last executing test programs: 11m5.296325317s ago: executing program 5 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000040000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m2.884917535s ago: executing program 5 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) 11m1.922791855s ago: executing program 5 (id=46): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x40) bind(r6, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 11m0.193290824s ago: executing program 5 (id=49): socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) 10m58.970616499s ago: executing program 5 (id=53): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a227536350102030109021200"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x4, 0xa0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "899a059c5477"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x1, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x6, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0xc}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xf, 0xff, 0xee, 0xf7, 0x8}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1d, "2b1244c95d66cbcd9e799afa110837a7"}]}, 0x2, [{0x50, &(0x7f0000000480)=@string={0x50, 0x3, "c185ee30c5fc6e0e4186ee90c3feb76df36a01841c323ac48d17d508f827b1414610278cff7616e75ae741bbab2bd9860ffe05f69a4e2e56f46be9997743ecc8e9f5b4794fc6899821454aabea57"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x843}}]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x0, {0x0, 0xf0}, {0x0, 0x2}}], 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0xe608}) close_range(r7, 0xffffffffffffffff, 0x0) 10m46.892929233s ago: executing program 5 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="28981dea29d350", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf258100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x44000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001000000010014000000110001"], 0xb0}}, 0x0) 10m31.092822353s ago: executing program 32 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="28981dea29d350", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf258100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x44000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001000000010014000000110001"], 0xb0}}, 0x0) 10m28.654739606s ago: executing program 3 (id=116): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 10m27.42082417s ago: executing program 3 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) 10m17.473019336s ago: executing program 3 (id=131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 10m15.069631692s ago: executing program 4 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r4 = inotify_init() close_range(r4, 0xffffffffffffffff, 0x0) 10m13.978634204s ago: executing program 4 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) 10m13.907463669s ago: executing program 3 (id=139): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 10m13.208641414s ago: executing program 4 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m10.960482422s ago: executing program 4 (id=143): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) mount$nfs4(&(0x7f0000000240)='$$].:\',(/!**]#@\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x60400, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c73739d82cd7a109bdb57487cc3ded4c093273962efbd5326b23c", @ANYRESDEC=r3, @ANYBLOB=',ui', @ANYBLOB=',\x00']) chdir(&(0x7f0000000140)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) setns(0xc9, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000800) 10m10.679946692s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 10m8.776753704s ago: executing program 4 (id=146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x43, 0x7fff0000}]}) set_mempolicy(0x0, 0x0, 0x6e) 10m6.984990213s ago: executing program 3 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='pipefs\x00', 0x100cc0a, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) dup(r3) geteuid() mount$9p_virtio(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0, 0x0) 10m4.037917737s ago: executing program 4 (id=151): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000340), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) unshare(0x40000000) 9m50.514732402s ago: executing program 33 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='pipefs\x00', 0x100cc0a, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) dup(r3) geteuid() mount$9p_virtio(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0, 0x0) 9m48.238395899s ago: executing program 34 (id=151): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000340), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) unshare(0x40000000) 6m47.248862452s ago: executing program 8 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0xfffffffe) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000010280)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000000406010400000000000000000a000009090002006a797a30000000000500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a31000000000900020073797a300000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x501802, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\"lgo=z\"', 0x7) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x1000) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0xa0e, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) bind$packet(r7, &(0x7f0000000440)={0x11, 0x10, 0x0, 0x1, 0x9, 0x6, @random="c36765a70e33"}, 0x14) 6m45.773901365s ago: executing program 8 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x8045) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m30.212280947s ago: executing program 35 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x8045) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18.43458631s ago: executing program 1 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x40) bind(r5, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 13.128211881s ago: executing program 2 (id=1067): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) setpriority(0x0, 0x0, 0x2a14b58) 11.267563444s ago: executing program 0 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r6}) fchdir(r4) close(r4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x13}, 0x18) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r9, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) semctl$GETZCNT(0x0, 0x2, 0x1f, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f0000000040)={0x30, r10, 0x0, 0x0, 0x0, 0x100000, 0x80000003, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 11.215193695s ago: executing program 2 (id=1069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 10.879200641s ago: executing program 2 (id=1070): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) mq_notify(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 10.818934522s ago: executing program 1 (id=1071): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) 8.939626617s ago: executing program 6 (id=1073): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 8.145663067s ago: executing program 0 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 7.911762396s ago: executing program 1 (id=1075): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032abd7000fddbdf2505040000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x8000000d}) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='affs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x7c9) 7.238981039s ago: executing program 2 (id=1076): socket$inet6(0xa, 0x3, 0xff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4735}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.959874172s ago: executing program 6 (id=1077): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) 5.43900501s ago: executing program 1 (id=1078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = mq_open(&(0x7f0000000340)='et\xf7\x02\x00', 0xc0, 0x11c, 0x0) lseek(r0, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8001, 0x3, 0x1, 0x4, 0x20000000000, 0x9c2a}, 0x0, &(0x7f0000000200)={0xbff, 0x4000000000002, 0x8000000000020, 0x9, 0x81, 0x6, 0xffffdfffffff7fff, 0x9}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40}, 0x94) 5.271617677s ago: executing program 0 (id=1079): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) setpriority(0x0, 0x0, 0x2a14b58) 5.263861617s ago: executing program 2 (id=1080): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3) 4.981214735s ago: executing program 6 (id=1081): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 4.150819613s ago: executing program 0 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x40) bind(r5, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 4.081629965s ago: executing program 6 (id=1083): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x7, 0x2) socket$unix(0x1, 0x5, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 2.939283825s ago: executing program 0 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x1) 2.590316592s ago: executing program 6 (id=1085): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r5, &(0x7f0000000300), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x104, 0x4a, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0xef, 0xe0, 0x0, 0x1, [@nested={0x48, 0xb7, 0x0, 0x1, [@generic="d1b35886a4cc8d3113c3e35edb131ca588ff0a4258c8d25bdda012fce13aa44d15e672a4402c5093b62d02f4650fb326c24e909781e453816f4f92e1f347779e437be1dc"]}, @generic="cc76a6e74a689b450168342fbf8687ebace8c674b2e2f12790b9f0eb5986e87aa8f80b0899df9d612df50db5cf8f06561024f42e9acfc63b73cf42c50b64c193e6a883e7822d16e4e982c736ab998b9dc4421d2a4efe0bd03ce171143b00f4764a99c19644df52fa1f027febae02b910783d06a46d40252938ee5c453f4e7c2bac61ba99ecb23442b3bb63dad8dab50437b12dcdd600b65a8d1038", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x104}}, 0x4) 2.10693742s ago: executing program 1 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 1.638438492s ago: executing program 0 (id=1087): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.170992683s ago: executing program 6 (id=1088): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) 98.761103ms ago: executing program 2 (id=1089): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032abd7000fddbdf2505040000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x8000000d}) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='affs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x7c9) 0s ago: executing program 1 (id=1090): syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001880)=""/18) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000200)='mysys\x00', 0x0, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): s. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.453640][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.904869][ T7706] loop2: detected capacity change from 0 to 32768 [ 332.505029][ T5746] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 332.698586][ T5746] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 332.702407][ T5746] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.702435][ T5746] usb 7-1: config 0 has no interfaces? [ 332.750109][ T5746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.750148][ T5746] usb 7-1: Product: syz [ 332.750175][ T5746] usb 7-1: Manufacturer: syz [ 332.750202][ T5746] usb 7-1: SerialNumber: syz [ 332.766512][ T5746] usb 7-1: config 0 descriptor?? [ 333.031980][ T5616] usb 7-1: USB disconnect, device number 2 [ 333.396112][ T7468] hsr_slave_0: entered promiscuous mode [ 334.065234][ T7468] hsr_slave_1: entered promiscuous mode [ 334.066108][ T7468] debugfs: 'hsr0' already exists in 'hsr' [ 334.066137][ T7468] Cannot create hsr debugfs directory [ 334.104647][ T5616] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 334.367001][ T5616] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 334.368405][ T5616] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.368442][ T5616] usb 7-1: config 0 has no interfaces? [ 334.374972][ T5616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.375011][ T5616] usb 7-1: Product: syz [ 334.375052][ T5616] usb 7-1: Manufacturer: syz [ 334.375079][ T5616] usb 7-1: SerialNumber: syz [ 334.385531][ T5616] usb 7-1: config 0 descriptor?? [ 334.583906][ T259] bridge_slave_1: left allmulticast mode [ 334.583944][ T259] bridge_slave_1: left promiscuous mode [ 334.584262][ T259] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.613077][ T259] bridge_slave_0: left allmulticast mode [ 334.614036][ T259] bridge_slave_0: left promiscuous mode [ 334.614273][ T259] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.661690][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.830743][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.152798][ T259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.186465][ T25] usb 7-1: USB disconnect, device number 3 [ 336.189916][ T259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.201896][ T259] bond0 (unregistering): Released all slaves [ 336.870469][ T7754] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 337.529576][ T31] audit: type=1800 audit(1790751177.830:150): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.362" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 337.971387][ T259] hsr_slave_0: left promiscuous mode [ 337.973649][ T259] hsr_slave_1: left promiscuous mode [ 337.988899][ T259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.991484][ T259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.165668][ T7767] loop2: detected capacity change from 0 to 512 [ 338.181630][ T7767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 338.312419][ T7767] EXT4-fs (loop2): 1 truncate cleaned up [ 338.320944][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.386105][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.747440][ T7787] overlayfs: failed to resolve './bus': -2 [ 340.954576][ T7784] ceph: No mds server is up or the cluster is laggy [ 341.562749][ T25] libceph: connect (1)[c::]:6789 error -101 [ 341.563157][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 342.106880][ T259] team0 (unregistering): Port device team_slave_1 removed [ 342.383694][ T259] team0 (unregistering): Port device team_slave_0 removed [ 345.876256][ T7804] tipc: Started in network mode [ 345.876301][ T7804] tipc: Node identity 7f000001, cluster identity 4711 [ 345.879125][ T7804] tipc: New replicast peer: 127.0.0.1 [ 345.880923][ T7804] tipc: Enabled bearer , priority 10 [ 346.036433][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 346.532113][ T7830] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 346.865538][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.866888][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.866925][ T25] usb 2-1: config 0 has no interfaces? [ 347.370192][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.370244][ T25] usb 2-1: Product: syz [ 347.370270][ T25] usb 2-1: Manufacturer: syz [ 347.370296][ T25] usb 2-1: SerialNumber: syz [ 347.923839][ T25] usb 2-1: config 0 descriptor?? [ 348.201980][ T25] usb 2-1: USB disconnect, device number 8 [ 348.488979][ T5753] tipc: Node number set to 2130706433 [ 348.673552][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 348.835307][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 348.836639][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.836690][ T25] usb 2-1: config 0 has no interfaces? [ 349.411166][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.411211][ T25] usb 2-1: Product: syz [ 349.411247][ T25] usb 2-1: Manufacturer: syz [ 349.411271][ T25] usb 2-1: SerialNumber: syz [ 349.449543][ T25] usb 2-1: config 0 descriptor?? [ 349.634639][ T25] usb 2-1: can't set config #0, error -71 [ 349.639774][ T25] usb 2-1: USB disconnect, device number 9 [ 353.398249][ T7479] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 353.434809][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.441102][ T7479] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 353.486610][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.492685][ T7479] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 353.535791][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.548080][ T7479] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 353.582840][ T7479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.442521][ T31] audit: type=1800 audit(1790751196.100:151): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 356.679811][ T7468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.701151][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.702109][ T7468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 356.729756][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.760973][ T7468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 356.805453][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.813299][ T7468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.837749][ T7468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.659493][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.835504][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.901883][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.902010][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.988600][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.017004][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.017131][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.186693][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.231642][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.231773][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.275786][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.275879][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.305806][ T5341] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 359.467561][ T5341] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 359.468857][ T5341] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.468896][ T5341] usb 7-1: config 0 has no interfaces? [ 359.501282][ T5341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.501321][ T5341] usb 7-1: Product: syz [ 359.501348][ T5341] usb 7-1: Manufacturer: syz [ 359.501374][ T5341] usb 7-1: SerialNumber: syz [ 359.565013][ T5341] usb 7-1: config 0 descriptor?? [ 359.792032][ T980] usb 7-1: USB disconnect, device number 4 [ 360.235275][ T980] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 360.389700][ T980] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 360.393527][ T980] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.393566][ T980] usb 7-1: config 0 has no interfaces? [ 360.438832][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.438867][ T980] usb 7-1: Product: syz [ 360.438887][ T980] usb 7-1: Manufacturer: syz [ 360.438908][ T980] usb 7-1: SerialNumber: syz [ 360.445264][ T980] usb 7-1: config 0 descriptor?? [ 362.349502][ T5892] usb 7-1: USB disconnect, device number 5 [ 362.383542][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.617674][ T7990] loop2: detected capacity change from 0 to 1024 [ 364.749309][ T7990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.050701][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.884709][ T31] audit: type=1800 audit(1790751207.170:152): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.400" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 367.245752][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.931068][ T8025] zram0: detected capacity change from 0 to 8 [ 368.332386][ T7479] veth0_vlan: entered promiscuous mode [ 368.380438][ T7479] veth1_vlan: entered promiscuous mode [ 368.586465][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 368.618077][ T7479] veth0_macvtap: entered promiscuous mode [ 368.648771][ T7468] veth0_vlan: entered promiscuous mode [ 368.659680][ T7479] veth1_macvtap: entered promiscuous mode [ 368.712234][ T7468] veth1_vlan: entered promiscuous mode [ 368.741381][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 368.750392][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.750431][ T25] usb 2-1: config 0 has no interfaces? [ 368.787806][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.787840][ T25] usb 2-1: Product: syz [ 368.787861][ T25] usb 2-1: Manufacturer: syz [ 368.787882][ T25] usb 2-1: SerialNumber: syz [ 368.822130][ T25] usb 2-1: config 0 descriptor?? [ 368.847635][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.939463][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.976581][ T8057] FAULT_INJECTION: forcing a failure. [ 368.976581][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 368.976632][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(full) [ 368.976698][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 368.976723][ T8057] Call Trace: [ 368.976736][ T8057] [ 368.976756][ T8057] dump_stack_lvl+0x100/0x190 [ 368.976816][ T8057] should_fail_ex.cold+0x5/0xa [ 368.976859][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.976913][ T8057] should_failslab+0xc2/0x120 [ 368.976958][ T8057] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 368.977027][ T8057] ? kstrdup_const+0x63/0x80 [ 368.977091][ T8057] kstrdup+0x51/0xe0 [ 368.977145][ T8057] kstrdup_const+0x63/0x80 [ 368.977201][ T8057] __kernfs_new_node+0x9b/0xa10 [ 368.977263][ T8057] ? __pfx___kernfs_new_node+0x10/0x10 [ 368.977321][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.977368][ T8057] ? lock_acquire+0x1d1/0x380 [ 368.977410][ T8057] ? kernfs_root+0x23/0x2a0 [ 368.977461][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.977508][ T8057] ? find_held_lock+0x2b/0x80 [ 368.977564][ T8057] ? kernfs_root+0xee/0x2a0 [ 368.977610][ T8057] ? kernfs_root+0xee/0x2a0 [ 368.977654][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.977714][ T8057] kernfs_new_node+0x117/0x150 [ 368.977782][ T8057] __kernfs_create_file+0x53/0x350 [ 368.977827][ T8057] cgroup_addrm_files+0x4ef/0xdb0 [ 368.977895][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.977944][ T8057] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 368.978011][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.978056][ T8057] ? idr_replace+0xfa/0x170 [ 368.978115][ T8057] css_populate_dir+0x161/0x590 [ 368.978173][ T8057] cgroup_apply_control_enable+0x441/0xdd0 [ 368.978256][ T8057] cgroup_mkdir+0x57f/0x1330 [ 368.978305][ T8057] ? __pfx_cgroup_mkdir+0x10/0x10 [ 368.978350][ T8057] kernfs_iop_mkdir+0x111/0x190 [ 368.978403][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.978455][ T8057] vfs_mkdir+0x364/0x850 [ 368.978519][ T8057] filename_mkdirat+0x48b/0x5e0 [ 368.978570][ T8057] ? __pfx_filename_mkdirat+0x10/0x10 [ 368.978616][ T8057] ? strncpy_from_user+0x19d/0x2d0 [ 368.978682][ T8057] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.978728][ T8057] ? do_getname+0x191/0x390 [ 368.978791][ T8057] __x64_sys_mkdirat+0x89/0xc0 [ 368.978838][ T8057] do_syscall_64+0x123/0x790 [ 368.978891][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.978931][ T8057] RIP: 0033:0x7fe11379e159 [ 368.978961][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.979001][ T8057] RSP: 002b:00007fe1119f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 368.979038][ T8057] RAX: ffffffffffffffda RBX: 00007fe113a25fa0 RCX: 00007fe11379e159 [ 368.979065][ T8057] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 368.979091][ T8057] RBP: 00007fe11383506b R08: 0000000000000000 R09: 0000000000000000 [ 368.979115][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.979140][ T8057] R13: 00007fe113a26038 R14: 00007fe113a25fa0 R15: 00007ffd32ae0db8 [ 368.979191][ T8057] [ 368.979310][ T8057] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 369.076860][ T25] usb 2-1: USB disconnect, device number 10 [ 369.310759][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.312349][ T6321] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.312415][ T6321] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.312477][ T6321] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.395234][ T7468] veth0_macvtap: entered promiscuous mode [ 369.654295][ T7468] veth1_macvtap: entered promiscuous mode [ 369.755530][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 370.112831][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 370.292402][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.293451][ T25] usb 2-1: config 0 has no interfaces? [ 370.711982][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.712030][ T25] usb 2-1: Product: syz [ 370.712058][ T25] usb 2-1: Manufacturer: syz [ 370.712085][ T25] usb 2-1: SerialNumber: syz [ 370.761974][ T25] usb 2-1: config 0 descriptor?? [ 370.967859][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.967892][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.018978][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.117230][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.529058][ T25] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 371.740670][ T25] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 371.876455][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.877047][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.910032][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.910074][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 371.910141][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.923412][ T25] usb 7-1: config 0 descriptor?? [ 371.970839][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 371.971163][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 372.016791][ T5918] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.035802][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.035832][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.135972][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 372.150902][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 372.150968][ T25] usb 7-1: media controller created [ 372.193215][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.437339][ T8090] loop2: detected capacity change from 0 to 32768 [ 372.460865][ T5917] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.463214][ T5988] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.487899][ T8079] dvb-usb: bulk message failed: -22 (4/0) [ 372.599543][ T5988] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.605503][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 372.605674][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 372.749516][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 372.921476][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 372.921508][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 372.950754][ T25] usb 7-1: USB disconnect, device number 6 [ 372.993129][ T5616] usb 2-1: USB disconnect, device number 11 [ 373.088738][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 373.088799][ T5753] dvb-usb: error while querying for an remote control event. [ 373.342981][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.354990][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.356739][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.361099][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.388811][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.513145][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.8.167'. [ 373.717407][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 373.950837][ T8114] zram: Cannot change disksize for initialized device [ 375.435486][ T5620] Bluetooth: hci2: command tx timeout [ 377.227933][ T8154] overlayfs: failed to resolve './bus': -2 [ 377.737803][ T5620] Bluetooth: hci2: command tx timeout [ 378.003166][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.003248][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.351753][ T8153] ceph: No mds server is up or the cluster is laggy [ 378.352274][ T25] libceph: connect (1)[c::]:6789 error -101 [ 378.352427][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 378.610609][ T25] libceph: connect (1)[c::]:6789 error -101 [ 378.610832][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 379.129339][ T25] libceph: connect (1)[c::]:6789 error -101 [ 379.131623][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 379.754570][ T5620] Bluetooth: hci2: command tx timeout [ 379.920238][ T7585] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.883977][ T8172] loop6: detected capacity change from 0 to 32768 [ 381.046734][ T7585] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.095966][ T5746] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 381.250151][ T5746] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 381.264072][ T5746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.264112][ T5746] usb 3-1: config 0 has no interfaces? [ 381.284270][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.284313][ T5746] usb 3-1: Product: syz [ 381.284339][ T5746] usb 3-1: Manufacturer: syz [ 381.284366][ T5746] usb 3-1: SerialNumber: syz [ 381.308094][ T5746] usb 3-1: config 0 descriptor?? [ 381.448401][ T8189] kAFS: unable to lookup cell 'sy0' [ 381.563027][ T10] usb 3-1: USB disconnect, device number 10 [ 381.631532][ T7585] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.979884][ T5619] Bluetooth: hci2: command tx timeout [ 382.802267][ T8202] netlink: del zone limit has 4 unknown bytes [ 383.087528][ T7585] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.485074][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 383.706217][ T10] usb 3-1: device descriptor read/all, error -71 [ 383.957318][ T8224] loop2: detected capacity change from 0 to 256 [ 383.959499][ T8224] vfat: Unknown parameter 'iociceland' [ 384.420368][ T8231] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 384.853079][ T7585] bridge_slave_1: left allmulticast mode [ 384.853118][ T7585] bridge_slave_1: left promiscuous mode [ 384.853355][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.899995][ T7585] bridge_slave_0: left allmulticast mode [ 384.900034][ T7585] bridge_slave_0: left promiscuous mode [ 384.903405][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.624332][ T7585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.891501][ T7585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.916448][ T7585] bond0 (unregistering): Released all slaves [ 387.138108][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.138330][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.138533][ T8105] bridge_slave_0: entered allmulticast mode [ 387.166509][ T8105] bridge_slave_0: entered promiscuous mode [ 387.229111][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.229234][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.229443][ T8105] bridge_slave_1: entered allmulticast mode [ 387.235195][ T8105] bridge_slave_1: entered promiscuous mode [ 388.021681][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.048584][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.194599][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 388.297857][ T8105] team0: Port device team_slave_0 added [ 388.340962][ T7585] hsr_slave_0: left promiscuous mode [ 388.346596][ T25] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 388.347954][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.347992][ T25] usb 1-1: config 0 has no interfaces? [ 388.353496][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.353537][ T25] usb 1-1: Product: syz [ 388.353563][ T25] usb 1-1: Manufacturer: syz [ 388.353589][ T25] usb 1-1: SerialNumber: syz [ 388.397278][ T7585] hsr_slave_1: left promiscuous mode [ 388.402072][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.402103][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.419716][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.419749][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.479230][ T25] usb 1-1: config 0 descriptor?? [ 388.515513][ T7585] veth1_macvtap: left promiscuous mode [ 388.515563][ T7585] veth0_macvtap: left promiscuous mode [ 388.515684][ T7585] veth1_vlan: left promiscuous mode [ 388.515768][ T7585] veth0_vlan: left promiscuous mode [ 388.706631][ T10] usb 1-1: USB disconnect, device number 8 [ 389.184650][ T5770] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 389.296115][ T8295] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8295] [ 389.335443][ T5770] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 389.337139][ T5770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.337181][ T5770] usb 1-1: config 0 has no interfaces? [ 389.340704][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.340750][ T5770] usb 1-1: Product: syz [ 389.340784][ T5770] usb 1-1: Manufacturer: syz [ 389.340811][ T5770] usb 1-1: SerialNumber: syz [ 389.398614][ T5770] usb 1-1: config 0 descriptor?? [ 389.489679][ T7585] team0 (unregistering): Port device team_slave_1 removed [ 389.544061][ T7585] team0 (unregistering): Port device team_slave_0 removed [ 389.933546][ T8105] team0: Port device team_slave_1 added [ 390.130723][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.130752][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.130800][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.145087][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.145111][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.145154][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.331908][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.338608][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.373162][ T8105] hsr_slave_0: entered promiscuous mode [ 391.385673][ T8105] hsr_slave_1: entered promiscuous mode [ 391.392620][ T8105] debugfs: 'hsr0' already exists in 'hsr' [ 391.392644][ T8105] Cannot create hsr debugfs directory [ 391.903487][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.912735][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.914081][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.930314][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.931238][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.993292][ T8327] loop2: detected capacity change from 0 to 16 [ 393.047700][ T8327] erofs (device loop2): mounted with root inode @ nid 36. [ 393.051702][ T8327] overlayfs: missing 'lowerdir' [ 393.339654][ T5616] usb 1-1: USB disconnect, device number 9 [ 393.994883][ T5619] Bluetooth: hci0: command tx timeout [ 396.079922][ T5619] Bluetooth: hci0: command tx timeout [ 397.235049][ T8372] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5612] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8372] [ 397.702339][ T7585] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.120917][ T8380] netlink: 'syz.1.476': attribute type 11 has an invalid length. [ 398.155019][ T5619] Bluetooth: hci0: command tx timeout [ 398.212868][ T7585] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.240467][ T5619] Bluetooth: hci0: command tx timeout [ 400.355372][ T7585] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.737709][ T7585] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.994560][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 403.200107][ T8105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.225283][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.226390][ T8105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.754040][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.872384][ T8105] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.889009][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.991095][ T8105] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.050191][ T8105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.210915][ T980] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 406.247567][ T7585] bridge_slave_1: left allmulticast mode [ 406.247607][ T7585] bridge_slave_1: left promiscuous mode [ 406.247847][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.252383][ T7585] bridge_slave_0: left allmulticast mode [ 406.252414][ T7585] bridge_slave_0: left promiscuous mode [ 406.252640][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.375570][ T980] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 406.376984][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.377023][ T980] usb 2-1: config 0 has no interfaces? [ 406.379694][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.379734][ T980] usb 2-1: Product: syz [ 406.379762][ T980] usb 2-1: Manufacturer: syz [ 406.379789][ T980] usb 2-1: SerialNumber: syz [ 406.435979][ T980] usb 2-1: config 0 descriptor?? [ 406.668865][ T980] usb 2-1: USB disconnect, device number 12 [ 406.789336][ T8462] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5612] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8462] [ 407.163029][ T7585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.185394][ T980] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 407.213624][ T7585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.230600][ T7585] bond0 (unregistering): Released all slaves [ 407.337029][ T980] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 407.340929][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.340975][ T980] usb 2-1: config 0 has no interfaces? [ 407.482133][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.482303][ T980] usb 2-1: Product: syz [ 407.482422][ T980] usb 2-1: Manufacturer: syz [ 407.482476][ T980] usb 2-1: SerialNumber: syz [ 407.929007][ T980] usb 2-1: config 0 descriptor?? [ 410.316027][ T5616] usb 2-1: USB disconnect, device number 13 [ 412.935597][ T8515] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 417.559253][ T7585] hsr_slave_0: left promiscuous mode [ 417.573781][ T7585] hsr_slave_1: left promiscuous mode [ 417.575070][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.575101][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.600277][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.600310][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.651207][ T7585] veth1_macvtap: left promiscuous mode [ 417.651264][ T7585] veth0_macvtap: left promiscuous mode [ 417.651391][ T7585] veth1_vlan: left promiscuous mode [ 417.674688][ T7585] veth0_vlan: left promiscuous mode [ 417.764597][ T5770] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 418.040596][ T5770] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 418.041979][ T5770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.042018][ T5770] usb 1-1: config 0 has no interfaces? [ 418.054240][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.054282][ T5770] usb 1-1: Product: syz [ 418.054308][ T5770] usb 1-1: Manufacturer: syz [ 418.054335][ T5770] usb 1-1: SerialNumber: syz [ 418.094755][ T5770] usb 1-1: config 0 descriptor?? [ 418.496651][ T5889] usb 1-1: USB disconnect, device number 10 [ 418.662870][ T8566] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[7146] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[8566] [ 419.176662][ T7585] team0 (unregistering): Port device team_slave_1 removed [ 419.185370][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 419.242890][ T7585] team0 (unregistering): Port device team_slave_0 removed [ 419.646470][ T5889] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 420.126024][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.126070][ T5889] usb 1-1: config 0 has no interfaces? [ 420.159085][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.159133][ T5889] usb 1-1: Product: syz [ 420.159160][ T5889] usb 1-1: Manufacturer: syz [ 420.159189][ T5889] usb 1-1: SerialNumber: syz [ 420.191604][ T5889] usb 1-1: config 0 descriptor?? [ 420.522218][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 421.230478][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.244673][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.332553][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.332677][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.332982][ T8320] bridge_slave_0: entered allmulticast mode [ 421.367423][ T8320] bridge_slave_0: entered promiscuous mode [ 421.386232][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.388093][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.388270][ T8320] bridge_slave_1: entered allmulticast mode [ 421.428732][ T8320] bridge_slave_1: entered promiscuous mode [ 422.789770][ T5746] usb 1-1: USB disconnect, device number 11 [ 422.828188][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.928139][ T8320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.960625][ T8320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.162776][ T8320] team0: Port device team_slave_0 added [ 423.176586][ T8320] team0: Port device team_slave_1 added [ 424.468284][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.473878][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.473902][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.473949][ T8320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.561972][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.562000][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.562049][ T8320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.688334][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.688465][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.764349][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.764531][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.855984][ T8320] hsr_slave_0: entered promiscuous mode [ 424.864685][ T8320] hsr_slave_1: entered promiscuous mode [ 424.865534][ T8320] debugfs: 'hsr0' already exists in 'hsr' [ 424.865563][ T8320] Cannot create hsr debugfs directory [ 427.267960][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 427.322509][ T8320] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.338222][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.339329][ T8320] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 427.383362][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.393284][ T8320] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 427.410859][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.412599][ T8320] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 427.436676][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.724183][ T8661] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 429.625277][ T8675] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 429.871824][ T8320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.107573][ T8320] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.198409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.198544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.288190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.288320][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.046928][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.877343][ T8694] [U] ^C [ 434.497113][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 435.144854][ T8320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.173372][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.179274][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.186498][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.201109][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.201952][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 438.317673][ T5620] Bluetooth: hci6: command tx timeout [ 438.392570][ T8765] xt_CT: No such helper "pptp" [ 439.438740][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.438821][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.394921][ T5620] Bluetooth: hci6: command tx timeout [ 440.600062][ T8320] veth0_vlan: entered promiscuous mode [ 440.689347][ T8320] veth1_vlan: entered promiscuous mode [ 440.747566][ T8797] Bluetooth: MGMT ver 1.23 [ 441.395770][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 441.726168][ T8320] veth0_macvtap: entered promiscuous mode [ 442.474623][ T5620] Bluetooth: hci6: command tx timeout [ 443.019678][ T8320] veth1_macvtap: entered promiscuous mode [ 444.801776][ T5620] Bluetooth: hci6: command tx timeout [ 444.996097][ T59] bridge_slave_1: left allmulticast mode [ 444.996137][ T59] bridge_slave_1: left promiscuous mode [ 444.996387][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.047807][ T59] bridge_slave_0: left allmulticast mode [ 445.047850][ T59] bridge_slave_0: left promiscuous mode [ 445.050527][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.982561][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.018253][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.160716][ T59] bond0 (unregistering): Released all slaves [ 449.520770][ T59] hsr_slave_0: left promiscuous mode [ 449.531764][ T59] hsr_slave_1: left promiscuous mode [ 449.532831][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.551495][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.635234][ T8852] loop2: detected capacity change from 0 to 32768 [ 449.847549][ T8852] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 451.317779][ T5612] ocfs2: Unmounting device (7,2) on (node local) [ 452.251947][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.263775][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.274101][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.286746][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.290750][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.678551][ T59] team0 (unregistering): Port device team_slave_1 removed [ 452.798295][ T8907] netlink: del zone limit has 4 unknown bytes [ 453.496214][ T59] team0 (unregistering): Port device team_slave_0 removed [ 454.764553][ T5620] Bluetooth: hci2: command tx timeout [ 456.795515][ T5620] Bluetooth: hci2: command tx timeout [ 458.874791][ T5620] Bluetooth: hci2: command tx timeout [ 460.062951][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.063075][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.063227][ T8739] bridge_slave_0: entered allmulticast mode [ 460.098637][ T8739] bridge_slave_0: entered promiscuous mode [ 460.135676][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.135793][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.135934][ T8739] bridge_slave_1: entered allmulticast mode [ 460.158957][ T8739] bridge_slave_1: entered promiscuous mode [ 460.999387][ T5620] Bluetooth: hci2: command tx timeout [ 461.664029][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.866765][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.943748][ T8739] team0: Port device team_slave_0 added [ 462.961637][ T8739] team0: Port device team_slave_1 added [ 463.315294][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.315320][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.315369][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.331846][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.331868][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.331916][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.660497][ T9017] affs: No valid root block on device nullb0 [ 464.757546][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.796115][ T8739] hsr_slave_0: entered promiscuous mode [ 465.801191][ T8739] hsr_slave_1: entered promiscuous mode [ 465.815868][ T8739] debugfs: 'hsr0' already exists in 'hsr' [ 465.815895][ T8739] Cannot create hsr debugfs directory [ 470.507850][ T9071] netlink: del zone limit has 4 unknown bytes [ 470.549586][ T59] bridge_slave_1: left allmulticast mode [ 470.549625][ T59] bridge_slave_1: left promiscuous mode [ 470.549885][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.610040][ T59] bridge_slave_0: left allmulticast mode [ 470.610082][ T59] bridge_slave_0: left promiscuous mode [ 470.610331][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.240810][ T9073] [U] ^C [ 471.444520][ T9079] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 474.522514][ T9081] affs: No valid root block on device nullb0 [ 474.618701][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.018806][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.251908][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.271729][ T59] bond0 (unregistering): Released all slaves [ 477.787597][ T59] hsr_slave_0: left promiscuous mode [ 477.791349][ T59] hsr_slave_1: left promiscuous mode [ 477.792370][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.823531][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.863933][ T59] veth1_macvtap: left promiscuous mode [ 477.863983][ T59] veth0_macvtap: left promiscuous mode [ 477.864106][ T59] veth1_vlan: left promiscuous mode [ 477.864192][ T59] veth0_vlan: left promiscuous mode [ 478.287536][ T9126] netlink: del zone limit has 4 unknown bytes [ 479.432943][ T59] team0 (unregistering): Port device team_slave_1 removed [ 479.477283][ T59] team0 (unregistering): Port device team_slave_0 removed [ 480.163674][ T9131] loop6: detected capacity change from 0 to 256 [ 480.758764][ T9131] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 481.335155][ T9136] [U] ^C [ 481.990525][ T31] audit: type=1800 audit(1790751322.680:153): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.619" name="file1" dev="loop6" ino=1048630 res=0 errno=0 [ 483.324586][ T5746] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 483.484453][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 483.484662][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.484866][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.485110][ T8890] bridge_slave_0: entered allmulticast mode [ 483.487928][ T8890] bridge_slave_0: entered promiscuous mode [ 483.664759][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.664915][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.665160][ T8890] bridge_slave_1: entered allmulticast mode [ 483.686231][ T8890] bridge_slave_1: entered promiscuous mode [ 484.203466][ T5746] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.203918][ T5746] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 484.228371][ T5746] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 484.228783][ T5746] usb 2-1: can't read configurations, error -71 [ 484.849905][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.901536][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.823936][ T8890] team0: Port device team_slave_0 added [ 486.108201][ T8890] team0: Port device team_slave_1 added [ 487.084025][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.084053][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.084101][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.139881][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.139906][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.139953][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.382925][ T8739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.415357][ T8739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.467332][ T8890] hsr_slave_0: entered promiscuous mode [ 488.482842][ T8890] hsr_slave_1: entered promiscuous mode [ 488.483652][ T8890] debugfs: 'hsr0' already exists in 'hsr' [ 488.483680][ T8890] Cannot create hsr debugfs directory [ 488.521681][ T8739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 488.559960][ T8739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.562532][ T8739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 488.599104][ T8739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.797855][ T8739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 490.063069][ T9194] [U] ^C [ 490.104021][ T8739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.730401][ T9189] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 492.529890][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.613824][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.658997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.659125][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.960040][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.960169][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.288047][ T8890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 494.310451][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.312834][ T8890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 494.341921][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.358173][ T8890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 494.379663][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.380722][ T8890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 494.405604][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.418020][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.266580][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.322391][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.322515][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.349236][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.349363][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.255366][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.259683][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.260441][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.262398][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.263124][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.712478][ T9287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.106821][ T9272] [U] ^C [ 500.458670][ T5619] Bluetooth: hci0: command tx timeout [ 500.502141][ T9301] affs: No valid root block on device nullb0 [ 500.538567][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.879310][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.879437][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.474490][ T5619] Bluetooth: hci0: command tx timeout [ 504.815406][ T5619] Bluetooth: hci0: command tx timeout [ 506.874600][ T5619] Bluetooth: hci0: command tx timeout [ 507.136433][ T9358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.223414][ T9363] [U] ^C [ 508.532511][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.207740][ T5820] bridge_slave_1: left allmulticast mode [ 512.207778][ T5820] bridge_slave_1: left promiscuous mode [ 512.208050][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.248745][ T5820] bridge_slave_0: left allmulticast mode [ 512.248777][ T5820] bridge_slave_0: left promiscuous mode [ 512.253453][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.829359][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.833294][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.849116][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.853905][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.868744][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 516.084590][ T5620] Bluetooth: hci6: command tx timeout [ 516.411092][ T9452] [U] ^C [ 517.240073][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.189398][ T5620] Bluetooth: hci6: command tx timeout [ 518.908428][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.942912][ T5820] bond0 (unregistering): Released all slaves [ 519.317219][ T9478] affs: No valid root block on device nullb0 [ 519.360780][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.234980][ T5620] Bluetooth: hci6: command tx timeout [ 520.616836][ T9488] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 520.983551][ T5820] hsr_slave_0: left promiscuous mode [ 520.993389][ T5820] hsr_slave_1: left promiscuous mode [ 520.998293][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.011871][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.324482][ T5620] Bluetooth: hci6: command tx timeout [ 525.095168][ T9519] [U] ^C [ 527.275552][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 527.976659][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 528.404014][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.640381][ T9542] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 529.730704][ T9561] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 531.156491][ T5270] 8021q: adding VLAN 0 to HW filter on device eth20 [ 533.302919][ T9589] affs: No valid root block on device nullb0 [ 533.951820][ T9585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.987778][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.987991][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.988139][ T9279] bridge_slave_0: entered allmulticast mode [ 534.993570][ T9279] bridge_slave_0: entered promiscuous mode [ 535.004034][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.006249][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.006400][ T9279] bridge_slave_1: entered allmulticast mode [ 535.011521][ T9279] bridge_slave_1: entered promiscuous mode [ 535.297237][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.300762][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.972028][ T9618] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 535.981983][ T9616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.241990][ T9279] team0: Port device team_slave_0 added [ 536.259121][ T9279] team0: Port device team_slave_1 added [ 537.944558][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.944585][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.944633][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.013690][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.013714][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.013762][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.331142][ T9645] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 540.656379][ T9279] hsr_slave_0: entered promiscuous mode [ 540.661825][ T9279] hsr_slave_1: entered promiscuous mode [ 540.663677][ T9279] debugfs: 'hsr0' already exists in 'hsr' [ 540.663705][ T9279] Cannot create hsr debugfs directory [ 546.563625][ T9713] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 550.336558][ T5820] bridge_slave_1: left allmulticast mode [ 550.336597][ T5820] bridge_slave_1: left promiscuous mode [ 550.336858][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.403318][ T5820] bridge_slave_0: left allmulticast mode [ 550.403355][ T5820] bridge_slave_0: left promiscuous mode [ 550.424513][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.429049][ T9765] [U] ^C [ 553.233734][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.249730][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.253221][ T5820] bond0 (unregistering): Released all slaves [ 553.558406][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.558532][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.558687][ T9437] bridge_slave_0: entered allmulticast mode [ 553.560754][ T9437] bridge_slave_0: entered promiscuous mode [ 553.593992][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.594121][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.594300][ T9437] bridge_slave_1: entered allmulticast mode [ 553.628374][ T9437] bridge_slave_1: entered promiscuous mode [ 553.804138][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.838951][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.679556][ T9437] team0: Port device team_slave_0 added [ 554.690837][ T9437] team0: Port device team_slave_1 added [ 554.930099][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.930126][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.930174][ T9437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.998790][ T5820] hsr_slave_0: left promiscuous mode [ 555.000564][ T5820] hsr_slave_1: left promiscuous mode [ 555.001524][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.067019][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.874237][ T9826] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 559.019874][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 559.810276][ T9831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.812578][ T9831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.831725][ T9831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.841454][ T9831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.852561][ T9831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.927195][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 560.702666][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.702693][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.702741][ T9437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.543812][ T9437] hsr_slave_0: entered promiscuous mode [ 561.551789][ T9437] hsr_slave_1: entered promiscuous mode [ 561.552606][ T9437] debugfs: 'hsr0' already exists in 'hsr' [ 561.552634][ T9437] Cannot create hsr debugfs directory [ 561.914973][ T9831] Bluetooth: hci2: command tx timeout [ 562.320056][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.320169][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.125556][ T9871] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 564.044466][ T9831] Bluetooth: hci2: command tx timeout [ 566.079314][ T9831] Bluetooth: hci2: command tx timeout [ 566.471932][ T35] bridge_slave_1: left allmulticast mode [ 566.471971][ T35] bridge_slave_1: left promiscuous mode [ 566.472206][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.501282][ T35] bridge_slave_0: left allmulticast mode [ 566.501312][ T35] bridge_slave_0: left promiscuous mode [ 566.512645][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.117287][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.209309][ T9915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.225697][ T9831] Bluetooth: hci2: command tx timeout [ 568.431241][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.665647][ T35] bond0 (unregistering): Released all slaves [ 570.281365][ T35] hsr_slave_0: left promiscuous mode [ 570.314782][ T35] hsr_slave_1: left promiscuous mode [ 570.327090][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.331269][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.223154][ T9956] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 573.724415][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.735328][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.736548][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.746230][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.763369][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.924192][ T9953] affs: No valid root block on device nullb0 [ 574.952617][ T9953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.913066][ T9964] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 576.074850][ T9831] Bluetooth: hci0: command tx timeout [ 576.214244][ T35] team0 (unregistering): Port device team_slave_1 removed [ 577.895164][ T35] team0 (unregistering): Port device team_slave_0 removed [ 578.172724][ T9831] Bluetooth: hci0: command tx timeout [ 578.277525][ T9983] loop6: detected capacity change from 0 to 256 [ 579.355952][ T9983] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 579.407043][ T5270] 8021q: adding VLAN 0 to HW filter on device eth21 [ 579.551416][ T31] audit: type=1800 audit(1790751420.180:154): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.786" name="file1" dev="loop6" ino=1048631 res=0 errno=0 [ 580.573282][ T9831] Bluetooth: hci0: command tx timeout [ 581.769186][T10022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.290201][T10017] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 582.634468][ T9831] Bluetooth: hci0: command tx timeout [ 584.213661][T10047] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.697102][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.697227][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.697408][ T9829] bridge_slave_0: entered allmulticast mode [ 585.702994][ T9829] bridge_slave_0: entered promiscuous mode [ 585.717585][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.718865][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.719018][ T9829] bridge_slave_1: entered allmulticast mode [ 585.732979][ T9829] bridge_slave_1: entered promiscuous mode [ 586.135331][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.153150][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.226884][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.227002][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.227156][ T9950] bridge_slave_0: entered allmulticast mode [ 590.232574][ T9950] bridge_slave_0: entered promiscuous mode [ 590.275011][ T9829] team0: Port device team_slave_0 added [ 590.283137][ T9829] team0: Port device team_slave_1 added [ 590.344836][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.344859][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.344908][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.354610][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.354632][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.354681][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.839043][T10102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.908418][T10103] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 591.808282][T10113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.992840][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.992962][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.993166][ T9950] bridge_slave_1: entered allmulticast mode [ 594.000732][ T9950] bridge_slave_1: entered promiscuous mode [ 594.513024][T10127] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 594.694617][T10129] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 595.032521][T10131] FAULT_INJECTION: forcing a failure. [ 595.032521][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 595.032591][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.1.811 Not tainted syzkaller #0 PREEMPT(full) [ 595.032645][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 595.032668][T10131] Call Trace: [ 595.032681][T10131] [ 595.032692][T10131] dump_stack_lvl+0x100/0x190 [ 595.032750][T10131] should_fail_ex.cold+0x5/0xa [ 595.032800][T10131] _copy_from_user+0x2e/0xd0 [ 595.032845][T10131] __sys_bpf+0x2f5/0x4a30 [ 595.032899][T10131] ? __pfx___sys_bpf+0x10/0x10 [ 595.032940][T10131] ? __pfx_futex_hash+0x10/0x10 [ 595.032975][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033013][T10131] ? get_pid_task+0xfc/0x250 [ 595.033051][T10131] ? get_pid_task+0xfc/0x250 [ 595.033086][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033125][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033171][T10131] ? find_held_lock+0x2b/0x80 [ 595.033221][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033257][T10131] ? rcu_read_lock_any_held+0x6a/0x90 [ 595.033300][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033336][T10131] ? find_held_lock+0x2b/0x80 [ 595.033378][T10131] ? ksys_write+0x190/0x250 [ 595.033423][T10131] ? ksys_write+0x190/0x250 [ 595.033472][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033526][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033561][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033596][T10131] ? __x64_sys_futex+0x358/0x4d0 [ 595.033645][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033684][T10131] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.033720][T10131] ? xfd_validate_state+0x129/0x190 [ 595.033754][T10131] ? __x64_sys_bpf+0xce/0x140 [ 595.033798][T10131] __x64_sys_bpf+0xce/0x140 [ 595.033844][T10131] ? do_syscall_64+0xae/0x790 [ 595.033882][T10131] do_syscall_64+0x123/0x790 [ 595.033921][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.033952][T10131] RIP: 0033:0x7f88be59e159 [ 595.033976][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.034006][T10131] RSP: 002b:00007f88bf4c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.034034][T10131] RAX: ffffffffffffffda RBX: 00007f88be825fa0 RCX: 00007f88be59e159 [ 595.034054][T10131] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 595.034073][T10131] RBP: 00007f88be63506b R08: 0000000000000000 R09: 0000000000000000 [ 595.034091][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.034111][T10131] R13: 00007f88be826038 R14: 00007f88be825fa0 R15: 00007ffecdc5ac28 [ 595.034150][T10131] [ 595.587796][ T5988] bridge_slave_1: left allmulticast mode [ 595.590333][ T5988] bridge_slave_1: left promiscuous mode [ 595.590557][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.630851][ T5988] bridge_slave_0: left allmulticast mode [ 595.639041][ T5988] bridge_slave_0: left promiscuous mode [ 595.639274][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.807453][T10149] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 597.458675][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.529709][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.533044][ T5988] bond0 (unregistering): Released all slaves [ 597.611498][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.643741][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.950692][ T9829] hsr_slave_0: entered promiscuous mode [ 598.969873][ T9829] hsr_slave_1: entered promiscuous mode [ 598.970689][ T9829] debugfs: 'hsr0' already exists in 'hsr' [ 598.970716][ T9829] Cannot create hsr debugfs directory [ 599.534262][ T5988] hsr_slave_0: left promiscuous mode [ 599.550888][ T5988] hsr_slave_1: left promiscuous mode [ 599.551828][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.567768][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.338324][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 600.401647][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 601.089225][T10164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.437995][T10162] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 602.017890][ T9950] team0: Port device team_slave_0 added [ 602.031100][ T9950] team0: Port device team_slave_1 added [ 603.255954][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.255981][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.256029][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.790252][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.790278][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.790327][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.038220][T10187] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 606.069017][T10191] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 606.575132][T10192] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 606.962978][ T9950] hsr_slave_0: entered promiscuous mode [ 606.964082][ T9950] hsr_slave_1: entered promiscuous mode [ 606.967759][ T9950] debugfs: 'hsr0' already exists in 'hsr' [ 606.967787][ T9950] Cannot create hsr debugfs directory [ 607.517704][T10200] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5612] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[10200] [ 608.543149][T10211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.726624][T10223] affs: No valid root block on device nullb0 [ 610.784435][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.998865][ T9829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 613.041040][ T9829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.048923][ T9829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.076162][ T9829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.080267][ T9829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.300866][T10239] netdevsim netdevsim6: Direct firmware load for ~ failed with error -2 [ 615.300965][T10239] netdevsim netdevsim6: Falling back to sysfs fallback for: ~ [ 616.580741][ T9829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.589401][ T9829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.632704][ T9829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.750386][ T9950] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 619.817571][ T9950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.830063][ T9950] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 619.870259][ T9950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.871265][ T9950] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 619.911306][ T9950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.920864][ T9950] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 619.949254][ T9950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.339475][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.392764][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.421894][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.421985][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.443699][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.443818][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.326693][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 623.332488][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 623.333986][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 623.363875][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 623.372492][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 623.794902][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.795006][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.018770][T10293] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 625.434621][ T9831] Bluetooth: hci6: command tx timeout [ 627.515128][ T9831] Bluetooth: hci6: command tx timeout [ 629.428171][T10324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.597515][ T9831] Bluetooth: hci6: command tx timeout [ 630.503446][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.087071][ T1100] bridge_slave_1: left allmulticast mode [ 631.087121][ T1100] bridge_slave_1: left promiscuous mode [ 631.087357][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.100602][ T1100] bridge_slave_0: left allmulticast mode [ 631.100632][ T1100] bridge_slave_0: left promiscuous mode [ 631.102477][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.461375][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.666984][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.672930][ T1100] bond0 (unregistering): Released all slaves [ 631.674927][ T9831] Bluetooth: hci6: command tx timeout [ 632.946447][ T1100] hsr_slave_0: left promiscuous mode [ 632.965086][ T1100] hsr_slave_1: left promiscuous mode [ 632.967361][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.980720][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.437407][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.454941][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.462597][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.470903][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.473078][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.591770][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 635.114768][T10380] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 635.259390][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 635.538919][T10391] FAULT_INJECTION: forcing a failure. [ 635.538919][T10391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.538975][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.0.862 Not tainted syzkaller #0 PREEMPT(full) [ 635.539022][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 635.539047][T10391] Call Trace: [ 635.539060][T10391] [ 635.539075][T10391] dump_stack_lvl+0x100/0x190 [ 635.539136][T10391] should_fail_ex.cold+0x5/0xa [ 635.539189][T10391] _copy_from_user+0x2e/0xd0 [ 635.539250][T10391] __sys_bpf+0x2f5/0x4a30 [ 635.539323][T10391] ? __pfx___sys_bpf+0x10/0x10 [ 635.539381][T10391] ? find_held_lock+0x2b/0x80 [ 635.539440][T10391] ? futex_wake+0x4ea/0x5e0 [ 635.539507][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.539559][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.539642][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.539692][T10391] ? rcu_read_lock_any_held+0x6a/0x90 [ 635.539752][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.539801][T10391] ? find_held_lock+0x2b/0x80 [ 635.539858][T10391] ? ksys_write+0x190/0x250 [ 635.539921][T10391] ? ksys_write+0x190/0x250 [ 635.539992][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.540064][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.540113][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.540162][T10391] ? __x64_sys_futex+0x358/0x4d0 [ 635.540221][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.540272][T10391] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.540322][T10391] ? xfd_validate_state+0x129/0x190 [ 635.540369][T10391] ? __x64_sys_bpf+0xce/0x140 [ 635.540428][T10391] __x64_sys_bpf+0xce/0x140 [ 635.540492][T10391] ? do_syscall_64+0xae/0x790 [ 635.540545][T10391] do_syscall_64+0x123/0x790 [ 635.540605][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.540648][T10391] RIP: 0033:0x7fe11379e159 [ 635.540679][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.540720][T10391] RSP: 002b:00007fe1119f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.540759][T10391] RAX: ffffffffffffffda RBX: 00007fe113a25fa0 RCX: 00007fe11379e159 [ 635.540787][T10391] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 635.540813][T10391] RBP: 00007fe11383506b R08: 0000000000000000 R09: 0000000000000000 [ 635.540839][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.540864][T10391] R13: 00007fe113a26038 R14: 00007fe113a25fa0 R15: 00007ffd32ae0db8 [ 635.540917][T10391] [ 636.555846][ T9831] Bluetooth: hci2: command tx timeout [ 637.216365][T10408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.285229][T10409] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 638.539823][T10424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.646321][ T9831] Bluetooth: hci2: command tx timeout [ 639.708071][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 641.924074][ T9831] Bluetooth: hci2: command tx timeout [ 642.283698][T10448] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 642.333420][T10447] FAULT_INJECTION: forcing a failure. [ 642.333420][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.333464][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.6.874 Not tainted syzkaller #0 PREEMPT(full) [ 642.333508][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 642.333530][T10447] Call Trace: [ 642.333542][T10447] [ 642.333557][T10447] dump_stack_lvl+0x100/0x190 [ 642.333615][T10447] should_fail_ex.cold+0x5/0xa [ 642.333663][T10447] _copy_from_user+0x2e/0xd0 [ 642.333716][T10447] __sys_bpf+0x2f5/0x4a30 [ 642.333786][T10447] ? __pfx___sys_bpf+0x10/0x10 [ 642.333844][T10447] ? find_held_lock+0x2b/0x80 [ 642.333901][T10447] ? futex_wake+0x4ea/0x5e0 [ 642.333968][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334018][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334097][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334151][T10447] ? rcu_read_lock_any_held+0x6a/0x90 [ 642.334211][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334260][T10447] ? find_held_lock+0x2b/0x80 [ 642.334316][T10447] ? ksys_write+0x190/0x250 [ 642.334378][T10447] ? ksys_write+0x190/0x250 [ 642.334443][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334513][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334560][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334608][T10447] ? __x64_sys_futex+0x358/0x4d0 [ 642.334664][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334714][T10447] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.334761][T10447] ? xfd_validate_state+0x129/0x190 [ 642.334809][T10447] ? __x64_sys_bpf+0xce/0x140 [ 642.334872][T10447] __x64_sys_bpf+0xce/0x140 [ 642.334934][T10447] ? do_syscall_64+0xae/0x790 [ 642.334987][T10447] do_syscall_64+0x123/0x790 [ 642.335040][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.335081][T10447] RIP: 0033:0x7f642499e159 [ 642.335119][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.335160][T10447] RSP: 002b:00007f64258bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 642.335198][T10447] RAX: ffffffffffffffda RBX: 00007f6424c25fa0 RCX: 00007f642499e159 [ 642.335225][T10447] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 642.335251][T10447] RBP: 00007f6424a3506b R08: 0000000000000000 R09: 0000000000000000 [ 642.335276][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.335301][T10447] R13: 00007f6424c26038 R14: 00007f6424c25fa0 R15: 00007fffebbfd7c8 [ 642.335354][T10447] [ 643.297478][T10453] bridge0: port 3(dummy0) entered blocking state [ 643.297648][T10453] bridge0: port 3(dummy0) entered disabled state [ 643.297812][T10453] dummy0: entered allmulticast mode [ 643.310118][T10453] dummy0: entered promiscuous mode [ 643.329652][T10453] bridge0: port 3(dummy0) entered blocking state [ 643.329784][T10453] bridge0: port 3(dummy0) entered forwarding state [ 643.632618][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.632842][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.632999][T10271] bridge_slave_0: entered allmulticast mode [ 643.641561][T10271] bridge_slave_0: entered promiscuous mode [ 643.950358][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.950846][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.950980][T10271] bridge_slave_1: entered allmulticast mode [ 643.967703][T10271] bridge_slave_1: entered promiscuous mode [ 643.995408][ T9831] Bluetooth: hci2: command tx timeout [ 644.247346][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.538544][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.795761][T10271] team0: Port device team_slave_0 added [ 644.802409][T10481] netdevsim netdevsim6: Direct firmware load for ~ failed with error -2 [ 644.802446][T10481] netdevsim netdevsim6: Falling back to sysfs fallback for: ~ [ 644.900960][T10271] team0: Port device team_slave_1 added [ 645.138362][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.138389][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.138437][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.183940][ T5270] 8021q: adding VLAN 0 to HW filter on device eth19 [ 645.189786][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.189809][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.189857][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.396357][T10490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.226501][ T1100] bridge_slave_1: left allmulticast mode [ 646.226539][ T1100] bridge_slave_1: left promiscuous mode [ 646.226795][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.301295][ T1100] bridge_slave_0: left allmulticast mode [ 646.301332][ T1100] bridge_slave_0: left promiscuous mode [ 646.302736][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.372533][T10502] FAULT_INJECTION: forcing a failure. [ 646.372533][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.372599][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.6.886 Not tainted syzkaller #0 PREEMPT(full) [ 646.372651][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 646.372676][T10502] Call Trace: [ 646.372688][T10502] [ 646.372703][T10502] dump_stack_lvl+0x100/0x190 [ 646.372763][T10502] should_fail_ex.cold+0x5/0xa [ 646.372817][T10502] _copy_from_user+0x2e/0xd0 [ 646.372876][T10502] __sys_bpf+0x2f5/0x4a30 [ 646.372949][T10502] ? __pfx___sys_bpf+0x10/0x10 [ 646.373006][T10502] ? find_held_lock+0x2b/0x80 [ 646.373063][T10502] ? futex_wake+0x4ea/0x5e0 [ 646.373128][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373179][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373255][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373303][T10502] ? rcu_read_lock_any_held+0x6a/0x90 [ 646.373361][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373410][T10502] ? find_held_lock+0x2b/0x80 [ 646.373464][T10502] ? ksys_write+0x190/0x250 [ 646.373523][T10502] ? ksys_write+0x190/0x250 [ 646.373587][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373665][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373716][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373763][T10502] ? __x64_sys_futex+0x358/0x4d0 [ 646.373818][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373868][T10502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.373915][T10502] ? xfd_validate_state+0x129/0x190 [ 646.373961][T10502] ? __x64_sys_bpf+0xce/0x140 [ 646.374021][T10502] __x64_sys_bpf+0xce/0x140 [ 646.374083][T10502] ? do_syscall_64+0xae/0x790 [ 646.374134][T10502] do_syscall_64+0x123/0x790 [ 646.374186][T10502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.374227][T10502] RIP: 0033:0x7f642499e159 [ 646.374257][T10502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.374297][T10502] RSP: 002b:00007f64258bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.374335][T10502] RAX: ffffffffffffffda RBX: 00007f6424c25fa0 RCX: 00007f642499e159 [ 646.374362][T10502] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 646.374388][T10502] RBP: 00007f6424a3506b R08: 0000000000000000 R09: 0000000000000000 [ 646.374413][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.374437][T10502] R13: 00007f6424c26038 R14: 00007f6424c25fa0 R15: 00007fffebbfd7c8 [ 646.374489][T10502] [ 648.325739][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.335580][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.353821][ T1100] bond0 (unregistering): Released all slaves [ 648.384595][ T31] audit: type=1326 audit(1790751489.080:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.384786][ T31] audit: type=1326 audit(1790751489.080:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.420517][ T31] audit: type=1326 audit(1790751489.110:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.420594][ T31] audit: type=1326 audit(1790751489.110:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.420674][ T31] audit: type=1326 audit(1790751489.110:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.420746][ T31] audit: type=1326 audit(1790751489.110:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.420818][ T31] audit: type=1326 audit(1790751489.110:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.429995][ T31] audit: type=1326 audit(1790751489.110:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.430070][ T31] audit: type=1326 audit(1790751489.120:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.436379][ T31] audit: type=1326 audit(1790751489.130:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.889" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe11379e159 code=0x7ffc0000 [ 648.779818][ T1100] hsr_slave_0: left promiscuous mode [ 648.785237][ T1100] hsr_slave_1: left promiscuous mode [ 648.786288][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.803381][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.838558][T10516] loop6: detected capacity change from 0 to 32768 [ 649.552576][T10516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 649.552609][T10516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 649.754732][T10516] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 649.813097][ T9774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 649.813591][ T9774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 650.181741][ T9774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 368ms [ 650.193811][ T9774] gfs2: fsid=syz:syz.0: jid=0: Done [ 650.201284][T10516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 650.229036][T10516] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 651.219194][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 651.289369][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 652.199343][T10554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.496184][T10560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.571704][T10561] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 655.454383][T10271] hsr_slave_0: entered promiscuous mode [ 655.455491][T10271] hsr_slave_1: entered promiscuous mode [ 655.456952][T10271] debugfs: 'hsr0' already exists in 'hsr' [ 655.456981][T10271] Cannot create hsr debugfs directory [ 655.825167][T10589] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 656.797334][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.797460][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.797617][T10371] bridge_slave_0: entered allmulticast mode [ 656.804720][T10371] bridge_slave_0: entered promiscuous mode [ 656.926590][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.926729][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.926889][T10371] bridge_slave_1: entered allmulticast mode [ 656.929149][T10371] bridge_slave_1: entered promiscuous mode [ 657.137537][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.914070][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.020852][T10620] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 659.183588][T10623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.503458][T10371] team0: Port device team_slave_0 added [ 660.531690][T10371] team0: Port device team_slave_1 added [ 662.768365][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.768393][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.768435][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.850852][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.851097][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.851252][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.797652][T10653] netdevsim netdevsim1: Direct firmware load for ~ failed with error -2 [ 663.797694][T10653] netdevsim netdevsim1: Falling back to sysfs fallback for: ~ [ 664.132223][T10371] hsr_slave_0: entered promiscuous mode [ 664.141275][T10371] hsr_slave_1: entered promiscuous mode [ 664.143688][T10371] debugfs: 'hsr0' already exists in 'hsr' [ 664.143715][T10371] Cannot create hsr debugfs directory [ 665.787684][T10674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.423007][T10271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 668.494143][T10271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.515020][T10271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 668.542634][T10271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.543607][T10271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 668.591429][T10271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.603040][T10271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 668.631894][T10271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.207897][T10271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.251803][T10271] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.284024][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.284189][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.315339][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.315461][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.418274][T10726] affs: No valid root block on device nullb0 [ 672.459212][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.067451][T10733] loop6: detected capacity change from 0 to 64 [ 674.889837][T10371] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 674.906883][T10371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.908068][T10371] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 674.935514][T10371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.936535][T10371] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 674.965953][T10371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.967834][T10371] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 674.973720][T10371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.569202][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.583382][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.623681][T10371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.623716][T10371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.693379][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.693538][ T8073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.733703][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.733822][ T8073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.922396][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.629542][T10271] veth0_vlan: entered promiscuous mode [ 679.842962][T10271] veth1_vlan: entered promiscuous mode [ 680.041399][T10783] loop6: detected capacity change from 0 to 32768 [ 680.061392][T10783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.941 (10783) [ 680.082059][T10271] veth0_macvtap: entered promiscuous mode [ 680.103802][T10271] veth1_macvtap: entered promiscuous mode [ 680.289402][T10783] BTRFS info (device loop6 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 680.289457][T10783] BTRFS info (device loop6 state S): using crc32c checksum algorithm [ 680.289668][T10783] BTRFS error (device loop6 state S): ignoremetacsums must be used with ro mount option [ 680.289864][T10783] BTRFS error (device loop6 state S): open_ctree failed: -EINVAL [ 680.422977][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.514177][T10826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.996951][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.083762][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.196476][ T6274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.196619][ T6274] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.196679][ T6274] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.196738][ T6274] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.346380][T10371] veth0_vlan: entered promiscuous mode [ 683.440459][T10371] veth1_vlan: entered promiscuous mode [ 683.537949][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.542043][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.542766][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.546684][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.549425][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.632193][T10371] veth0_macvtap: entered promiscuous mode [ 683.670640][T10371] veth1_macvtap: entered promiscuous mode [ 685.511971][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.512055][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.647508][ T5619] Bluetooth: hci0: command tx timeout [ 685.906645][ T8073] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.006355][T10371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.032226][T10371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.141467][ T1100] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.141540][ T1100] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.141602][ T1100] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.141664][ T1100] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.322278][ T8073] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.601279][ T8073] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.695633][ T5619] Bluetooth: hci0: command tx timeout [ 687.733480][T10897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.034489][ T5619] Bluetooth: hci0: command tx timeout [ 690.271267][ T8073] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.161275][T10906] loop6: detected capacity change from 0 to 131072 [ 691.322521][T10906] F2FS-fs (loop6): invalid crc value [ 691.427720][T10906] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 691.430793][T10906] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 691.508761][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.508792][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.926432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.927209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.975322][T10918] affs: No valid root block on device nullb0 [ 692.006625][T10919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.074485][ T5619] Bluetooth: hci0: command tx timeout [ 693.552133][ T8073] bridge_slave_1: left allmulticast mode [ 693.552172][ T8073] bridge_slave_1: left promiscuous mode [ 693.552461][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.609152][ T8073] bridge_slave_0: left allmulticast mode [ 693.609186][ T8073] bridge_slave_0: left promiscuous mode [ 693.611900][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.759349][ T9831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 694.763861][ T9831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 694.780340][ T9831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 694.783231][ T9831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 694.783964][ T9831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 697.288903][ T5619] Bluetooth: hci6: command tx timeout [ 697.605168][ T8073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.658230][ T8073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.808875][ T8073] bond0 (unregistering): Released all slaves [ 698.671193][ T8073] hsr_slave_0: left promiscuous mode [ 698.681100][ T8073] hsr_slave_1: left promiscuous mode [ 698.682115][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.682145][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.708108][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.708136][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.770369][ T8073] veth1_macvtap: left promiscuous mode [ 698.770415][ T8073] veth0_macvtap: left promiscuous mode [ 698.770537][ T8073] veth1_vlan: left promiscuous mode [ 698.770622][ T8073] veth0_vlan: left promiscuous mode [ 699.291485][T10982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.354478][ T5619] Bluetooth: hci6: command tx timeout [ 701.445391][ T5619] Bluetooth: hci6: command tx timeout [ 701.623845][T10996] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 704.300626][ T5619] Bluetooth: hci6: command tx timeout [ 705.853873][ T8073] team0 (unregistering): Port device team_slave_1 removed [ 705.899094][ T8073] team0 (unregistering): Port device team_slave_0 removed [ 708.784978][T11028] netdevsim netdevsim1: Direct firmware load for ~ failed with error -2 [ 708.785050][T11028] netdevsim netdevsim1: Falling back to sysfs fallback for: ~ [ 711.598158][ T8073] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.077666][ T8073] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.504883][ T8073] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.592583][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.592722][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.592874][T10857] bridge_slave_0: entered allmulticast mode [ 712.598276][T10857] bridge_slave_0: entered promiscuous mode [ 712.658127][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.658252][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.658406][T10857] bridge_slave_1: entered allmulticast mode [ 712.662023][T10857] bridge_slave_1: entered promiscuous mode [ 712.833852][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.861575][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.955301][T11084] overlayfs: overlapping lowerdir path [ 713.700296][T10857] team0: Port device team_slave_0 added [ 713.806148][ T8073] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.797067][T10857] team0: Port device team_slave_1 added [ 715.382958][T11097] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 716.173540][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.173567][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.173615][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.177394][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.177416][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.177465][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.449709][T11106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.951605][T10857] hsr_slave_0: entered promiscuous mode [ 716.973587][T10857] hsr_slave_1: entered promiscuous mode [ 716.996437][T10857] debugfs: 'hsr0' already exists in 'hsr' [ 716.996466][T10857] Cannot create hsr debugfs directory [ 718.566799][T11140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.997'. [ 718.735460][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.999'. [ 720.499856][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 720.765134][ T8073] bridge_slave_1: left allmulticast mode [ 720.765174][ T8073] bridge_slave_1: left promiscuous mode [ 720.765417][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.768862][ T8073] bridge_slave_0: left allmulticast mode [ 720.768892][ T8073] bridge_slave_0: left promiscuous mode [ 720.769137][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.303992][ T8073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.323387][ T8073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.346010][ T8073] bond0 (unregistering): Released all slaves [ 723.102040][T10942] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.102158][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.102325][T10942] bridge_slave_0: entered allmulticast mode [ 723.115957][T10942] bridge_slave_0: entered promiscuous mode [ 723.331838][T10942] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.331960][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.332133][T10942] bridge_slave_1: entered allmulticast mode [ 723.343494][T10942] bridge_slave_1: entered promiscuous mode [ 724.755814][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.776350][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.813195][ T8073] hsr_slave_0: left promiscuous mode [ 724.819944][ T8073] hsr_slave_1: left promiscuous mode [ 724.826996][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.827025][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.845563][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.845590][ T8073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.879440][ T8073] veth1_macvtap: left promiscuous mode [ 724.879486][ T8073] veth0_macvtap: left promiscuous mode [ 724.879677][ T8073] veth1_vlan: left promiscuous mode [ 724.882346][ T8073] veth0_vlan: left promiscuous mode [ 725.625714][T11190] netdevsim netdevsim2: Direct firmware load for ~ failed with error -2 [ 725.625746][T11190] netdevsim netdevsim2: Falling back to sysfs fallback for: ~ [ 728.908034][ T8073] team0 (unregistering): Port device team_slave_1 removed [ 728.936785][ T8073] team0 (unregistering): Port device team_slave_0 removed [ 732.495073][T10942] team0: Port device team_slave_0 added [ 733.424182][T10942] team0: Port device team_slave_1 added [ 734.050974][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.051000][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.051048][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.103828][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.103850][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.103893][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.372458][T10942] hsr_slave_0: entered promiscuous mode [ 734.380834][T10942] hsr_slave_1: entered promiscuous mode [ 734.382932][T10942] debugfs: 'hsr0' already exists in 'hsr' [ 734.382960][T10942] Cannot create hsr debugfs directory [ 735.787861][T10857] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 735.832292][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.874796][T10857] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 736.639509][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.851711][T11263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.919867][T11264] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 737.180551][T10857] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 737.476991][T11267] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 737.829264][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.853219][T10857] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 737.918566][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.234170][T11282] FAULT_INJECTION: forcing a failure. [ 739.234170][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 739.234280][T11282] CPU: 1 UID: 0 PID: 11282 Comm: syz.2.1026 Not tainted syzkaller #0 PREEMPT(full) [ 739.234328][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 739.234353][T11282] Call Trace: [ 739.234366][T11282] [ 739.234381][T11282] dump_stack_lvl+0x100/0x190 [ 739.234443][T11282] should_fail_ex.cold+0x5/0xa [ 739.234488][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.234543][T11282] ? __pfx_rescuer_thread+0x10/0x10 [ 739.234602][T11282] should_failslab+0xc2/0x120 [ 739.234648][T11282] __kmalloc_cache_noprof+0x91/0x6d0 [ 739.234712][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.234761][T11282] ? __kthread_create_on_node+0xce/0x3f0 [ 739.234819][T11282] ? __pfx_rescuer_thread+0x10/0x10 [ 739.234878][T11282] __kthread_create_on_node+0xce/0x3f0 [ 739.234925][T11282] ? vsnprintf+0x4c5/0x1300 [ 739.234972][T11282] ? __pfx___kthread_create_on_node+0x10/0x10 [ 739.235046][T11282] ? __pfx_rescuer_thread+0x10/0x10 [ 739.235108][T11282] kthread_create_on_node+0xc7/0x100 [ 739.235157][T11282] ? __pfx_kthread_create_on_node+0x10/0x10 [ 739.235205][T11282] ? __pfx_scnprintf+0x10/0x10 [ 739.235256][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.235305][T11282] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 739.235350][T11282] ? init_rescuer+0x19f/0x550 [ 739.235412][T11282] init_rescuer+0x321/0x550 [ 739.235466][T11282] ? __pfx_init_rescuer+0x10/0x10 [ 739.235521][T11282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 739.235593][T11282] __alloc_workqueue+0xe82/0x1950 [ 739.235659][T11282] alloc_workqueue_noprof+0xc7/0x130 [ 739.235715][T11282] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 739.235771][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.235820][T11282] ? irqentry_exit+0x24d/0xa10 [ 739.235867][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.235932][T11282] nci_register_device+0x21e/0xb80 [ 739.235975][T11282] ? __pfx_nci_register_device+0x10/0x10 [ 739.236020][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.236068][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.236116][T11282] ? lockdep_init_map_type+0x5c/0x250 [ 739.236163][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.236218][T11282] virtual_ncidev_open+0x141/0x220 [ 739.236265][T11282] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 739.236314][T11282] misc_open+0x26d/0x450 [ 739.236368][T11282] ? __pfx_misc_open+0x10/0x10 [ 739.236423][T11282] chrdev_open+0x234/0x6a0 [ 739.236464][T11282] ? __pfx_apparmor_file_open+0x10/0x10 [ 739.236511][T11282] ? __pfx_chrdev_open+0x10/0x10 [ 739.236559][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.236607][T11282] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 739.236677][T11282] do_dentry_open+0x6ab/0x14d0 [ 739.236746][T11282] ? __pfx_chrdev_open+0x10/0x10 [ 739.236800][T11282] vfs_open+0x82/0x3f0 [ 739.236845][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.236901][T11282] path_openat+0x19fa/0x2440 [ 739.236954][T11282] ? __pfx_path_openat+0x10/0x10 [ 739.236997][T11282] ? __pfx___schedule+0x10/0x10 [ 739.237064][T11282] do_file_open+0x20e/0x430 [ 739.237114][T11282] ? __pfx_do_file_open+0x10/0x10 [ 739.237194][T11282] ? _raw_spin_unlock+0x28/0x50 [ 739.237232][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.237280][T11282] ? alloc_fd+0x471/0x7a0 [ 739.237339][T11282] do_sys_openat2+0x10f/0x1e0 [ 739.237389][T11282] ? __pfx_do_sys_openat2+0x10/0x10 [ 739.237442][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.237494][T11282] ? irqentry_exit+0x24d/0xa10 [ 739.237539][T11282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 739.237587][T11282] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.237642][T11282] __x64_sys_openat+0x12d/0x210 [ 739.237698][T11282] ? __pfx___x64_sys_openat+0x10/0x10 [ 739.237770][T11282] do_syscall_64+0x123/0x790 [ 739.237825][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.237866][T11282] RIP: 0033:0x7f7c5439e159 [ 739.237897][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.237938][T11282] RSP: 002b:00007f7c551e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 739.237976][T11282] RAX: ffffffffffffffda RBX: 00007f7c54626180 RCX: 00007f7c5439e159 [ 739.238004][T11282] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 739.238030][T11282] RBP: 00007f7c5443506b R08: 0000000000000000 R09: 0000000000000000 [ 739.238056][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.238081][T11282] R13: 00007f7c54626218 R14: 00007f7c54626180 R15: 00007ffe7c47f518 [ 739.238134][T11282] [ 739.238300][T11282] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 742.979703][T11292] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 743.711044][T10942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 743.722026][T10942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.722774][T10942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 743.730478][T10942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.735744][T10942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 743.742529][T10942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.743515][T10942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 743.749655][T10942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.949338][T10942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.972678][T10942] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.001215][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.001339][ T8073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.173515][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.173649][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.389779][T11338] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 745.957366][ T9831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 745.961701][ T9831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 745.962475][ T9831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 745.964886][ T9831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 745.967511][ T9831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 746.550614][T11363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.553765][T11363] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 747.561385][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.561461][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.246248][ T9831] Bluetooth: hci0: command tx timeout [ 748.516988][T11371] affs: No valid root block on device nullb0 [ 748.562111][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.883849][ T9831] Bluetooth: hci0: command tx timeout [ 752.785397][T11381] netdevsim netdevsim6: Direct firmware load for ~ failed with error -2 [ 752.785430][T11381] netdevsim netdevsim6: Falling back to sysfs fallback for: ~ [ 753.274767][ T9831] Bluetooth: hci0: command tx timeout [ 753.332844][ T5917] bridge_slave_1: left allmulticast mode [ 753.332885][ T5917] bridge_slave_1: left promiscuous mode [ 753.333125][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.981671][ T5917] bridge_slave_0: left allmulticast mode [ 753.981707][ T5917] bridge_slave_0: left promiscuous mode [ 753.981964][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.926248][T11424] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 754.961156][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.018625][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.028408][ T5917] bond0 (unregistering): Released all slaves [ 755.354655][ T9831] Bluetooth: hci0: command tx timeout [ 755.408837][ T5917] hsr_slave_0: left promiscuous mode [ 755.439611][ T5917] hsr_slave_1: left promiscuous mode [ 755.441301][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.456929][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.162149][T11442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.217724][T11440] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 758.756993][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.774374][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.776228][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.781513][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.799954][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.485546][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 760.317197][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 761.155278][T11468] netdevsim netdevsim1: Direct firmware load for ~ failed with error -2 [ 761.155311][T11468] netdevsim netdevsim1: Falling back to sysfs fallback for: ~ [ 761.595265][ T5619] Bluetooth: hci2: command tx timeout [ 763.674610][ T5619] Bluetooth: hci2: command tx timeout [ 763.922466][T11492] affs: No valid root block on device nullb0 [ 763.962580][T11492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.754679][ T5619] Bluetooth: hci2: command tx timeout [ 767.632084][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 768.279622][ T5619] Bluetooth: hci2: command tx timeout [ 769.603612][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.603812][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.603968][T11355] bridge_slave_0: entered allmulticast mode [ 769.630795][T11355] bridge_slave_0: entered promiscuous mode [ 770.181262][T11549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.241820][T11550] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 770.795378][T11545] netdevsim netdevsim6: Direct firmware load for ~ failed with error -2 [ 770.795409][T11545] netdevsim netdevsim6: Falling back to sysfs fallback for: ~ [ 772.253101][T11355] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.253225][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.253384][T11355] bridge_slave_1: entered allmulticast mode [ 772.276938][T11355] bridge_slave_1: entered promiscuous mode [ 772.943865][T11561] loop6: detected capacity change from 0 to 2048 [ 773.116305][T11561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.310346][T11572] affs: No valid root block on device nullb0 [ 773.441566][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.995151][T11567] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 774.486542][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.961020][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1077'. [ 774.966469][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.058837][T11580] ip6gre1: entered promiscuous mode [ 775.058868][T11580] ip6gre1: entered allmulticast mode [ 775.156446][ T5917] bridge_slave_1: left allmulticast mode [ 775.156480][ T5917] bridge_slave_1: left promiscuous mode [ 775.156705][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.188995][ T5917] bridge_slave_0: left allmulticast mode [ 775.189026][ T5917] bridge_slave_0: left promiscuous mode [ 775.189265][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.476976][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.496372][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.515618][ T5917] bond0 (unregistering): Released all slaves [ 777.811793][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.812047][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.844917][ T5770] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.958808][T11355] team0: Port device team_slave_0 added [ 777.961955][T11355] team0: Port device team_slave_1 added [ 778.076761][ T5917] hsr_slave_0: left promiscuous mode [ 778.078934][ T5917] hsr_slave_1: left promiscuous mode [ 778.082686][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.094874][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.136616][ T9774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.148405][ T9774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.633687][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 779.658163][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 779.794945][T11636] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[11636] [ 780.345676][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 780.465832][T11643] affs: No valid root block on device nullb0 [ 780.513923][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.110202][T11625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 781.110256][T11625] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 781.274420][ C1] ------------[ cut here ]------------ [ 781.274440][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 781.274500][ C1] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#1: syz.2.1089/11638 [ 781.296450][ C1] Modules linked in: [ 781.300341][ C1] CPU: 1 UID: 0 PID: 11638 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT(full) [ 781.309708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 781.319774][ C1] RIP: 0010:__queue_work+0xdbb/0x1370 [ 781.325159][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d e9 d7 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 781.344790][ C1] RSP: 0018:ffffc90000a18b68 EFLAGS: 00010046 [ 781.350854][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004bda14e [ 781.358822][ C1] RDX: ffff88803324f170 RSI: ffffffff8ac38c40 RDI: ffffffff914872a0 [ 781.366813][ C1] RBP: ffff888025ed0a58 R08: 0000000000000007 R09: 0000000000000000 [ 781.374777][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88803324f000 [ 781.382744][ C1] R13: 1ffff92000143177 R14: 0000000000000000 R15: ffffffff81d0a080 [ 781.390710][ C1] FS: 00007f7c552266c0(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 781.399641][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.406219][ C1] CR2: 0000200000004000 CR3: 000000005e1cc000 CR4: 0000000000350ef0 [ 781.414183][ C1] Call Trace: [ 781.417472][ C1] [ 781.420310][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.425948][ C1] ? lock_acquire+0x1d1/0x380 [ 781.430659][ C1] ? call_timer_fn+0x11d/0x5f0 [ 781.435423][ C1] ? __pfx___queue_work+0x10/0x10 [ 781.440461][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.446109][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 781.451927][ C1] call_timer_fn+0x198/0x5f0 [ 781.456518][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 781.461626][ C1] ? lock_acquire+0x1d1/0x380 [ 781.466307][ C1] ? __run_timers+0x560/0xb00 [ 781.470983][ C1] ? __run_timers+0x560/0xb00 [ 781.475658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.481305][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 781.487123][ C1] __run_timers+0x570/0xb00 [ 781.491655][ C1] ? __pfx___run_timers+0x10/0x10 [ 781.496679][ C1] ? clockevents_program_event+0x23e/0x820 [ 781.502506][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.508158][ C1] ? lock_acquire+0x1d1/0x380 [ 781.512842][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.518494][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 781.523525][ C1] run_timer_base+0x114/0x190 [ 781.528202][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 781.533418][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.539081][ C1] run_timer_softirq+0x1a/0x50 [ 781.543847][ C1] handle_softirqs+0x1e6/0x9d0 [ 781.548617][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 781.553901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.559560][ C1] ? _raw_spin_unlock+0x28/0x50 [ 781.564408][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.570046][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 781.575696][ C1] __irq_exit_rcu+0x16a/0x210 [ 781.580378][ C1] irq_exit_rcu+0x9/0x30 [ 781.584617][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 781.590256][ C1] [ 781.593173][ C1] [ 781.596094][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.602076][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 781.608147][ C1] Code: c6 5e 60 00 48 89 df 5b e9 0d 41 66 00 be 03 00 00 00 5b e9 02 81 1e 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 05 6c ec 80 12 48 8b 34 24 65 48 8b 15 50 ec [ 781.627753][ C1] RSP: 0018:ffffc90003c2fa28 EFLAGS: 00000246 [ 781.633818][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90005039000 [ 781.641781][ C1] RDX: 0000000000080000 RSI: ffffffff81d1088b RDI: ffff888035c70000 [ 781.649746][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 781.657710][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 781.665677][ C1] R13: ffff88801c05ac00 R14: ffff88803218de00 R15: 0000000000001000 [ 781.673655][ C1] ? queue_work_on+0x13b/0x1e0 [ 781.678440][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.684077][ C1] queue_work_on+0x141/0x1e0 [ 781.688684][ C1] snd_virmidi_output_trigger+0xf6/0x140 [ 781.694330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.699969][ C1] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 781.705625][ C1] snd_rawmidi_write+0x2dc/0xc60 [ 781.710577][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 781.716040][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.721675][ C1] ? common_file_perm+0x266/0x500 [ 781.726871][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 781.732685][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.738330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.743965][ C1] ? security_file_permission+0x76/0x210 [ 781.749599][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.755329][ C1] ? rw_verify_area+0xce/0x6d0 [ 781.760129][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 781.765595][ C1] vfs_writev+0x5ed/0xdd0 [ 781.769950][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 781.774819][ C1] ? lock_acquire+0x1d1/0x380 [ 781.779495][ C1] ? __fget_files+0x34/0x3d0 [ 781.784098][ C1] ? __fget_files+0x21f/0x3d0 [ 781.788803][ C1] ? do_writev+0x28a/0x340 [ 781.793229][ C1] do_writev+0x28a/0x340 [ 781.797485][ C1] ? __pfx_do_writev+0x10/0x10 [ 781.802352][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.808014][ C1] do_syscall_64+0x123/0x790 [ 781.812614][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.818522][ C1] RIP: 0033:0x7f7c5439e159 [ 781.822930][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.842540][ C1] RSP: 002b:00007f7c55226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 781.850951][ C1] RAX: ffffffffffffffda RBX: 00007f7c54625fa0 RCX: 00007f7c5439e159 [ 781.858917][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 781.866903][ C1] RBP: 00007f7c5443506b R08: 0000000000000000 R09: 0000000000000000 [ 781.874867][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.882830][ C1] R13: 00007f7c54626038 R14: 00007f7c54625fa0 R15: 00007ffe7c47f518 [ 781.890812][ C1] [ 781.893821][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 781.901091][ C1] CPU: 1 UID: 0 PID: 11638 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT(full) [ 781.910460][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 781.920509][ C1] Call Trace: [ 781.923777][ C1] [ 781.926611][ C1] dump_stack_lvl+0x100/0x190 [ 781.931304][ C1] vpanic+0x553/0x970 [ 781.935284][ C1] ? __pfx_vpanic+0x10/0x10 [ 781.939797][ C1] panic+0xd1/0xe0 [ 781.943513][ C1] ? __pfx_panic+0x10/0x10 [ 781.947944][ C1] check_panic_on_warn.cold+0x19/0x34 [ 781.953316][ C1] ? __queue_work+0xdb7/0x1370 [ 781.958089][ C1] __warn.cold+0x191/0x318 [ 781.962511][ C1] __report_bug+0x30f/0x440 [ 781.967021][ C1] ? __queue_work+0xdb7/0x1370 [ 781.971797][ C1] ? __pfx___report_bug+0x10/0x10 [ 781.976841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.982477][ C1] ? do_raw_spin_lock+0x128/0x260 [ 781.987509][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 781.992814][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 781.998458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.004095][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 782.009315][ C1] report_bug_entry+0xe2/0x290 [ 782.014085][ C1] ? __queue_work+0xdbb/0x1370 [ 782.018862][ C1] handle_bug+0x1cd/0x2a0 [ 782.023223][ C1] exc_invalid_op+0x17/0x50 [ 782.027741][ C1] asm_exc_invalid_op+0x1a/0x20 [ 782.032592][ C1] RIP: 0010:__queue_work+0xdbb/0x1370 [ 782.037976][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d e9 d7 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 782.057605][ C1] RSP: 0018:ffffc90000a18b68 EFLAGS: 00010046 [ 782.063672][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004bda14e [ 782.071661][ C1] RDX: ffff88803324f170 RSI: ffffffff8ac38c40 RDI: ffffffff914872a0 [ 782.079626][ C1] RBP: ffff888025ed0a58 R08: 0000000000000007 R09: 0000000000000000 [ 782.087588][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88803324f000 [ 782.095553][ C1] R13: 1ffff92000143177 R14: 0000000000000000 R15: ffffffff81d0a080 [ 782.103517][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 782.109344][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 782.114656][ C1] ? __queue_work+0xd89/0x1370 [ 782.119436][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.125073][ C1] ? lock_acquire+0x1d1/0x380 [ 782.129749][ C1] ? call_timer_fn+0x11d/0x5f0 [ 782.134510][ C1] ? __pfx___queue_work+0x10/0x10 [ 782.139549][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.145195][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 782.151014][ C1] call_timer_fn+0x198/0x5f0 [ 782.155615][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 782.160750][ C1] ? lock_acquire+0x1d1/0x380 [ 782.165432][ C1] ? __run_timers+0x560/0xb00 [ 782.170126][ C1] ? __run_timers+0x560/0xb00 [ 782.174803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.180470][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 782.186287][ C1] __run_timers+0x570/0xb00 [ 782.190802][ C1] ? __pfx___run_timers+0x10/0x10 [ 782.195826][ C1] ? clockevents_program_event+0x23e/0x820 [ 782.201668][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.207305][ C1] ? lock_acquire+0x1d1/0x380 [ 782.211988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.217630][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 782.222662][ C1] run_timer_base+0x114/0x190 [ 782.227338][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 782.232537][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.238180][ C1] run_timer_softirq+0x1a/0x50 [ 782.242970][ C1] handle_softirqs+0x1e6/0x9d0 [ 782.247745][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 782.253030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.258666][ C1] ? _raw_spin_unlock+0x28/0x50 [ 782.263517][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.269154][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 782.274812][ C1] __irq_exit_rcu+0x16a/0x210 [ 782.279489][ C1] irq_exit_rcu+0x9/0x30 [ 782.283746][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 782.289382][ C1] [ 782.292300][ C1] [ 782.295219][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 782.301204][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 782.307290][ C1] Code: c6 5e 60 00 48 89 df 5b e9 0d 41 66 00 be 03 00 00 00 5b e9 02 81 1e 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 05 6c ec 80 12 48 8b 34 24 65 48 8b 15 50 ec [ 782.326899][ C1] RSP: 0018:ffffc90003c2fa28 EFLAGS: 00000246 [ 782.332961][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90005039000 [ 782.340943][ C1] RDX: 0000000000080000 RSI: ffffffff81d1088b RDI: ffff888035c70000 [ 782.348909][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 782.356873][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 782.364853][ C1] R13: ffff88801c05ac00 R14: ffff88803218de00 R15: 0000000000001000 [ 782.372832][ C1] ? queue_work_on+0x13b/0x1e0 [ 782.377618][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.383255][ C1] queue_work_on+0x141/0x1e0 [ 782.387862][ C1] snd_virmidi_output_trigger+0xf6/0x140 [ 782.393497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.399154][ C1] snd_rawmidi_kernel_write1+0x51f/0x7c0 [ 782.404809][ C1] snd_rawmidi_write+0x2dc/0xc60 [ 782.409764][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 782.415227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.420864][ C1] ? common_file_perm+0x266/0x500 [ 782.425887][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 782.431700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.437339][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.442975][ C1] ? security_file_permission+0x76/0x210 [ 782.448609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.454272][ C1] ? rw_verify_area+0xce/0x6d0 [ 782.459057][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 782.464520][ C1] vfs_writev+0x5ed/0xdd0 [ 782.468873][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 782.473751][ C1] ? lock_acquire+0x1d1/0x380 [ 782.478430][ C1] ? __fget_files+0x34/0x3d0 [ 782.483036][ C1] ? __fget_files+0x21f/0x3d0 [ 782.487744][ C1] ? do_writev+0x28a/0x340 [ 782.492172][ C1] do_writev+0x28a/0x340 [ 782.496429][ C1] ? __pfx_do_writev+0x10/0x10 [ 782.501207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 782.506850][ C1] do_syscall_64+0x123/0x790 [ 782.511452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.517345][ C1] RIP: 0033:0x7f7c5439e159 [ 782.521756][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.541364][ C1] RSP: 002b:00007f7c55226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 782.549776][ C1] RAX: ffffffffffffffda RBX: 00007f7c54625fa0 RCX: 00007f7c5439e159 [ 782.557760][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 782.565724][ C1] RBP: 00007f7c5443506b R08: 0000000000000000 R09: 0000000000000000 [ 782.573690][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.581655][ C1] R13: 00007f7c54626038 R14: 00007f7c54625fa0 R15: 00007ffe7c47f518 [ 782.589642][ C1] [ 782.592878][ C1] Kernel Offset: disabled [ 782.597193][ C1] Rebooting in 86400 seconds..