknown, defaulting to 1000 [ 620.206549][ T9902] futex_wake_op: syz.5.758 tries to shift op by 144; fix this program [ 620.882588][ T9704] team0: Port device team_slave_0 added [ 621.359540][ T9704] team0: Port device team_slave_1 added [ 621.591675][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.620263][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.672284][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.748060][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.763657][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.802716][ T5636] Bluetooth: hci3: command tx timeout [ 621.839585][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.757594][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.767174][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.020875][ T9917] netlink: 52 bytes leftover after parsing attributes in process `syz.1.761'. [ 625.740215][ T9704] hsr_slave_0: entered promiscuous mode [ 625.763264][ T9704] hsr_slave_1: entered promiscuous mode [ 625.769701][ T9704] debugfs: 'hsr0' already exists in 'hsr' [ 625.788831][ T9704] Cannot create hsr debugfs directory [ 625.876859][ T9620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 625.940459][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.979294][ T9620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 626.030535][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.061264][ T9620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 626.117274][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.293908][ T9620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 626.320162][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.550801][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.652268][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.712641][ T9802] bridge_slave_0: entered allmulticast mode [ 627.744995][ T9960] jffs2: notice: (9960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 627.804223][ T9802] bridge_slave_0: entered promiscuous mode [ 627.857131][ T9963] netlink: 72 bytes leftover after parsing attributes in process `syz.1.763'. [ 628.227105][ T9964] Invalid ELF header type: 3 != 1 [ 629.233110][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.240388][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.255189][ T9802] bridge_slave_1: entered allmulticast mode [ 629.255456][ T9973] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 629.282466][ T9802] bridge_slave_1: entered promiscuous mode [ 629.474533][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'. [ 629.484279][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.765'. [ 629.507076][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 360 seconds [ 629.519007][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 360 seconds [ 629.531289][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 360 seconds [ 629.579888][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 360 seconds [ 630.011221][ T3353] nvmet: Created nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 630.062910][ T9973] nvme nvme11: creating 2 I/O queues. [ 630.135658][ T9973] nvme nvme11: new ctrl: "testsubsys" [ 630.185457][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.328926][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.541148][ T9997] futex_wake_op: syz.5.767 tries to shift op by 144; fix this program [ 631.139357][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.769'. [ 631.148573][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.769'. [ 631.157690][T10001] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 631.166820][T10001] iwpm_hello_cb: Unable to parse nlmsg [ 632.234203][ T1581] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 180 seconds [ 632.447111][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 632.486900][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 632.508511][ T4976] loop0: [ 632.544983][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 632.554060][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 632.568263][T10010] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 632.577220][T10010] iwpm_hello_cb: Unable to parse nlmsg [ 632.679264][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.711161][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.748826][ T9819] bridge_slave_0: entered allmulticast mode [ 632.874465][ T9819] bridge_slave_0: entered promiscuous mode [ 632.939055][ T9802] team0: Port device team_slave_0 added [ 633.153067][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.161463][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.170919][ T9819] bridge_slave_1: entered allmulticast mode [ 633.185268][ T9819] bridge_slave_1: entered promiscuous mode [ 633.247116][ T9802] team0: Port device team_slave_1 added [ 633.727387][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.238377][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.332401][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.391379][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.656213][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.906710][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.926787][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.007373][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.910529][ T9819] team0: Port device team_slave_0 added [ 637.943541][ T9819] team0: Port device team_slave_1 added [ 638.370924][ T9802] hsr_slave_0: entered promiscuous mode [ 638.398359][ T9802] hsr_slave_1: entered promiscuous mode [ 638.418617][ T9802] debugfs: 'hsr0' already exists in 'hsr' [ 638.432280][ T9802] Cannot create hsr debugfs directory [ 638.465559][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.489767][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.567937][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.691165][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.717316][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.736481][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.783992][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.171452][ T9704] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 639.191285][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.231159][ T8557] bridge_slave_1: left allmulticast mode [ 639.246388][ T8557] bridge_slave_1: left promiscuous mode [ 639.254743][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.269497][ T8557] bridge_slave_0: left allmulticast mode [ 639.279209][ T8557] bridge_slave_0: left promiscuous mode [ 639.286632][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.324000][ T8557] bridge_slave_1: left allmulticast mode [ 639.330869][ T8557] bridge_slave_1: left promiscuous mode [ 639.339099][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.360804][ T8557] bridge_slave_0: left allmulticast mode [ 639.367446][ T8557] bridge_slave_0: left promiscuous mode [ 639.374982][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.768231][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 639.778847][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 639.817406][ T4976] loop0: [ 640.110850][ T8557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.178435][ T8557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.227795][ T8557] bond0 (unregistering): Released all slaves [ 640.564604][ T8557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.601575][ T8557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.626649][ T8557] bond0 (unregistering): Released all slaves [ 640.743994][ T9704] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 640.790040][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.870343][ T9704] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 642.010284][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.073254][ T9704] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 642.100008][ T9704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.123396][ T9620] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.659136][T10070] jffs2: notice: (10070) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 643.039219][ T8557] hsr_slave_0: left promiscuous mode [ 643.392328][ T8557] hsr_slave_1: left promiscuous mode [ 643.460093][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.498473][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.629197][ T8557] hsr_slave_0: left promiscuous mode [ 643.681840][ T8557] hsr_slave_1: left promiscuous mode [ 643.737165][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.862906][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.335979][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 644.352322][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 644.365648][ T4976] loop0: [ 644.514076][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 644.526511][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 644.537016][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 644.547346][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 644.555891][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.793694][ T8557] team0 (unregistering): Port device team_slave_1 removed [ 644.809759][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 644.872637][ T8557] team0 (unregistering): Port device team_slave_0 removed [ 645.432517][ T8750] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 645.711477][ T8750] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.841368][ T8750] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 645.967168][ T8750] usb 2-1: config 0 interface 0 has no altsetting 0 [ 646.057315][ T8750] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 646.147282][ T8750] usb 2-1: Product: syz [ 646.204361][ T8750] usb 2-1: Manufacturer: syz [ 646.257702][ T8750] usb 2-1: SerialNumber: syz [ 646.538746][ T8750] usb 2-1: config 0 descriptor?? [ 646.574499][ T5636] Bluetooth: hci4: command tx timeout [ 646.737436][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 420 seconds [ 646.748559][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 420 seconds [ 646.759959][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 420 seconds [ 646.964831][ T8750] usb 2-1: selecting invalid altsetting 0 [ 648.167808][T10097] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 648.177202][T10097] CIFS: VFS: Error connecting to socket. Aborting operation. [ 648.184691][T10097] CIFS: VFS: cifs_mount failed w/return code = -111 [ 648.249577][ T8750] usb 2-1: USB disconnect, device number 9 [ 648.367497][ T8733] udevd[8733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.652316][ T5636] Bluetooth: hci4: command tx timeout [ 648.778378][ T8557] team0 (unregistering): Port device team_slave_1 removed [ 648.808840][ T8557] team0 (unregistering): Port device team_slave_0 removed [ 649.064169][ T9819] hsr_slave_0: entered promiscuous mode [ 649.080643][ T9819] hsr_slave_1: entered promiscuous mode [ 649.103042][ T9819] debugfs: 'hsr0' already exists in 'hsr' [ 649.120532][ T9819] Cannot create hsr debugfs directory [ 649.927960][T10121] jffs2: notice: (10121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 650.732163][ T5636] Bluetooth: hci4: command tx timeout [ 651.409653][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 651.498333][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 651.542277][ T4976] loop0: [ 654.097728][ T5636] Bluetooth: hci4: command tx timeout [ 655.083964][T10085] lo speed is unknown, defaulting to 1000 [ 655.411061][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 655.425862][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 655.440426][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 655.455486][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 655.464412][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.793917][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 655.964927][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.800'. [ 656.076503][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 657.535705][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 81 (since boot) is 1026 jiffies old. [ 657.582215][ T5640] Bluetooth: hci5: command tx timeout [ 660.034953][ T5640] Bluetooth: hci5: command tx timeout [ 660.035888][ T885] block nbd1: Possible stuck request ffff888026b45080: control (read@0,1024B). Runtime 390 seconds [ 660.053353][ T885] block nbd1: Possible stuck request ffff888026b45240: control (read@1024,1024B). Runtime 390 seconds [ 660.064405][ T885] block nbd1: Possible stuck request ffff888026b45400: control (read@2048,1024B). Runtime 390 seconds [ 660.075456][ T885] block nbd1: Possible stuck request ffff888026b455c0: control (read@3072,1024B). Runtime 390 seconds [ 661.089414][T10153] lo speed is unknown, defaulting to 1000 [ 661.404869][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.433375][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.462266][T10085] bridge_slave_0: entered allmulticast mode [ 661.490731][T10085] bridge_slave_0: entered promiscuous mode [ 661.833890][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.862224][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.875819][T10085] bridge_slave_1: entered allmulticast mode [ 661.894205][T10085] bridge_slave_1: entered promiscuous mode [ 662.092453][ T5640] Bluetooth: hci5: command tx timeout [ 662.105826][T10203] CIFS: Attempting to mount //127.0.0.1/sų:e[1ż2harefµDŽr=root [ 662.145530][T10203] CIFS: VFS: Error connecting to socket. Aborting operation. [ 662.175120][T10203] CIFS: VFS: cifs_mount failed w/return code = -111 [ 662.278109][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.755597][ T1581] block nbd2: Possible stuck request ffff888026ba0000: control (read@0,4096B). Runtime 210 seconds [ 662.879011][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.516468][T10085] team0: Port device team_slave_0 added [ 663.571034][T10085] team0: Port device team_slave_1 added [ 663.594452][ T8557] bridge_slave_1: left allmulticast mode [ 663.609259][ T8557] bridge_slave_1: left promiscuous mode [ 663.616954][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.635255][ T8557] bridge_slave_0: left allmulticast mode [ 663.642222][ T8557] bridge_slave_0: left promiscuous mode [ 663.650110][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.767803][T10215] futex_wake_op: syz.1.805 tries to shift op by 144; fix this program [ 663.839670][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 664.001857][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 664.025106][ T4976] loop0: [ 664.172633][ T5640] Bluetooth: hci5: command tx timeout [ 664.918949][T10221] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 665.080574][ T3319] nvmet: Created nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:18f2dbfc-7ccf-4f4e-9488-cedcdb945051. [ 665.131477][T10221] nvme nvme12: creating 2 I/O queues. [ 665.179551][ T8557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.191580][ T8557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.205606][ T8557] bond0 (unregistering): Released all slaves [ 665.236520][ T9802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 665.250514][ T9802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.270984][ T9802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 665.282490][ T9802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.290759][ T9802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 665.346331][ T9802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.462265][ T9802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.476222][ T9802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.499852][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.514123][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.558601][T10221] nvme nvme12: new ctrl: "testsubsys" [ 665.590611][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.757800][ T8557] hsr_slave_0: left promiscuous mode [ 665.810224][ T8557] hsr_slave_1: left promiscuous mode [ 665.839945][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.891621][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.823742][T10243] futex_wake_op: syz.1.810 tries to shift op by 144; fix this program [ 667.477510][ T8557] team0 (unregistering): Port device team_slave_1 removed [ 667.541028][ T8557] team0 (unregistering): Port device team_slave_0 removed [ 668.610648][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.642176][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.672352][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.693565][ T9802] kthread_run failed with err -4 [ 668.748106][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 669.298428][T10085] hsr_slave_0: entered promiscuous mode [ 669.325909][T10085] hsr_slave_1: entered promiscuous mode [ 669.871421][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 669.883177][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 669.895984][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 669.907721][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 669.916643][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 670.401942][T10277] nbd: must specify at least one socket [ 670.922375][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 85 (since boot) is 1033 jiffies old. [ 671.374647][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.398023][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.407422][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.416548][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.425092][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.606532][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 671.645681][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 671.669748][ T4976] loop0: [ 671.879332][T10292] siw: device registration error -23 [ 672.014814][ T5640] Bluetooth: hci1: command tx timeout [ 673.452281][ T5640] Bluetooth: hci6: command tx timeout [ 673.845083][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.954397][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.060957][T10153] bridge_slave_0: entered allmulticast mode [ 674.093459][ T5640] Bluetooth: hci1: command tx timeout [ 674.246713][T10153] bridge_slave_0: entered promiscuous mode [ 674.399071][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.478686][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.547039][T10153] bridge_slave_1: entered allmulticast mode [ 674.591585][T10153] bridge_slave_1: entered promiscuous mode [ 675.534324][ T5640] Bluetooth: hci6: command tx timeout [ 675.966998][T10314] futex_wake_op: syz.1.819 tries to shift op by 144; fix this program [ 676.262139][ T5636] Bluetooth: hci1: command tx timeout [ 676.469888][T10319] netlink: 'syz.5.820': attribute type 2 has an invalid length. [ 676.953092][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.048631][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.293304][T10153] team0: Port device team_slave_0 added [ 677.326450][T10153] team0: Port device team_slave_1 added [ 677.498488][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.528148][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.568797][ T885] block nbd0: Possible stuck request ffff888026b15080: control (read@0,2048B). Runtime 450 seconds [ 677.579881][ T885] block nbd0: Possible stuck request ffff888026b15240: control (read@2048,1024B). Runtime 450 seconds [ 677.590957][ T885] block nbd0: Possible stuck request ffff888026b15400: control (read@3072,1024B). Runtime 450 seconds [ 677.612274][ T5636] Bluetooth: hci6: command tx timeout [ 677.693509][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.332147][ T5636] Bluetooth: hci1: command tx timeout [ 679.692360][ T5636] Bluetooth: hci6: command tx timeout [ 679.818540][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.831196][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.857337][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.299426][T10153] hsr_slave_0: entered promiscuous mode [ 680.306667][T10153] hsr_slave_1: entered promiscuous mode [ 680.317032][T10153] debugfs: 'hsr0' already exists in 'hsr' [ 680.324356][T10153] Cannot create hsr debugfs directory [ 680.345855][ T4976] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 680.385159][ T4976] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 680.406181][ T4976] loop0: [ 680.576439][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 680.652820][ T30] INFO: task udevd:5637 blocked in I/O wait for more than 145 seconds. [ 680.717737][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 681.792647][ T5344] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 682.192340][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.213276][ T5344] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 682.438336][ T30] task:udevd state:D stack:24632 pid:5637 tgid:5637 ppid:4976 task_flags:0x400140 flags:0x00080002 [ 682.578244][ T5344] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 682.784054][ T30] Call Trace: [ 682.875118][ T5344] usb 2-1: config 0 interface 0 has no altsetting 0 [ 682.897199][ T30] [ 682.974671][ T30] __schedule+0x17d4/0x5820 [ 683.109523][ T30] ? __pfx___schedule+0x10/0x10 [ 683.153526][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 683.252108][ T30] ? schedule+0x90/0x2b0 [ 683.376626][ T30] schedule+0x164/0x2b0 [ 683.387194][ T5344] usb 2-1: Product: syz [ 683.493735][ T5344] usb 2-1: Manufacturer: syz [ 683.501793][ T30] io_schedule+0x7f/0xd0 [ 683.610152][ T5344] usb 2-1: SerialNumber: syz [ 683.615326][ T30] folio_wait_bit_common+0x836/0xbc0 [ 683.699733][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 683.805020][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 683.874961][ T5344] usb 2-1: config 0 descriptor?? [ 683.902095][ T30] ? filemap_read_folio+0x234/0x3a0 [ 683.913141][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 683.927568][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.943415][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 683.952166][ T30] do_read_cache_folio+0x1ac/0x590 [ 683.957711][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 683.958738][ T5344] usb 2-1: selecting invalid altsetting 0 [ 683.963882][ T30] read_part_sector+0xb6/0x2b0 [ 683.963934][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 683.963984][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 683.964025][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 683.964067][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 683.964102][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 683.964149][ T30] bdev_disk_changed+0x851/0x17a0 [ 683.964221][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 683.964264][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 683.964306][ T30] blkdev_get_whole+0x372/0x510 [ 684.072936][ T30] bdev_open+0x324/0xd70 [ 684.077621][ T30] blkdev_open+0x461/0x600 [ 684.082940][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 684.088314][ T30] do_dentry_open+0x816/0x1380 [ 684.098108][ T30] vfs_open+0x3b/0x340 [ 684.122117][ T30] ? path_openat+0x1428/0x1d60 [ 684.132643][ T30] path_openat+0x1443/0x1d60 [ 684.146874][ T30] do_file_open+0x23e/0x4a0 [ 684.170281][ T30] ? __pfx___schedule+0x10/0x10 [ 684.197099][ T30] ? __pfx_do_file_open+0x10/0x10 [ 684.208142][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.222268][ T30] ? _raw_spin_unlock+0x41/0x50 [ 684.234522][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.252104][ T30] ? alloc_fd+0x651/0x6c0 [ 684.256529][ T30] do_sys_openat2+0x115/0x200 [ 684.261234][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.276936][ T5344] usb 2-1: USB disconnect, device number 10 [ 684.278659][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 684.303862][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.315138][ T30] __x64_sys_openat+0x138/0x170 [ 684.329608][ T30] do_syscall_64+0x166/0x520 [ 684.336049][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.359887][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.364735][ T8733] udevd[8733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.373528][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.402361][ T30] RIP: 0033:0x7fe328ca7407 [ 684.418384][ T30] RSP: 002b:00007ffcc243b8c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 684.442107][ T30] RAX: ffffffffffffffda RBX: 00007fe32940f880 RCX: 00007fe328ca7407 [ 684.451627][ T30] RDX: 00000000000a0800 RSI: 0000558f03c06a90 RDI: ffffffffffffff9c [ 684.468798][ T30] RBP: 0000558f03bf6910 R08: 0000000000000000 R09: 0000000000000000 [ 684.477436][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558f03c13f10 [ 684.485520][ T30] R13: 0000558f03c04190 R14: 0000000000000000 R15: 0000558f03c13f10 [ 684.493869][ T30] [ 684.497047][ T30] INFO: task udevd:6206 blocked in I/O wait for more than 149 seconds. [ 684.502312][T10267] lo speed is unknown, defaulting to 1000 [ 684.522140][ T30] Tainted: G L syzkaller #0 [ 684.529195][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.552124][ T30] task:udevd state:D stack:25296 pid:6206 tgid:6206 ppid:4976 task_flags:0x400140 flags:0x00080002 [ 684.582094][ T30] Call Trace: [ 684.585437][ T30] [ 684.588380][ T30] __schedule+0x17d4/0x5820 [ 684.599358][ T30] ? __pfx___schedule+0x10/0x10 [ 684.610765][ T30] ? schedule+0x90/0x2b0 [ 684.615418][ T30] schedule+0x164/0x2b0 [ 684.619650][ T30] io_schedule+0x7f/0xd0 [ 684.624226][ T30] folio_wait_bit_common+0x836/0xbc0 [ 684.629569][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 684.634920][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 684.640791][ T30] ? filemap_read_folio+0x234/0x3a0 [ 684.646329][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 684.651946][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.658029][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 684.664082][ T30] do_read_cache_folio+0x1ac/0x590 [ 684.669247][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 684.675012][ T30] read_part_sector+0xb6/0x2b0 [ 684.680364][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 684.686075][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 684.691675][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 684.697968][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 684.703398][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 684.708659][ T30] bdev_disk_changed+0x851/0x17a0 [ 684.714021][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 684.719540][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.725684][ T30] blkdev_get_whole+0x372/0x510 [ 684.730603][ T30] bdev_open+0x324/0xd70 [ 684.735786][ T30] blkdev_open+0x461/0x600 [ 684.740269][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 684.745740][ T30] do_dentry_open+0x816/0x1380 [ 684.750564][ T30] vfs_open+0x3b/0x340 [ 684.754942][ T30] ? path_openat+0x1428/0x1d60 [ 684.759757][ T30] path_openat+0x1443/0x1d60 [ 684.764674][ T30] do_file_open+0x23e/0x4a0 [ 684.769238][ T30] ? __pfx_do_file_open+0x10/0x10 [ 684.774604][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.780299][ T30] ? _raw_spin_unlock+0x28/0x50 [ 684.786119][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.791884][ T30] ? alloc_fd+0x651/0x6c0 [ 684.796551][ T30] do_sys_openat2+0x115/0x200 [ 684.801281][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.806790][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 684.812508][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.818191][ T30] __x64_sys_openat+0x138/0x170 [ 684.823375][ T30] do_syscall_64+0x166/0x520 [ 684.828004][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.834609][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 684.840321][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.846527][ T30] RIP: 0033:0x7fe328ca7407 [ 684.850977][ T30] RSP: 002b:00007ffcc243b8c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 684.859718][ T30] RAX: ffffffffffffffda RBX: 00007fe32940f880 RCX: 00007fe328ca7407 [ 684.867998][ T30] RDX: 00000000000a0800 RSI: 0000558f03c0e0f0 RDI: ffffffffffffff9c [ 684.876184][ T30] RBP: 0000558f03bf6910 R08: 0000000000000000 R09: 0000000000000000 [ 684.884905][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558f03c351a0 [ 684.893201][ T30] R13: 0000558f03c04190 R14: 0000000000000000 R15: 0000558f03c351a0 [ 684.901242][ T30] [ 684.924079][T10279] lo speed is unknown, defaulting to 1000 [ 685.046853][ T30] [ 685.046853][ T30] Showing all locks held in the system: [ 685.105599][ T30] locks held by rcu_tasks_kthre/28: 1, on CPU#1: [ 685.142717][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.152185][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.171466][ T30] #0: ffffffff8eb5ad48 (rcu_tasks.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xb2a/0xe20 [ 685.217178][ T30] locks held by khungtaskd/30: 1, last CPU#1: [ 685.241000][ T30] #0: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 685.291474][ T30] locks held by getty/5362: 2, on CPU#0: [ 685.319140][ T30] #0: ffff8880347a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 685.372681][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 685.413274][ T30] locks held by udevd/5627: 1, on CPU#1: [ 685.435637][ T30] #0: ffff8880255fe350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 685.506209][ T30] locks held by udevd/5637: 1, on CPU#0: [ 685.539153][ T30] #0: ffff8880257f6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 685.593023][ T30] locks held by udevd/6206: 1, on CPU#0: [ 685.622305][ T30] #0: ffff8880255fa350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 685.662450][ T30] locks held by kworker/u8:21/8557: 6, on CPU#0: [ 685.687282][ T30] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.726083][ T30] #1: ffffc90003ab7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 685.768911][ T30] #2: ffffffff9002bfe8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 685.793157][ T30] #3: ffff88807a642128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 685.824424][ T30] #4: ffff888032d7e258 (&devlink->lock_key#26){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 685.852096][ T30] #5: ffffffff9003a840 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 685.862345][ T30] locks held by syz.1.753/9859: 2, on CPU#1: [ 685.869586][ T30] #0: ffff888031d04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 685.880185][ T30] #1: ffffffff8eb606a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 685.918228][ T30] locks held by syz-executor/10085: 7, on CPU#0: [ 685.940919][ T30] #0: ffff8880333a8460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 685.951824][ T30] #1: ffff8880532dcc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 685.963824][ T30] #2: ffff888028121878 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 685.977764][ T30] #3: ffffffff8f8b4140 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 685.988432][ T30] #4: ffff88807f2bd128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 686.010351][ T30] #5: ffff888033642258 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 686.032093][ T30] #6: ffffffff8eb606a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 686.052319][ T30] locks held by syz-executor/10153: 1, on CPU#1: [ 686.073704][ T30] #0: ffff888075f24ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 686.089268][ T30] locks held by syz-executor/10267: 1, on CPU#0: [ 686.095974][ T30] #0: ffffffff9002bfe8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 686.105822][ T30] locks held by syz-executor/10279: 1, on CPU#1: [ 686.114719][ T30] #0: ffffffff9002bfe8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 686.129893][ T30] locks held by dhcpcd-run-hook/10373: 4, last CPU#0: [ 686.136967][ T30] #0: ffffffff8ec33550 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 686.152098][ T30] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 686.172418][ T30] #2: ffff888055122198 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 686.192094][ T30] #3: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x127/0x530 [ 686.212115][ T30] locks held by sed/10374: 1, last CPU#1: [ 686.222104][ T30] #0: ffff8880b863b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 686.232661][ T30] [ 686.235037][ T30] ============================================= [ 686.235037][ T30] [ 686.244898][ T30] NMI backtrace for cpu 1 [ 686.244920][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 686.244951][ T30] Tainted: [L]=SOFTLOCKUP [ 686.244960][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.244974][ T30] Call Trace: [ 686.244983][ T30] [ 686.244993][ T30] dump_stack_lvl+0xe8/0x150 [ 686.245037][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 686.245073][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.245102][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 686.245139][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 686.245177][ T30] sys_info+0x135/0x170 [ 686.245209][ T30] watchdog+0xfd7/0x1030 [ 686.245260][ T30] ? watchdog+0x1c7/0x1030 [ 686.245301][ T30] kthread+0x38b/0x480 [ 686.245338][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.245367][ T30] ? __pfx_kthread+0x10/0x10 [ 686.245404][ T30] ret_from_fork+0x514/0xb70 [ 686.245442][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 686.245475][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.245504][ T30] ? __switch_to+0xc89/0x1420 [ 686.245535][ T30] ? __pfx_kthread+0x10/0x10 [ 686.245572][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.245621][ T30] [ 686.246802][ T30] Sending NMI from CPU 1 to CPUs 0: [ 686.376837][ C0] NMI backtrace for cpu 0 [ 686.376861][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.376892][ C0] Tainted: [L]=SOFTLOCKUP [ 686.376900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.376914][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 686.376944][ C0] Code: ac 77 02 e9 5e 20 35 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 51 0e 00 fb f4 37 20 35 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 686.376964][ C0] RSP: 0018:ffffffff8e807ca0 EFLAGS: 00000246 [ 686.376983][ C0] RAX: 000000000144bd7b RBX: ffffffff819b314c RCX: 8000000000000001 [ 686.377001][ C0] RDX: 0000000000000001 RSI: ffffffff8e25cfdb RDI: ffffffff8c4cff80 [ 686.377017][ C0] RBP: ffffffff8e807d78 R08: ffff8880b863389b R09: 1ffff110170c6713 [ 686.377034][ C0] R10: dffffc0000000000 R11: ffffed10170c6714 R12: 0000000000000000 [ 686.377050][ C0] R13: 1ffffffff1d11df0 R14: 1ffffffff1d00f9c R15: dffffc0000000000 [ 686.377071][ C0] FS: 0000000000000000(0000) GS:ffff888124f14000(0000) knlGS:0000000000000000 [ 686.377090][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.377105][ C0] CR2: 00007fa6cafaf368 CR3: 000000007e977000 CR4: 0000000000350ef0 [ 686.377124][ C0] Call Trace: [ 686.377133][ C0] [ 686.377141][ C0] default_idle+0x9/0x20 [ 686.377167][ C0] default_idle_call+0x72/0xb0 [ 686.377196][ C0] do_idle+0x1cc/0x540 [ 686.377231][ C0] ? __pfx_do_idle+0x10/0x10 [ 686.377270][ C0] cpu_startup_entry+0x43/0x60 [ 686.377303][ C0] rest_init+0x378/0x3a0 [ 686.377332][ C0] ? __pfx_rest_init+0x10/0x10 [ 686.377367][ C0] ? __pfx_kernel_init+0x10/0x10 [ 686.377399][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 686.377422][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.377449][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 686.377479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.377506][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 686.377538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.377565][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 686.377606][ C0] start_kernel+0x392/0x3e0 [ 686.377645][ C0] x86_64_start_reservations+0x24/0x30 [ 686.377673][ C0] x86_64_start_kernel+0x137/0x1b0 [ 686.377701][ C0] common_startup_64+0x13e/0x157 [ 686.377746][ C0] [ 686.772587][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 686.779485][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 686.790198][ T30] Tainted: [L]=SOFTLOCKUP [ 686.794535][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.804604][ T30] Call Trace: [ 686.807877][ T30] [ 686.810807][ T30] vpanic+0x56d/0xa60 [ 686.814813][ T30] ? __pfx___schedule+0x10/0x10 [ 686.819686][ T30] ? __pfx_vpanic+0x10/0x10 [ 686.824206][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.829847][ T30] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 686.836014][ T30] panic+0xc5/0xd0 [ 686.839748][ T30] ? __pfx_panic+0x10/0x10 [ 686.844168][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 686.849645][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 686.855015][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 686.861196][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 686.867359][ T30] watchdog+0x1030/0x1030 [ 686.871700][ T30] ? watchdog+0x1c7/0x1030 [ 686.876143][ T30] kthread+0x38b/0x480 [ 686.880238][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.884916][ T30] ? __pfx_kthread+0x10/0x10 [ 686.889511][ T30] ret_from_fork+0x514/0xb70 [ 686.894108][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 686.899225][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 686.904872][ T30] ? __switch_to+0xc89/0x1420 [ 686.909552][ T30] ? __pfx_kthread+0x10/0x10 [ 686.914152][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.918943][ T30] [ 686.922168][ T30] Kernel Offset: disabled [ 686.926476][ T30] Rebooting in 86400 seconds..