last executing test programs: 17.207455822s ago: executing program 2 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x40000000, 0xd, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c85513, &(0x7f0000000340)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b0, 0x0, 0x0, 0x10001]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = io_uring_setup(0xaab, 0x0) r11 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r11, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r11, 0x20000005) r12 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 16.246191547s ago: executing program 2 (id=865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x23, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000005000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000030000000000000000000000851000000200000018230000", @ANYRES32, @ANYBLOB="20c7fd9e7dbc8c59e607c9a46ab48e", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000185800000c0000000000000000000000048bff070500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf18ffffffffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r6, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@polexpire={0xc4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@remote}}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000008000200030000000800040001000000080008"], 0x40}, 0x1, 0x0, 0x0, 0xd001}, 0x0) 13.069548014s ago: executing program 2 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 9.399974999s ago: executing program 4 (id=883): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r5, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@polexpire={0xc4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@remote}}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000008000200030000000800040001000000080008"], 0x40}, 0x1, 0x0, 0x0, 0xd001}, 0x0) 9.330920659s ago: executing program 0 (id=884): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r0, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.981471337s ago: executing program 0 (id=885): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) 8.362845155s ago: executing program 4 (id=886): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x100}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=@newtaction={0xeb0, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x1}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x40000000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x10000000}, {0x3}, {}, {}, {}, {0x0, 0x100}], [{}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {}, {0x2}]}}]}, {0x19, 0x6, "3cfd6531b55556ed44aac526a8a3d09716437e1a08"}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r1, 0xb5e9f000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 7.668189982s ago: executing program 1 (id=887): pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x5) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r0, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.593483837s ago: executing program 1 (id=891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffff}]}) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000000)) 5.683108024s ago: executing program 3 (id=892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) ftruncate(r4, 0x0) 5.632894773s ago: executing program 1 (id=893): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 4.93973353s ago: executing program 2 (id=894): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe80"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x35315241, [], [0x0, 0x7]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 4.93897217s ago: executing program 4 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) ftruncate(r5, 0x0) 4.651203839s ago: executing program 3 (id=896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r5, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@polexpire={0xc4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@remote}}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000008000200030000000800040001000000080008"], 0x40}, 0x1, 0x0, 0x0, 0xd001}, 0x0) 4.557538899s ago: executing program 1 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) 4.058375747s ago: executing program 1 (id=898): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000010a010800000000000000007a000000090001"], 0x20}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) 3.526162075s ago: executing program 0 (id=899): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x3, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x4, 0xab}, @noop, @noop, @rr={0x7, 0xb, 0x0, [@dev, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.525852735s ago: executing program 4 (id=900): ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.463099224s ago: executing program 3 (id=901): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a03020000000000000000000000000900020073797a3000000000"], 0x20}}, 0x0) close(r5) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000b40)={0xa, 0x4f21, 0x900000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000280)="5b0e4fd25848a15907d5f8efd804500a911b13c3ea51c2e90187711191c7b8e16f98d39d54b2882fb4dfefffc3bb76cdfb678a97a22d2c8240ede942c00409f7efeb7c68299d333d93d0cd49bcd077a98c35b0fcdbf31e", 0x57}], 0x1}}], 0x1, 0x48080) read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, r7) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, r7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 3.400207534s ago: executing program 2 (id=902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) 2.239251899s ago: executing program 4 (id=903): ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.058306418s ago: executing program 2 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 2.005726358s ago: executing program 3 (id=905): socket$inet6(0xa, 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="820000000000000010", @ANYRES64=r0]) 1.941014648s ago: executing program 0 (id=906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) ftruncate(r4, 0x0) 1.447951546s ago: executing program 3 (id=907): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 986.201474ms ago: executing program 0 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) 723.806683ms ago: executing program 0 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a000000080001"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) 688.942083ms ago: executing program 4 (id=910): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000108000000000000000000", @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a000600000008001600020000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x700, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 368.961702ms ago: executing program 3 (id=911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r5, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@polexpire={0xc4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@remote}}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000008000200030000000800040001000000080008"], 0x40}, 0x1, 0x0, 0x0, 0xd001}, 0x0) 0s ago: executing program 1 (id=912): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe6d}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): 309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.257401][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.266164][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.274118][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.288292][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.303587][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.338991][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.358014][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.367665][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.375871][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 62.375927][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 62.375962][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 62.380440][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 62.389677][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.407062][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.456889][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 62.463706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.472356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.483043][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.492305][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.499546][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.507475][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.518319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.527079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.537706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.555735][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.572212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.583740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.592687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.602184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.611496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.622567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.631523][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.638618][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.646813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.656658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.665748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.674524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.683526][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.690643][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.708712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.717008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.747292][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.767140][ T4263] device veth0_vlan entered promiscuous mode [ 62.791136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.805890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.813761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.827115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.836764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.849720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.878274][ T4252] device veth0_vlan entered promiscuous mode [ 62.896329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.906493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.914916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.924017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.933854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.942522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.952877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.962514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.974094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.983229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.003629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.011928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.022018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.029734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.039495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.053728][ T4263] device veth1_vlan entered promiscuous mode [ 63.075968][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.088245][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.107972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.119550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.133705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.144503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.156465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.166326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.174999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.185400][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.194156][ T4252] device veth1_vlan entered promiscuous mode [ 63.240299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.248500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.270688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.283344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.291946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.303541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.339423][ T4260] device veth0_vlan entered promiscuous mode [ 63.359622][ T4252] device veth0_macvtap entered promiscuous mode [ 63.384343][ T4263] device veth0_macvtap entered promiscuous mode [ 63.395631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.405697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.415505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.435321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.447113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.456256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.479719][ T4260] device veth1_vlan entered promiscuous mode [ 63.489058][ T4252] device veth1_macvtap entered promiscuous mode [ 63.511914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.531203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.551308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.559458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.579649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.601610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.621240][ T4263] device veth1_macvtap entered promiscuous mode [ 63.659034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.668419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.677334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.686448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.698850][ T4260] device veth0_macvtap entered promiscuous mode [ 63.710894][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.727179][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.741027][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.752685][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.766425][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.775167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.783773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.791762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.799146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.807994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.817525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.826527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.836146][ T4260] device veth1_macvtap entered promiscuous mode [ 63.851667][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.858994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.868693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.881203][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.900142][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.912314][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.930621][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.941344][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.951784][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.962264][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.974576][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.984616][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.995239][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.006097][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.016816][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.029021][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.037857][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.047205][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.057577][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.066226][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.075051][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.085281][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.096718][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.105981][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.114807][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.123667][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.141282][ T4252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.150659][ T4252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.159399][ T4252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.169185][ T4252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.181982][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.190936][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.199887][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209487][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.241881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.249371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.267556][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.308039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.322805][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.401272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.411204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.449515][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.460372][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 64.462655][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 64.466408][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 64.478836][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 64.479849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.494475][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.506861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.519730][ T4265] device veth0_vlan entered promiscuous mode [ 64.530767][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 64.542862][ T4253] device veth0_vlan entered promiscuous mode [ 64.551926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.559692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.569664][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.577868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.586708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.595232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.603513][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.626858][ T4265] device veth1_vlan entered promiscuous mode [ 64.642755][ T4253] device veth1_vlan entered promiscuous mode [ 64.676713][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.689272][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.706762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.717230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.726017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.735435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.743500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.767961][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.773774][ T4253] device veth0_macvtap entered promiscuous mode [ 64.781438][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.799091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.811207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.824986][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.826960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.842237][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.857604][ T4265] device veth0_macvtap entered promiscuous mode [ 64.866287][ T4253] device veth1_macvtap entered promiscuous mode [ 64.892625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.905952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.914906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.927650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.936996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.948929][ T4265] device veth1_macvtap entered promiscuous mode [ 64.976034][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.994858][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.005167][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.016110][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.026272][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.036828][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.048516][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.081193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.089857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.099736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.119282][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.131114][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.135617][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.139034][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.157312][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.186491][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.196898][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.208160][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.232465][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.297880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.328558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.478695][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.564036][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.575761][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.586303][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.598358][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.608479][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.639648][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.662816][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.718860][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.791401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.799708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 65.808005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 65.816283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.824562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.832834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.841110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.849369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.857640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.865913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 65.946886][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.988903][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.991011][ T4253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.007761][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.022229][ T4253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.035340][ T4253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.059130][ T4253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075287][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.092900][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.117990][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.172191][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.187250][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.201476][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.212353][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.222404][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.232874][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.242949][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.254569][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.266857][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.293404][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.302351][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.333403][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.347133][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.356899][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.366087][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.530681][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 66.536772][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 66.543508][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 66.549534][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 66.627766][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 66.693100][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.704759][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.873700][ T4354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.939770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.143629][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.158581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.271457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.289233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.309878][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.318786][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.347412][ T1087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.355705][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.395640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.483547][ T4366] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 68.042723][ T1043] block nbd4: Attempted send on invalid socket [ 68.049311][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 68.091995][ T4374] dccp_flush_write_queue: CCID did not manage to send all packets [ 68.375696][ T4382] Disabled LAPIC found during irq injection [ 69.810867][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 69.850930][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 69.860629][ T4396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 70.140171][ T4302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.365711][ T4302] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.385701][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.401332][ T4302] usb 3-1: Product: syz [ 70.406163][ T4302] usb 3-1: Manufacturer: syz [ 70.411369][ T4302] usb 3-1: SerialNumber: syz [ 70.486198][ T4302] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 70.516761][ T1043] block nbd4: Attempted send on invalid socket [ 70.523060][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 70.774127][ T4256] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 71.709485][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.715969][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.829194][ T4256] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 71.901302][ T4256] ath9k_htc: Failed to initialize the device [ 71.926010][ T4338] usb 3-1: USB disconnect, device number 2 [ 71.971261][ T4338] usb 3-1: ath9k_htc: USB layer deinitialized [ 72.052897][ T4454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 72.839526][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 72.892169][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'. [ 72.945102][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 75.418964][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 75.863211][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 76.183133][ T4523] nbd4: detected capacity change from 0 to 20 [ 76.193950][ T1043] block nbd4: Send control failed (result -89) [ 76.200413][ T1043] block nbd4: Request send failed, requeueing [ 76.207665][ T4268] block nbd4: Receive control failed (result -32) [ 76.216519][ T1043] block nbd4: Dead connection, failed to find a fallback [ 76.223743][ T1043] block nbd4: shutting down sockets [ 76.228947][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.238738][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.250735][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.259831][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.267759][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.276854][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.284842][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.294032][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.302574][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.311664][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.320101][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.329168][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.337455][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.346769][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.355217][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.364512][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.375178][ T126] cfg80211: failed to load regulatory.db [ 76.386616][ T4244] ldm_validate_partition_table(): Disk read failed. [ 76.421625][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.431179][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.442196][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.451578][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.460368][ T4244] Dev nbd4: unable to read RDB block 0 [ 76.485898][ T4244] nbd4: unable to read partition table [ 76.528921][ T4244] nbd4: partition table beyond EOD, truncated [ 76.606783][ T4244] ldm_validate_partition_table(): Disk read failed. [ 76.641860][ T4244] Dev nbd4: unable to read RDB block 0 [ 76.666382][ T4244] nbd4: unable to read partition table [ 77.156918][ T4244] nbd4: partition table beyond EOD, truncated [ 77.524639][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 77.539663][ T4544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.64'. [ 77.560947][ T4544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 77.856443][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 78.034272][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.095164][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.120990][ T4558] Zero length message leads to an empty skb [ 78.220190][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 78.222706][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.222746][ T126] usb 3-1: config 0 has no interfaces? [ 78.222771][ T126] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.222794][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.224670][ T126] usb 3-1: config 0 descriptor?? [ 78.313141][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 78.315294][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.315317][ T4303] usb 4-1: config 0 has no interfaces? [ 78.315339][ T4303] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.315361][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.319067][ T4303] usb 4-1: config 0 descriptor?? [ 78.450372][ T4563] nbd1: detected capacity change from 0 to 20 [ 78.477633][ T1043] block nbd1: Send control failed (result -89) [ 78.483884][ T1043] block nbd1: Request send failed, requeueing [ 78.498062][ T4268] block nbd1: Receive control failed (result -32) [ 78.507020][ T1043] block nbd1: Dead connection, failed to find a fallback [ 78.514138][ T1043] block nbd1: shutting down sockets [ 78.520907][ T4244] ldm_validate_partition_table(): Disk read failed. [ 78.570073][ T4244] Dev nbd1: unable to read RDB block 0 [ 78.584913][ T4244] nbd1: unable to read partition table [ 78.598784][ T4244] nbd1: partition table beyond EOD, truncated [ 78.618874][ T4244] ldm_validate_partition_table(): Disk read failed. [ 78.640734][ T4244] Dev nbd1: unable to read RDB block 0 [ 78.652963][ T4244] nbd1: unable to read partition table [ 78.662863][ T4244] nbd1: partition table beyond EOD, truncated [ 80.060272][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 80.240387][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 80.566885][ T4612] nbd0: detected capacity change from 0 to 20 [ 80.576467][ T1043] block nbd0: Send control failed (result -89) [ 80.583124][ T1043] block nbd0: Request send failed, requeueing [ 80.590426][ T4268] block nbd0: Receive control failed (result -32) [ 80.598299][ T1043] block nbd0: Dead connection, failed to find a fallback [ 80.605504][ T1043] block nbd0: shutting down sockets [ 80.613509][ T4244] ldm_validate_partition_table(): Disk read failed. [ 80.630527][ T4244] Dev nbd0: unable to read RDB block 0 [ 80.653586][ T4244] nbd0: unable to read partition table [ 80.771998][ T4244] nbd0: partition table beyond EOD, truncated [ 81.101451][ T4244] ldm_validate_partition_table(): Disk read failed. [ 81.200983][ T4338] usb 3-1: USB disconnect, device number 3 [ 81.219088][ T4303] usb 4-1: USB disconnect, device number 2 [ 81.231587][ T52] blk_print_req_error: 83 callbacks suppressed [ 81.231600][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.247326][ T52] buffer_io_error: 83 callbacks suppressed [ 81.247339][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.262286][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.271455][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.290678][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.299844][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.309005][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.318177][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.327208][ T4244] Dev nbd0: unable to read RDB block 0 [ 81.332958][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.342308][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.350536][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.359582][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.388418][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.397625][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.410038][ T4244] nbd0: unable to read partition table [ 81.415763][ T4244] nbd0: partition table beyond EOD, truncated [ 81.481431][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.481482][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.490717][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.490748][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.490885][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.490907][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.581314][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 82.040076][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.222509][ T4658] nbd3: detected capacity change from 0 to 20 [ 82.229514][ T4338] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.230068][ T4303] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.247139][ T52] block nbd3: Send control failed (result -89) [ 82.253987][ T52] block nbd3: Request send failed, requeueing [ 82.260235][ T4268] block nbd3: Receive control failed (result -32) [ 82.260263][ T52] block nbd3: Dead connection, failed to find a fallback [ 82.260296][ T52] block nbd3: shutting down sockets [ 82.279262][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.280737][ T4244] ldm_validate_partition_table(): Disk read failed. [ 82.287728][ T4338] usb 5-1: Product: syz [ 82.298484][ T4338] usb 5-1: Manufacturer: syz [ 82.303712][ T4338] usb 5-1: SerialNumber: syz [ 82.324555][ T4338] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.404020][ T126] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 82.472264][ T4244] Dev nbd3: unable to read RDB block 0 [ 82.490187][ T4303] usb 2-1: Using ep0 maxpacket: 8 [ 82.514249][ T4303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.582350][ T4244] nbd3: unable to read partition table [ 82.679261][ T4303] usb 2-1: config 0 has no interfaces? [ 82.698836][ T4244] nbd3: partition table beyond EOD, truncated [ 82.779416][ T4303] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.901525][ T4244] ldm_validate_partition_table(): Disk read failed. [ 82.912425][ T4338] usb 5-1: USB disconnect, device number 2 [ 83.030050][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.038705][ T4244] Dev nbd3: unable to read RDB block 0 [ 83.058784][ T4244] nbd3: unable to read partition table [ 83.062113][ T4303] usb 2-1: config 0 descriptor?? [ 83.082103][ T4244] nbd3: partition table beyond EOD, truncated [ 83.290062][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.506984][ T126] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 83.514385][ T4243] usb 1-1: Using ep0 maxpacket: 8 [ 83.527381][ T4243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.539604][ T126] ath9k_htc: Failed to initialize the device [ 83.552996][ T4338] usb 5-1: ath9k_htc: USB layer deinitialized [ 83.559716][ T4243] usb 1-1: config 0 has no interfaces? [ 83.565807][ T4243] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.582640][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.594334][ T4243] usb 1-1: config 0 descriptor?? [ 83.670002][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 83.683733][ T4685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 83.695502][ T4685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'. [ 84.580190][ T4696] nbd3: detected capacity change from 0 to 20 [ 84.589152][ T1043] block nbd3: Send control failed (result -89) [ 84.595508][ T1043] block nbd3: Request send failed, requeueing [ 84.601716][ T4268] block nbd3: Receive control failed (result -32) [ 84.608907][ T1043] block nbd3: Dead connection, failed to find a fallback [ 84.616178][ T1043] block nbd3: shutting down sockets [ 84.622828][ T4244] ldm_validate_partition_table(): Disk read failed. [ 84.647999][ T4244] Dev nbd3: unable to read RDB block 0 [ 84.682780][ T4244] nbd3: unable to read partition table [ 84.735226][ T4244] nbd3: partition table beyond EOD, truncated [ 85.132759][ T126] usb 2-1: USB disconnect, device number 2 [ 85.590003][ T4244] ldm_validate_partition_table(): Disk read failed. [ 85.597010][ T4244] Dev nbd3: unable to read RDB block 0 [ 85.667578][ T4244] nbd3: unable to read partition table [ 85.715088][ T4244] nbd3: partition table beyond EOD, truncated [ 86.462297][ T4338] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.484389][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 86.496531][ T4733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 86.507507][ T4733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 86.671546][ T4730] nbd3: detected capacity change from 0 to 20 [ 86.764558][ T4338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.903073][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.044734][ T52] block nbd3: Send control failed (result -89) [ 87.051093][ T52] block nbd3: Request send failed, requeueing [ 87.058076][ T4268] block nbd3: Receive control failed (result -32) [ 87.064825][ T52] block nbd3: Dead connection, failed to find a fallback [ 87.072047][ T52] block nbd3: shutting down sockets [ 87.077365][ T52] blk_print_req_error: 72 callbacks suppressed [ 87.077376][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.095094][ T52] buffer_io_error: 72 callbacks suppressed [ 87.095107][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.111580][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.120901][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.129023][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.138277][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.149304][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.158501][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.167366][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.176728][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.185427][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.194649][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.203866][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.213146][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.230508][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.239574][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.247789][ T4244] ldm_validate_partition_table(): Disk read failed. [ 87.256040][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.265137][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.273385][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.282543][ T52] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.290695][ T4338] usb 3-1: Product: syz [ 87.291221][ T4244] Dev nbd3: unable to read RDB block 0 [ 87.294852][ T4338] usb 3-1: Manufacturer: syz [ 87.294869][ T4338] usb 3-1: SerialNumber: syz [ 87.313875][ T4338] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.324855][ T4303] usb 1-1: USB disconnect, device number 2 [ 87.348115][ T4338] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.433410][ T4244] nbd3: unable to read partition table [ 87.439214][ T4244] nbd3: partition table beyond EOD, truncated [ 87.555996][ T4244] ldm_validate_partition_table(): Disk read failed. [ 87.584751][ T4244] Dev nbd3: unable to read RDB block 0 [ 87.609903][ T4244] nbd3: unable to read partition table [ 87.641625][ T4244] nbd3: partition table beyond EOD, truncated [ 87.691800][ T4243] usb 3-1: USB disconnect, device number 4 [ 88.460079][ T4338] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 88.482039][ T4338] ath9k_htc: Failed to initialize the device [ 88.511646][ T4243] usb 3-1: ath9k_htc: USB layer deinitialized [ 89.123151][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 89.135408][ T4769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.149'. [ 89.146307][ T4769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.149'. [ 89.760874][ T52] block nbd0: Attempted send on invalid socket [ 89.890266][ T4303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.095444][ T4303] usb 2-1: Using ep0 maxpacket: 8 [ 90.105321][ T4303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.512283][ T4303] usb 2-1: config 0 has no interfaces? [ 90.537967][ T4303] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.566886][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.720438][ T4303] usb 2-1: config 0 descriptor?? [ 90.829286][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 90.841158][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.161'. [ 90.851944][ T4808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 93.069518][ T4819] kvm: emulating exchange as write [ 93.787670][ T4338] usb 2-1: USB disconnect, device number 3 [ 94.149957][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 94.162115][ T4842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 94.173419][ T4842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'. [ 95.605582][ T4858] fuse: Bad value for 'group_id' [ 97.679226][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 97.688914][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 97.863063][ T4904] fuse: Bad value for 'group_id' [ 97.880155][ T4338] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.090681][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 98.175388][ T4338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.219246][ T4338] usb 1-1: config 0 has no interfaces? [ 98.380313][ T4338] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.526447][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.577356][ T4338] usb 1-1: config 0 descriptor?? [ 98.826407][ T4303] usb 1-1: USB disconnect, device number 3 [ 99.410414][ T4243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.565495][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 99.628383][ T4243] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.641439][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.649746][ T4243] usb 4-1: Product: syz [ 99.654775][ T4243] usb 4-1: Manufacturer: syz [ 99.659453][ T4243] usb 4-1: SerialNumber: syz [ 99.702983][ T4243] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 99.765121][ T4243] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.899471][ T4243] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 101.112035][ T4301] usb 4-1: USB disconnect, device number 3 [ 101.153151][ T4243] ath9k_htc: Failed to initialize the device [ 101.159667][ T4301] usb 4-1: ath9k_htc: USB layer deinitialized [ 101.540919][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 101.551355][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 101.561817][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 101.610273][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.413337][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 102.423703][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.447916][ T14] usb 3-1: config 0 has no interfaces? [ 102.875348][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.913804][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.967274][ T14] usb 3-1: config 0 descriptor?? [ 103.340308][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.540121][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 103.551846][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.587161][ T14] usb 4-1: config 0 has no interfaces? [ 103.625322][ T14] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.674189][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.743077][ T14] usb 4-1: config 0 descriptor?? [ 103.889242][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 104.001469][ T951] usb 4-1: USB disconnect, device number 4 [ 104.229774][ T14] usb 3-1: USB disconnect, device number 5 [ 106.050346][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.258208][ T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.277443][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.318415][ T14] usb 2-1: Product: syz [ 106.333184][ T14] usb 2-1: Manufacturer: syz [ 106.372618][ T14] usb 2-1: SerialNumber: syz [ 106.402802][ T14] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.496168][ T14] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.723032][ T4303] usb 2-1: USB disconnect, device number 4 [ 106.905835][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 106.915499][ T5018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 106.924793][ T5018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 107.741532][ T14] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 107.750387][ T14] ath9k_htc: Failed to initialize the device [ 107.757415][ T4303] usb 2-1: ath9k_htc: USB layer deinitialized [ 107.820173][ T4301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.089671][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 108.442113][ T4301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.499068][ T4301] usb 1-1: config 0 has no interfaces? [ 108.525999][ T4301] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.561036][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.581404][ T4301] usb 1-1: config 0 descriptor?? [ 108.847189][ T4303] usb 1-1: USB disconnect, device number 4 [ 108.864635][ T5051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.251'. [ 111.370182][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.560362][ T4338] usb 4-1: Using ep0 maxpacket: 8 [ 112.111183][ T4338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.192814][ T4338] usb 4-1: config 0 has no interfaces? [ 112.227572][ T4338] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.306577][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.348579][ T4338] usb 4-1: config 0 descriptor?? [ 112.472256][ T5112] device syzkaller0 entered promiscuous mode [ 112.609354][ T126] usb 4-1: USB disconnect, device number 5 [ 114.059433][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 114.071476][ T5146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 114.072455][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 114.868353][ T5152] fuse: Unknown parameter 'grou00000000000000000000' [ 115.850831][ T4338] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.100025][ T4338] usb 4-1: Using ep0 maxpacket: 8 [ 116.117436][ T4338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.127737][ T4338] usb 4-1: config 0 has no interfaces? [ 116.136612][ T4338] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.358213][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.386889][ T4338] usb 4-1: config 0 descriptor?? [ 116.423959][ T5177] fuse: Unknown parameter 'grou00000000000000000000' [ 116.644756][ T4338] usb 4-1: USB disconnect, device number 6 [ 116.980271][ T4301] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.175864][ T4301] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.189014][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.210234][ T4301] usb 3-1: Product: syz [ 117.214481][ T4301] usb 3-1: Manufacturer: syz [ 117.245256][ T4301] usb 3-1: SerialNumber: syz [ 117.265674][ T4301] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.314887][ T4301] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.755105][ T14] usb 3-1: USB disconnect, device number 6 [ 118.770292][ T4301] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 118.779654][ T4301] ath9k_htc: Failed to initialize the device [ 118.788137][ T5223] fuse: Unknown parameter 'grou00000000000000000000' [ 118.795929][ T14] usb 3-1: ath9k_htc: USB layer deinitialized [ 119.229767][ T5235] overlayfs: failed to resolve './file1': -2 [ 119.300198][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.554496][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 119.574236][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.255385][ T14] usb 3-1: config 0 has no interfaces? [ 120.265828][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.282878][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.331164][ T14] usb 3-1: config 0 descriptor?? [ 120.551398][ T14] usb 3-1: USB disconnect, device number 7 [ 120.820144][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.037183][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.049872][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.058156][ T22] usb 5-1: Product: syz [ 121.062461][ T22] usb 5-1: Manufacturer: syz [ 121.067149][ T22] usb 5-1: SerialNumber: syz [ 121.086279][ T22] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.138332][ T22] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.315577][ T5270] nbd0: detected capacity change from 0 to 12 [ 121.318503][ T1043] block nbd0: Send control failed (result -89) [ 121.323810][ T5270] block nbd0: NBD_DISCONNECT [ 121.328321][ T1043] block nbd0: Request send failed, requeueing [ 121.341962][ T1043] block nbd0: Disconnected due to user request. [ 121.349523][ T1043] blk_print_req_error: 26 callbacks suppressed [ 121.349827][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.365994][ T5270] block nbd0: Send disconnect failed -89 [ 121.373229][ T1043] buffer_io_error: 25 callbacks suppressed [ 121.373242][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.373441][ T14] usb 5-1: USB disconnect, device number 3 [ 121.472272][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.482550][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.716111][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.725248][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.737351][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.746585][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.754847][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.763960][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.894178][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.903779][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.913107][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.922375][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.931340][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.188393][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.197655][ T4244] ldm_validate_partition_table(): Disk read failed. [ 122.210043][ T22] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 122.222569][ T22] ath9k_htc: Failed to initialize the device [ 122.243044][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.252532][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.262554][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.271903][ T1043] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.284786][ T4244] Dev nbd0: unable to read RDB block 0 [ 122.299806][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 122.330845][ T4244] nbd0: unable to read partition table [ 122.336588][ T4244] nbd0: partition table beyond EOD, truncated [ 122.531665][ T5271] ldm_validate_partition_table(): Disk read failed. [ 122.543865][ T5271] Dev nbd0: unable to read RDB block 0 [ 122.549731][ T5271] nbd0: unable to read partition table [ 122.556727][ T5271] nbd0: partition table beyond EOD, truncated [ 122.566230][ T4244] ldm_validate_partition_table(): Disk read failed. [ 122.584854][ T4244] Dev nbd0: unable to read RDB block 0 [ 122.765721][ T52] block nbd3: Attempted send on invalid socket [ 122.778662][ T52] block nbd3: Attempted send on invalid socket [ 122.788350][ T5283] Mount JFS Failure: -5 [ 122.792809][ T5283] jfs_mount failed w/return code = -5 [ 123.438343][ T4244] nbd0: unable to read partition table [ 123.478583][ T4244] nbd0: partition table beyond EOD, truncated [ 124.110300][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.300115][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 124.313787][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.324834][ T22] usb 2-1: config 0 has no interfaces? [ 124.330586][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.340302][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.363493][ T22] usb 2-1: config 0 descriptor?? [ 124.638967][ T126] usb 2-1: USB disconnect, device number 5 [ 125.064893][ T5314] tipc: Started in network mode [ 125.071168][ T5314] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 125.079066][ T5314] tipc: Enabled bearer , priority 0 [ 125.164099][ T5322] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 125.176429][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.184407][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.419263][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.426611][ T5322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.434475][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.441565][ T5322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.588845][ T5322] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.648608][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 125.658350][ T5323] device bridge_slave_1 left promiscuous mode [ 125.886313][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.933516][ T5323] device bridge_slave_0 left promiscuous mode [ 125.940664][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.026640][ T5323] bond0: (slave bridge0): Releasing backup interface [ 126.102253][ T4299] tipc: Node number set to 11578026 [ 126.920188][ T126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.937164][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 127.100068][ T126] usb 4-1: device descriptor read/64, error -32 [ 127.399982][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.626161][ T126] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.636468][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.651092][ T126] usb 4-1: Product: syz [ 127.656635][ T126] usb 4-1: Manufacturer: syz [ 127.664948][ T126] usb 4-1: SerialNumber: syz [ 127.713667][ T126] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.774772][ T126] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.982036][ T22] usb 4-1: USB disconnect, device number 8 [ 128.100146][ T4304] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.128642][ T5367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.367'. [ 128.310202][ T4304] usb 1-1: Using ep0 maxpacket: 8 [ 128.323208][ T4304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.355608][ T4304] usb 1-1: config 0 has no interfaces? [ 128.362040][ T4304] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.380145][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.417941][ T4304] usb 1-1: config 0 descriptor?? [ 128.603590][ T5377] nbd4: detected capacity change from 0 to 12 [ 128.635611][ T5377] block nbd4: NBD_DISCONNECT [ 128.639496][ T52] block nbd4: Send control failed (result -89) [ 128.646518][ T52] block nbd4: Request send failed, requeueing [ 128.649761][ T4301] usb 1-1: USB disconnect, device number 5 [ 128.653406][ T52] block nbd4: Disconnected due to user request. [ 128.664909][ T5377] block nbd4: Send disconnect failed -89 [ 128.695472][ T52] blk_print_req_error: 42 callbacks suppressed [ 128.695487][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.711397][ T52] buffer_io_error: 40 callbacks suppressed [ 128.711410][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 128.726043][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.758193][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 128.771930][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.783208][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 128.796729][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.806475][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 128.823369][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.834157][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 128.857024][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.866232][ T126] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 129.079624][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.089506][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.098619][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.107127][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.116372][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.124203][ T4244] ldm_validate_partition_table(): Disk read failed. [ 129.298216][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.307735][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.316320][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.325467][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.354779][ T4244] Dev nbd4: unable to read RDB block 0 [ 129.372270][ T126] ath9k_htc: Failed to initialize the device [ 129.419684][ T4244] nbd4: unable to read partition table [ 129.429507][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 129.467262][ T4244] nbd4: partition table beyond EOD, truncated [ 129.491580][ T4268] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 129.500132][ T4268] Bluetooth: hci0: Injecting HCI hardware error event [ 129.508963][ T4267] Bluetooth: hci0: hardware error 0x00 [ 129.558004][ T4244] ldm_validate_partition_table(): Disk read failed. [ 129.570584][ T4244] Dev nbd4: unable to read RDB block 0 [ 129.580476][ T4244] nbd4: unable to read partition table [ 129.586198][ T4244] nbd4: partition table beyond EOD, truncated [ 129.599373][ T5382] ldm_validate_partition_table(): Disk read failed. [ 129.611643][ T5382] Dev nbd4: unable to read RDB block 0 [ 129.618087][ T5382] nbd4: unable to read partition table [ 129.630637][ T5382] nbd4: partition table beyond EOD, truncated [ 129.712896][ T5403] netlink: 48 bytes leftover after parsing attributes in process `syz.3.380'. [ 130.560979][ T4301] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.115963][ T4301] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.132774][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.152790][ T4301] usb 3-1: Product: syz [ 131.170131][ T4301] usb 3-1: Manufacturer: syz [ 131.181405][ T4301] usb 3-1: SerialNumber: syz [ 131.228619][ T4301] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.298136][ T4301] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.330088][ T4303] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.444154][ T5435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.393'. [ 131.507434][ T14] usb 3-1: USB disconnect, device number 8 [ 131.530215][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 131.540525][ T4303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.568922][ T4303] usb 5-1: config 0 has no interfaces? [ 131.577493][ T4267] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 131.590917][ T4303] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.605949][ T4303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.641303][ T4303] usb 5-1: config 0 descriptor?? [ 131.860803][ T4303] usb 5-1: USB disconnect, device number 4 [ 131.895631][ T5446] block nbd3: NBD_DISCONNECT [ 132.460938][ T4301] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 132.481114][ T5437] block nbd0: shutting down sockets [ 132.505671][ T4301] ath9k_htc: Failed to initialize the device [ 132.526089][ T14] usb 3-1: ath9k_htc: USB layer deinitialized [ 132.694705][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.701066][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.035530][ T5470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.407'. [ 133.841247][ T4303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.106221][ T4303] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.144647][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.182189][ T4303] usb 2-1: Product: syz [ 134.197308][ T4303] usb 2-1: Manufacturer: syz [ 134.204150][ T4303] usb 2-1: SerialNumber: syz [ 134.225144][ T5492] block nbd0: NBD_DISCONNECT [ 134.274384][ T4303] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.358537][ T4303] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 134.566506][ T951] usb 2-1: USB disconnect, device number 6 [ 134.770169][ T4301] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.160153][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 135.167097][ T4301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.225270][ T4301] usb 1-1: config 0 has no interfaces? [ 135.266024][ T4301] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.295768][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.337474][ T4301] usb 1-1: config 0 descriptor?? [ 135.410008][ T4303] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 135.416969][ T4303] ath9k_htc: Failed to initialize the device [ 135.823208][ T5510] netlink: 48 bytes leftover after parsing attributes in process `syz.3.422'. [ 135.887190][ T951] usb 2-1: ath9k_htc: USB layer deinitialized [ 135.902094][ T4301] usb 1-1: USB disconnect, device number 6 [ 137.200287][ T5539] tipc: Started in network mode [ 137.219740][ T5539] tipc: Node identity 7f000001, cluster identity 4711 [ 137.241452][ T5539] tipc: Enabled bearer , priority 10 [ 137.531989][ T5550] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 137.559358][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.566695][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.590002][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.659705][ T5553] netlink: 48 bytes leftover after parsing attributes in process `syz.4.439'. [ 137.715643][ T5550] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.722814][ T5550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.730211][ T5550] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.737272][ T5550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.774603][ T126] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.785489][ T5550] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 137.797107][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.806714][ T126] usb 3-1: Product: syz [ 137.818069][ T126] usb 3-1: Manufacturer: syz [ 137.834095][ T126] usb 3-1: SerialNumber: syz [ 137.862351][ T126] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.944757][ T126] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.165336][ T4299] usb 3-1: USB disconnect, device number 9 [ 138.360025][ T22] tipc: Node number set to 2130706433 [ 138.654432][ T5562] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 139.090313][ T126] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 139.098098][ T126] ath9k_htc: Failed to initialize the device [ 139.163771][ T4299] usb 3-1: ath9k_htc: USB layer deinitialized [ 139.271511][ T5562] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.278837][ T5562] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.477600][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.484742][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.492163][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.499244][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.560295][ T5562] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.753540][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 139.784513][ T5572] mmap: syz.2.443 (5572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.083430][ T5564] device bridge_slave_1 left promiscuous mode [ 140.090424][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.173976][ T5581] binder: 5571:5581 ioctl c0306201 20000400 returned -14 [ 140.294916][ T5564] device bridge_slave_0 left promiscuous mode [ 140.301699][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.710978][ T5585] random: crng reseeded on system resumption [ 140.831203][ T5564] bond0: (slave bridge0): Releasing backup interface [ 141.333645][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.445'. [ 141.694837][ T5594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.450'. [ 142.381174][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 142.392723][ T5608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 142.403591][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.449'. [ 142.480096][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.003595][ T126] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.030668][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.117202][ T126] usb 1-1: Product: syz [ 143.133836][ T126] usb 1-1: Manufacturer: syz [ 143.166223][ T126] usb 1-1: SerialNumber: syz [ 143.224522][ T126] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.278307][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.331189][ T4267] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 143.339864][ T4267] Bluetooth: hci3: Injecting HCI hardware error event [ 143.347939][ T4268] Bluetooth: hci3: hardware error 0x00 [ 143.505301][ T126] usb 1-1: USB disconnect, device number 7 [ 144.370289][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 144.394668][ T22] ath9k_htc: Failed to initialize the device [ 144.453403][ T126] usb 1-1: ath9k_htc: USB layer deinitialized [ 144.596660][ T5628] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 144.657557][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.664891][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.792055][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.799218][ T5628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.806579][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.813670][ T5628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.867170][ T5634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.462'. [ 144.905528][ T5628] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.019496][ T5631] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 145.106548][ T5631] team0: Port device netdevsim0 added [ 145.410308][ T4268] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 147.224065][ T5663] overlayfs: failed to resolve './file1': -2 [ 147.240143][ T5663] lo speed is unknown, defaulting to 1000 [ 147.247861][ T5663] lo speed is unknown, defaulting to 1000 [ 147.254593][ T5663] lo speed is unknown, defaulting to 1000 [ 147.290942][ T5666] lo speed is unknown, defaulting to 1000 [ 147.297035][ T5666] lo speed is unknown, defaulting to 1000 [ 147.303689][ T5666] lo speed is unknown, defaulting to 1000 [ 147.314291][ T5666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.324601][ T5666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.345821][ T5666] lo speed is unknown, defaulting to 1000 [ 147.352371][ T5666] lo speed is unknown, defaulting to 1000 [ 147.359143][ T5666] lo speed is unknown, defaulting to 1000 [ 147.365638][ T5666] lo speed is unknown, defaulting to 1000 [ 147.371946][ T5666] lo speed is unknown, defaulting to 1000 [ 147.379382][ T5663] infiniband sz1: set active [ 147.384503][ T5663] infiniband sz1: added lo [ 147.396777][ T22] lo speed is unknown, defaulting to 1000 [ 147.426519][ T5663] RDS/IB: sz1: added [ 147.431144][ T5663] smc: adding ib device sz1 with port count 1 [ 147.437440][ T5663] smc: ib device sz1 port 1 has pnetid [ 147.445691][ T5663] lo speed is unknown, defaulting to 1000 [ 147.505632][ T22] lo speed is unknown, defaulting to 1000 [ 147.527065][ T5663] lo speed is unknown, defaulting to 1000 [ 147.585380][ T5663] lo speed is unknown, defaulting to 1000 [ 147.640760][ T5663] lo speed is unknown, defaulting to 1000 [ 147.698820][ T5663] lo speed is unknown, defaulting to 1000 [ 148.438439][ T5682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.474'. [ 148.603102][ T5689] overlayfs: missing 'lowerdir' [ 149.254937][ T5704] overlayfs: failed to resolve './file1': -2 [ 149.268743][ T5704] rdma_rxe: rxe_register_device failed with error -23 [ 149.276390][ T5704] rdma_rxe: failed to add lo [ 149.281984][ T5704] siw: device registration error -23 [ 149.599983][ T4301] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.820005][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 149.827127][ T4301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.849702][ T4301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.870595][ T4301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 149.968731][ T4301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 150.010113][ T4301] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 150.070186][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.101435][ T4301] hub 1-1:1.0: bad descriptor, ignoring hub [ 150.115188][ T4301] hub: probe of 1-1:1.0 failed with error -5 [ 150.138673][ T4301] cdc_wdm 1-1:1.0: skipping garbage [ 150.160157][ T4301] cdc_wdm 1-1:1.0: skipping garbage [ 150.196283][ T4301] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 150.212549][ T4301] cdc_wdm 1-1:1.0: Unknown control protocol [ 150.251076][ T5721] device syzkaller0 entered promiscuous mode [ 150.569663][ T4299] usb 1-1: USB disconnect, device number 8 [ 150.804308][ T5734] overlayfs: missing 'lowerdir' [ 153.462207][ T5736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.480062][ T5736] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.527264][ T5736] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 153.545534][ T5736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.552776][ T5736] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.563106][ T5736] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 153.577000][ T5736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.591778][ T5736] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.627053][ T5736] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 154.168832][ T1043] block nbd2: Attempted send on invalid socket [ 154.168855][ T1043] blk_print_req_error: 40 callbacks suppressed [ 154.168866][ T1043] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.263844][ T1043] block nbd2: Attempted send on invalid socket [ 154.263866][ T1043] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.298223][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.298732][ T52] block nbd2: Attempted send on invalid socket [ 154.298752][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.300435][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 154.375388][ T52] block nbd2: Attempted send on invalid socket [ 154.375405][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.377239][ T52] block nbd2: Attempted send on invalid socket [ 154.377255][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.515968][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.548734][ T1043] block nbd2: Attempted send on invalid socket [ 154.554977][ T1043] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.564483][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 154.590531][ T52] block nbd2: Attempted send on invalid socket [ 154.596791][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.610726][ T1043] block nbd2: Attempted send on invalid socket [ 154.616960][ T1043] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.626537][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.662618][ T1043] block nbd2: Attempted send on invalid socket [ 154.668831][ T1043] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.701683][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 154.763735][ T1043] block nbd2: Attempted send on invalid socket [ 154.770150][ T1043] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.781352][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 154.857768][ T5774] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 154.887702][ T5774] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 155.450173][ T5791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.513'. [ 155.490128][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.570097][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.650199][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.195543][ T5800] device syzkaller0 entered promiscuous mode [ 156.582161][ T5809] block nbd1: NBD_DISCONNECT [ 156.587072][ T5809] block nbd1: Send disconnect failed -89 [ 157.053235][ T4268] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 157.314174][ T5806] block nbd1: Disconnected due to user request. [ 157.326751][ T5806] block nbd1: shutting down sockets [ 157.569998][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 157.659983][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 157.924425][ T5829] overlayfs: missing 'lowerdir' [ 158.444141][ T5833] input: syz0 as /devices/virtual/input/input5 [ 159.841269][ T5816] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 159.850471][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.857686][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.874347][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 159.898381][ T5818] device bridge_slave_1 left promiscuous mode [ 159.911855][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.952944][ T5818] device bridge_slave_0 left promiscuous mode [ 159.970555][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.096373][ T5818] bond0: (slave bridge0): Releasing backup interface [ 160.177919][ T5841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 160.199654][ T5843] capability: warning: `syz.1.527' uses 32-bit capabilities (legacy support in use) [ 160.881789][ T5856] block nbd3: NBD_DISCONNECT [ 160.893664][ T5856] block nbd3: Send disconnect failed -89 [ 161.090195][ T4268] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 161.099536][ T4268] Bluetooth: hci4: Injecting HCI hardware error event [ 161.108038][ T4268] Bluetooth: hci4: hardware error 0x00 [ 161.253527][ T5853] block nbd3: Disconnected due to user request. [ 161.268375][ T5853] block nbd3: shutting down sockets [ 161.539275][ T5866] overlayfs: missing 'lowerdir' [ 161.950043][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.987391][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 161.987409][ T52] block nbd2: Attempted send on invalid socket [ 161.999445][ T52] blk_print_req_error: 2 callbacks suppressed [ 161.999455][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 162.017748][ T5874] XFS (nbd2): SB validate failed with error -5. [ 162.163259][ T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.183686][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.192748][ T22] usb 2-1: Product: syz [ 162.197238][ T22] usb 2-1: Manufacturer: syz [ 162.202595][ T22] usb 2-1: SerialNumber: syz [ 162.229805][ T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.275602][ T22] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.478819][ T4303] usb 2-1: USB disconnect, device number 7 [ 162.501629][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.540'. [ 163.170226][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 163.410090][ T22] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 163.419476][ T22] ath9k_htc: Failed to initialize the device [ 163.519180][ T4303] usb 2-1: ath9k_htc: USB layer deinitialized [ 164.142895][ T5905] block nbd1: NBD_DISCONNECT [ 164.148583][ T5905] block nbd1: Send disconnect failed -89 [ 164.166149][ T5904] block nbd1: Disconnected due to user request. [ 164.187487][ T5904] block nbd1: shutting down sockets [ 164.544135][ T5912] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.564929][ T5912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.669715][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 166.268305][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.563'. [ 169.353261][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.576'. [ 170.547625][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 170.560712][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 170.772343][ T6003] input: syz0 as /devices/virtual/input/input6 [ 173.297791][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 173.309818][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 174.063708][ T6040] overlayfs: failed to resolve './file1': -2 [ 174.459083][ T6040] rdma_rxe: rxe_register_device failed with error -23 [ 174.511818][ T6045] siw: device registration error -23 [ 174.537682][ T6040] rdma_rxe: failed to add lo [ 177.413844][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 177.426586][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 179.415379][ T6107] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 179.442319][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 179.817538][ T6093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.836866][ T6093] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.859798][ T6093] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 179.887493][ T6093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.913437][ T6093] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.930741][ T6093] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 180.210089][ T4304] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.430073][ T4304] usb 4-1: Using ep0 maxpacket: 8 [ 180.440200][ T4304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.522329][ T4304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 180.573807][ T4304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 180.674239][ T4304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 181.090035][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.189997][ T4304] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.199120][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.240999][ T4304] hub 4-1:1.0: bad descriptor, ignoring hub [ 181.260515][ T4304] hub: probe of 4-1:1.0 failed with error -5 [ 181.271843][ T4304] cdc_wdm 4-1:1.0: skipping garbage [ 181.297573][ T4304] cdc_wdm 4-1:1.0: skipping garbage [ 181.314588][ T4304] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 181.320720][ T4304] cdc_wdm 4-1:1.0: Unknown control protocol [ 181.929022][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.001299][ T4303] usb 4-1: USB disconnect, device number 9 [ 182.990157][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.170368][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 183.194299][ T126] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.215260][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.233283][ T126] usb 1-1: Product: syz [ 183.237831][ T126] usb 1-1: Manufacturer: syz [ 183.243061][ T126] usb 1-1: SerialNumber: syz [ 183.271179][ T126] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.328677][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.538759][ T4304] usb 1-1: USB disconnect, device number 9 [ 183.636948][ T6172] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 183.669772][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 183.982089][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 184.300518][ T52] block nbd4: Attempted send on invalid socket [ 184.309949][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.319349][ T52] block nbd4: Attempted send on invalid socket [ 184.325549][ T52] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.335533][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 184.454919][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 184.467972][ T22] ath9k_htc: Failed to initialize the device [ 184.477850][ T4304] usb 1-1: ath9k_htc: USB layer deinitialized [ 184.494128][ T1043] block nbd4: Attempted send on invalid socket [ 184.500423][ T1043] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.509840][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 184.567227][ T52] block nbd4: Attempted send on invalid socket [ 184.573460][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.583809][ T52] block nbd4: Attempted send on invalid socket [ 184.590321][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.599823][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 184.617718][ T52] block nbd4: Attempted send on invalid socket [ 184.624031][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.649675][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 184.664694][ T52] block nbd4: Attempted send on invalid socket [ 184.670954][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.686341][ T52] block nbd4: Attempted send on invalid socket [ 184.692641][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.702134][ T4243] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 184.730544][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 184.832611][ T1043] block nbd4: Attempted send on invalid socket [ 184.838823][ T1043] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.858498][ T6181] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 184.880299][ T6181] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 184.890051][ T4243] usb 2-1: Using ep0 maxpacket: 8 [ 184.915482][ T4243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.055523][ T4243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.136143][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 185.158861][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 185.210226][ T4243] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 185.251074][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.677816][ T4243] hub 2-1:1.0: bad descriptor, ignoring hub [ 185.683868][ T4243] hub: probe of 2-1:1.0 failed with error -5 [ 185.690406][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 185.695644][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 185.702908][ T4243] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 185.709101][ T4243] cdc_wdm 2-1:1.0: Unknown control protocol [ 185.974118][ T6214] fuse: Unknown parameter 'user_i00000000000000000000' [ 186.121959][ T4302] usb 2-1: USB disconnect, device number 8 [ 186.513091][ T6225] input: syz0 as /devices/virtual/input/input11 [ 188.451718][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 188.464389][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 188.476216][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'. [ 188.843674][ T6248] fuse: Unknown parameter 'user_id00000000000000000000' [ 190.064783][ T6265] netlink: 'syz.4.677': attribute type 10 has an invalid length. [ 190.074618][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.081929][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.206776][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.213966][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.221406][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.228544][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.313880][ T6265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.329159][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 190.339795][ T6272] device bridge_slave_1 left promiscuous mode [ 190.361279][ T52] block nbd1: Attempted send on invalid socket [ 190.367532][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 190.377593][ T6274] XFS (nbd1): SB validate failed with error -5. [ 190.459520][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.585488][ T6272] device bridge_slave_0 left promiscuous mode [ 190.610806][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.755804][ T6272] bond0: (slave bridge0): Releasing backup interface [ 191.287797][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 191.300636][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.682'. [ 191.312071][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 192.726483][ T6298] fuse: Unknown parameter 'user_id00000000000000000000' [ 194.134251][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140645][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210599][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 194.223715][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 194.265447][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 194.808775][ T6339] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 195.494384][ T6344] fuse: Unknown parameter 'user_id00000000000000000000' [ 195.706624][ T6347] netlink: 'syz.1.701': attribute type 10 has an invalid length. [ 195.779225][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.786519][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.845274][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 195.869972][ T6349] device bridge_slave_1 left promiscuous mode [ 195.876304][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.891864][ T6349] device bridge_slave_0 left promiscuous mode [ 195.919909][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.985296][ T6349] bond0: (slave bridge0): Releasing backup interface [ 196.491192][ T6364] input: syz0 as /devices/virtual/input/input13 [ 198.417480][ T6380] fuse: Bad value for 'fd' [ 199.191021][ T6395] input: syz0 as /devices/virtual/input/input14 [ 200.213820][ T6405] input: syz0 as /devices/virtual/input/input15 [ 202.419170][ T6431] fuse: Bad value for 'fd' [ 202.800939][ T6443] input: syz0 as /devices/virtual/input/input16 [ 203.628638][ T6447] input: syz0 as /devices/virtual/input/input17 [ 206.148134][ T6472] syz.0.740 (6472): /proc/6471/oom_adj is deprecated, please use /proc/6471/oom_score_adj instead. [ 206.361814][ T6475] fuse: Bad value for 'fd' [ 206.816842][ T6487] input: syz0 as /devices/virtual/input/input18 [ 207.895012][ T6498] overlayfs: failed to resolve './file1': -2 [ 207.903269][ T6498] rdma_rxe: already configured on lo [ 207.945791][ T6499] input: syz0 as /devices/virtual/input/input19 [ 209.349989][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.508164][ T4302] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.550225][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 209.581241][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.600026][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.610825][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.621504][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.630750][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.674381][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 209.680526][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 209.692669][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 209.698716][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 209.709988][ T22] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 209.846175][ T4302] usb 1-1: Using ep0 maxpacket: 8 [ 209.870509][ T4302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.906446][ T4302] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.942317][ T4302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 209.970006][ T4302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 209.989955][ T4302] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.999116][ T22] usb 2-1: USB disconnect, device number 9 [ 210.009208][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.033111][ T4302] hub 1-1:1.0: bad descriptor, ignoring hub [ 210.040196][ T6516] fuse: Unknown parameter '0x0000000000000003' [ 210.046478][ T4302] hub: probe of 1-1:1.0 failed with error -5 [ 210.060659][ T4302] cdc_wdm 1-1:1.0: skipping garbage [ 210.066026][ T4302] cdc_wdm 1-1:1.0: skipping garbage [ 210.085696][ T4302] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 210.100094][ T4302] cdc_wdm 1-1:1.0: Unknown control protocol [ 210.451641][ T22] usb 1-1: USB disconnect, device number 10 [ 210.792298][ T6532] input: syz0 as /devices/virtual/input/input20 [ 213.765378][ T6554] fuse: Unknown parameter '0x0000000000000003' [ 214.174720][ T6568] overlayfs: failed to resolve './file1': -2 [ 214.184146][ T6568] rdma_rxe: rxe_register_device failed with error -23 [ 214.191120][ T6568] rdma_rxe: failed to add lo [ 214.196518][ T6568] siw: device registration error -23 [ 214.290066][ T4301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.419955][ T4302] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.500092][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 214.507830][ T4301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.564029][ T4301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.618655][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 214.630666][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 214.637684][ T4302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.666371][ T4302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.679479][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 214.699750][ T4302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 214.727858][ T4301] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 214.757965][ T4302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 214.777526][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.809265][ T4302] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 214.820985][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.831076][ T4301] hub 5-1:1.0: bad descriptor, ignoring hub [ 214.837016][ T4301] hub: probe of 5-1:1.0 failed with error -5 [ 214.847065][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 214.856741][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 214.866453][ T4302] hub 3-1:1.0: bad descriptor, ignoring hub [ 214.874781][ T4302] hub: probe of 3-1:1.0 failed with error -5 [ 214.885626][ T4301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 214.894166][ T4302] cdc_wdm 3-1:1.0: skipping garbage [ 214.899831][ T4301] cdc_wdm 5-1:1.0: Unknown control protocol [ 214.908587][ T4302] cdc_wdm 3-1:1.0: skipping garbage [ 214.918082][ T4302] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 214.928184][ T4302] cdc_wdm 3-1:1.0: Unknown control protocol [ 215.303163][ T4302] usb 5-1: USB disconnect, device number 5 [ 215.340233][ T6569] cdc_wdm 5-1:1.0: Error autopm - -16 [ 215.346859][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 215.356498][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 215.360183][ T6586] cdc_wdm 5-1:1.0: Error autopm - -16 [ 215.371350][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.772'. [ 215.500136][ T126] usb 3-1: USB disconnect, device number 10 [ 216.012912][ T6595] fuse: Unknown parameter '0x0000000000000003' [ 216.419469][ T6607] tipc: Enabling of bearer rejected, already enabled [ 217.895548][ T6619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.903279][ T6619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.960360][ T6619] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 217.999701][ T6619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.178837][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.273836][ T6619] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 219.284011][ T6619] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 219.580428][ T6640] fuse: Unknown parameter '0x0000000000000003' [ 219.758116][ T6649] tipc: Enabling of bearer rejected, failed to enable media [ 220.050204][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.895621][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 220.905097][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 220.914713][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 221.250721][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 221.650421][ T6680] input: syz0 as /devices/virtual/input/input23 [ 222.159996][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 222.528233][ T6677] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 222.576766][ T6693] overlayfs: failed to resolve './file1': -2 [ 222.663879][ T6695] rdma_rxe: already configured on lo [ 222.733426][ T6687] device syzkaller0 entered promiscuous mode [ 224.235132][ T6707] block device autoloading is deprecated and will be removed. [ 226.802614][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 227.200486][ T6699] tipc: Enabling of bearer rejected, failed to enable media [ 227.208897][ T6706] netlink: 'syz.3.808': attribute type 39 has an invalid length. [ 227.817554][ T6748] overlayfs: failed to resolve './file1': -2 [ 227.848122][ T6748] rdma_rxe: already configured on lo [ 228.517767][ T6760] input: syz0 as /devices/virtual/input/input25 [ 230.112617][ T6772] nbd4: detected capacity change from 0 to 12 [ 230.137493][ T1043] block nbd4: Send control failed (result -89) [ 230.144052][ T1043] block nbd4: Request send failed, requeueing [ 230.150987][ T4267] block nbd4: Receive control failed (result -32) [ 230.158586][ T1043] block nbd4: Dead connection, failed to find a fallback [ 230.165699][ T1043] block nbd4: shutting down sockets [ 230.171066][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.181471][ T1043] buffer_io_error: 40 callbacks suppressed [ 230.181481][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.195718][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.204906][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.216063][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.225231][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.233803][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.242910][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.250901][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.260287][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.268262][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.277391][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.282045][ T6774] device syzkaller0 entered promiscuous mode [ 230.285369][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.300404][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.308481][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.317615][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.325463][ T4244] ldm_validate_partition_table(): Disk read failed. [ 230.347883][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.357294][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.366973][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.376304][ T1043] Buffer I/O error on dev nbd4, logical block 0, async page read [ 230.390857][ T4244] Dev nbd4: unable to read RDB block 0 [ 230.425658][ T4244] nbd4: unable to read partition table [ 230.451462][ T4244] nbd4: partition table beyond EOD, truncated [ 230.460762][ T4244] ldm_validate_partition_table(): Disk read failed. [ 230.467812][ T4244] Dev nbd4: unable to read RDB block 0 [ 230.474602][ T4244] nbd4: unable to read partition table [ 230.490052][ T4244] nbd4: partition table beyond EOD, truncated [ 231.553818][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 231.708372][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 231.841235][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 233.801087][ T6802] overlayfs: failed to resolve './file1': -2 [ 233.828184][ T6802] rdma_rxe: rxe_register_device failed with error -23 [ 233.843184][ T6802] rdma_rxe: failed to add lo [ 233.859582][ T6802] siw: device registration error -23 [ 235.315596][ T6778] Set syz1 is full, maxelem 65536 reached [ 235.620039][ T4302] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.814635][ T4302] usb 5-1: Using ep0 maxpacket: 8 [ 235.841871][ T4302] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.852374][ T4302] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.861458][ T4302] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 235.872816][ T4302] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 235.884694][ T4302] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.894273][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.941855][ T4302] hub 5-1:1.0: bad descriptor, ignoring hub [ 235.948053][ T4302] hub: probe of 5-1:1.0 failed with error -5 [ 235.963974][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 235.969408][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 235.990435][ T4302] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 236.002743][ T4302] cdc_wdm 5-1:1.0: Unknown control protocol [ 236.287104][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.827'. [ 236.494331][ T4302] usb 5-1: USB disconnect, device number 6 [ 236.625226][ T6822] nbd2: detected capacity change from 0 to 12 [ 236.637260][ T1043] block nbd2: Send control failed (result -89) [ 236.644140][ T1043] block nbd2: Request send failed, requeueing [ 236.650401][ T4267] block nbd2: Receive control failed (result -32) [ 236.658471][ T1043] block nbd2: Dead connection, failed to find a fallback [ 236.666867][ T1043] block nbd2: shutting down sockets [ 236.672207][ T1043] blk_print_req_error: 25 callbacks suppressed [ 236.672219][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.687617][ T1043] buffer_io_error: 25 callbacks suppressed [ 236.687632][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.702117][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.711531][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.721167][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.730327][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.743717][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.753426][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.762082][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.771373][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.779504][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.788648][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.797471][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.806968][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.815451][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.825416][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.833673][ T4244] ldm_validate_partition_table(): Disk read failed. [ 236.843824][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.853318][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.861465][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.870642][ T1043] Buffer I/O error on dev nbd2, logical block 0, async page read [ 236.879177][ T4244] Dev nbd2: unable to read RDB block 0 [ 236.896898][ T4244] nbd2: unable to read partition table [ 236.902879][ T4244] nbd2: partition table beyond EOD, truncated [ 236.932762][ T4244] ldm_validate_partition_table(): Disk read failed. [ 236.956653][ T4244] Dev nbd2: unable to read RDB block 0 [ 236.962984][ T4244] nbd2: unable to read partition table [ 236.983542][ T4244] nbd2: partition table beyond EOD, truncated [ 237.000038][ T4301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.279947][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 237.289476][ T4301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.485598][ T4301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.525483][ T4301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.579823][ T4301] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.628248][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.741946][ T4301] hub 2-1:1.0: bad descriptor, ignoring hub [ 237.778118][ T4301] hub: probe of 2-1:1.0 failed with error -5 [ 237.812430][ T4301] cdc_wdm 2-1:1.0: skipping garbage [ 237.838162][ T4301] cdc_wdm 2-1:1.0: skipping garbage [ 237.867517][ T4301] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 237.980544][ T4301] usb 2-1: USB disconnect, device number 10 [ 238.297691][ T26] audit: type=1800 audit(1734594311.109:2): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.845" name="/newroot/168/bus" dev="tmpfs" ino=907 res=0 errno=0 [ 238.667679][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 238.746371][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 238.860349][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 239.124658][ T6856] device syzkaller0 entered promiscuous mode [ 239.193143][ T4267] Bluetooth: hci1: unexpected event for opcode 0x6e73 [ 239.292237][ T6869] nbd3: detected capacity change from 0 to 12 [ 239.373199][ T1043] block nbd3: Send control failed (result -89) [ 239.379418][ T1043] block nbd3: Request send failed, requeueing [ 239.386043][ T4267] block nbd3: Receive control failed (result -32) [ 239.392918][ T1043] block nbd3: Dead connection, failed to find a fallback [ 239.400142][ T1043] block nbd3: shutting down sockets [ 239.407205][ T4244] ldm_validate_partition_table(): Disk read failed. [ 239.417419][ T4244] Dev nbd3: unable to read RDB block 0 [ 239.438484][ T4244] nbd3: unable to read partition table [ 239.456220][ T4244] nbd3: partition table beyond EOD, truncated [ 239.488876][ T4244] ldm_validate_partition_table(): Disk read failed. [ 239.528240][ T4244] Dev nbd3: unable to read RDB block 0 [ 239.582339][ T4301] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 239.598939][ T4244] nbd3: unable to read partition table [ 239.622349][ T4244] nbd3: partition table beyond EOD, truncated [ 239.801928][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 239.811833][ T4301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.835306][ T4301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.858399][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 239.885669][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 239.914377][ T4301] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.936974][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.976775][ T4301] hub 5-1:1.0: bad descriptor, ignoring hub [ 239.994964][ T4301] hub: probe of 5-1:1.0 failed with error -5 [ 240.011586][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 240.027949][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 240.046102][ T4301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 240.065986][ T4301] cdc_wdm 5-1:1.0: Unknown control protocol [ 240.395312][ T4301] usb 5-1: USB disconnect, device number 7 [ 241.235151][ T6880] input: syz0 as /devices/virtual/input/input27 [ 242.310047][ T4243] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.560077][ T4243] usb 5-1: Using ep0 maxpacket: 8 [ 242.574819][ T4243] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.596446][ T4243] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.611454][ T4243] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.633709][ T4243] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.657908][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.727893][ T4243] hub 5-1:1.0: bad descriptor, ignoring hub [ 242.742686][ T4243] hub: probe of 5-1:1.0 failed with error -5 [ 242.764108][ T4243] cdc_wdm 5-1:1.0: skipping garbage [ 242.769578][ T4243] cdc_wdm 5-1:1.0: skipping garbage [ 242.784070][ T4243] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 243.032951][ T4243] usb 5-1: USB disconnect, device number 8 [ 243.485659][ T6885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.494508][ T6885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 243.522638][ T6885] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 243.543670][ T6885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.583766][ T6885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.591846][ T6885] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 243.982168][ T6909] nbd1: detected capacity change from 0 to 12 [ 244.083972][ T52] block nbd1: Send control failed (result -89) [ 244.090283][ T52] block nbd1: Request send failed, requeueing [ 244.096461][ T4267] block nbd1: Receive control failed (result -32) [ 244.096524][ T52] block nbd1: Dead connection, failed to find a fallback [ 244.110505][ T52] block nbd1: shutting down sockets [ 244.116580][ T52] blk_print_req_error: 60 callbacks suppressed [ 244.116593][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.132645][ T52] buffer_io_error: 60 callbacks suppressed [ 244.132657][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.157724][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.166982][ T1043] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.175455][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.184720][ T1043] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.193315][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.202403][ T1043] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.211214][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.220476][ T1043] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.229224][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.238492][ T1043] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.247287][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.257098][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.265344][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.274507][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.283554][ T4639] ldm_validate_partition_table(): Disk read failed. [ 244.335846][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.345386][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.355254][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.365006][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 244.375911][ T4639] Dev nbd1: unable to read RDB block 0 [ 244.456395][ T4639] nbd1: unable to read partition table [ 244.474678][ T4639] nbd1: partition table beyond EOD, truncated [ 244.879355][ T4639] ldm_validate_partition_table(): Disk read failed. [ 244.886675][ T4639] Dev nbd1: unable to read RDB block 0 [ 244.892987][ T4639] nbd1: unable to read partition table [ 244.899102][ T4639] nbd1: partition table beyond EOD, truncated [ 245.779081][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.779097][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.958537][ T4267] Bluetooth: hci2: unexpected event for opcode 0x6e73 [ 246.079982][ T4301] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.129202][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 246.205344][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 246.228210][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'. [ 246.290023][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 246.300372][ T4301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.323757][ T4301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.344715][ T4301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.364556][ T4301] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.397292][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.423897][ T4301] hub 2-1:1.0: bad descriptor, ignoring hub [ 246.430664][ T4301] hub: probe of 2-1:1.0 failed with error -5 [ 246.444498][ T4301] cdc_wdm 2-1:1.0: skipping garbage [ 246.459982][ T4301] cdc_wdm 2-1:1.0: skipping garbage [ 246.473767][ T4301] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 246.740124][ T4301] usb 2-1: USB disconnect, device number 11 [ 247.429396][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 247.533882][ T6933] device syzkaller0 entered promiscuous mode [ 247.661937][ T4243] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.810030][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 247.862708][ T4243] usb 2-1: Using ep0 maxpacket: 8 [ 247.870436][ T4243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.900393][ T4243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.921654][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.942316][ T4243] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 247.961603][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.994297][ T4243] hub 2-1:1.0: bad descriptor, ignoring hub [ 248.000350][ T4243] hub: probe of 2-1:1.0 failed with error -5 [ 248.015873][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 248.023752][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 248.039351][ T4243] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 248.314435][ T4243] usb 2-1: USB disconnect, device number 12 [ 248.863502][ T6948] nbd3: detected capacity change from 0 to 12 [ 248.886350][ T1043] block nbd3: Send control failed (result -89) [ 248.894667][ T1043] block nbd3: Request send failed, requeueing [ 248.900891][ T4267] block nbd3: Receive control failed (result -32) [ 248.900951][ T1043] block nbd3: Dead connection, failed to find a fallback [ 248.914855][ T1043] block nbd3: shutting down sockets [ 248.921203][ T4244] ldm_validate_partition_table(): Disk read failed. [ 248.942685][ T4244] Dev nbd3: unable to read RDB block 0 [ 248.956590][ T4244] nbd3: unable to read partition table [ 248.989943][ T4244] nbd3: partition table beyond EOD, truncated [ 249.005205][ T4244] ldm_validate_partition_table(): Disk read failed. [ 249.020178][ T4244] Dev nbd3: unable to read RDB block 0 [ 249.034674][ T4244] nbd3: unable to read partition table [ 249.050009][ T4244] nbd3: partition table beyond EOD, truncated [ 250.729962][ T4243] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.920056][ T4243] usb 2-1: Using ep0 maxpacket: 8 [ 250.956549][ T4243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.999499][ T4243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.027343][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.060210][ T4243] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.069456][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.102095][ T4243] hub 2-1:1.0: bad descriptor, ignoring hub [ 251.109394][ T4243] hub: probe of 2-1:1.0 failed with error -5 [ 251.118399][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 251.247511][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 251.255365][ T4243] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 251.336428][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 251.348635][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 251.360199][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.883'. [ 252.006135][ T4243] usb 2-1: USB disconnect, device number 13 [ 255.638248][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.644703][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.151394][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 256.167557][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'. [ 256.180584][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 258.066326][ T7030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.076117][ T7030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.131327][ T7030] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 258.145275][ T7030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.156110][ T7030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.164519][ T7030] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 258.455236][ T4301] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.486839][ T7045] device syzkaller0 entered promiscuous mode [ 258.643214][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 258.651065][ T4301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.667786][ T4301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.677280][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.711154][ T4301] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.724281][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.768978][ T4301] hub 5-1:1.0: bad descriptor, ignoring hub [ 258.779366][ T4301] hub: probe of 5-1:1.0 failed with error -5 [ 258.786878][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 258.795370][ T4301] cdc_wdm 5-1:1.0: skipping garbage [ 258.806756][ T4301] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 259.080222][ T4301] usb 5-1: USB disconnect, device number 9 [ 259.090094][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.686731][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'. [ 259.729017][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.909'. [ 260.210168][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.554535][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 261.169985][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 261.985357][ T7065] netlink: 44 bytes leftover after parsing attributes in process `syz.4.910'. [ 261.995866][ T7074] ------------[ cut here ]------------ [ 262.001660][ T7074] WARNING: CPU: 1 PID: 7074 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190 [ 262.011895][ T7074] Modules linked in: [ 262.015813][ T7074] CPU: 1 PID: 7074 Comm: syz.1.912 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 262.027066][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 262.037180][ T7074] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 262.043327][ T7074] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 c8 22 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 98 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 262.063039][ T7074] RSP: 0018:ffffc9000591edc0 EFLAGS: 00010287 [ 262.069135][ T7074] RAX: ffffffff88db03b2 RBX: 0000000000000000 RCX: 0000000000080000 [ 262.077182][ T7074] RDX: ffffc9000cc12000 RSI: 0000000000001d94 RDI: 0000000000001d95 [ 262.085212][ T7074] RBP: ffff88802880e2d4 R08: ffffffff88db035f R09: fffffbfff2249c7c [ 262.093239][ T7074] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 262.101267][ T7074] R13: 1812845b747a6602 R14: dffffc0000000000 R15: 0000000000000000 [ 262.109262][ T7074] FS: 00007ffa519ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 262.118350][ T7074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.124995][ T7074] CR2: 00007f06f310a990 CR3: 00000000316ce000 CR4: 00000000003506e0 [ 262.133038][ T7074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.141073][ T7074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.149073][ T7074] Call Trace: [ 262.152417][ T7074] [ 262.155364][ T7074] ? __warn+0x15a/0x520 [ 262.159540][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.165088][ T7074] ? report_bug+0x2af/0x500 [ 262.169608][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.175149][ T7074] ? handle_bug+0x3d/0x70 [ 262.179503][ T7074] ? exc_invalid_op+0x16/0x40 [ 262.184235][ T7074] ? asm_exc_invalid_op+0x16/0x20 [ 262.189307][ T7074] ? taprio_get_start_time+0x10f/0x190 [ 262.194850][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.200384][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.206155][ T7074] taprio_change+0x4319/0x5600 [ 262.211000][ T7074] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 262.216944][ T7074] ? taprio_destroy+0x4a0/0x4a0 [ 262.221902][ T7074] ? lockdep_init_map_type+0x9d/0x900 [ 262.227324][ T7074] ? rtnetlink_rcv_msg+0x818/0xff0 [ 262.232518][ T7074] ? netlink_rcv_skb+0x1cd/0x410 [ 262.237490][ T7074] ? netlink_unicast+0x7d8/0x970 [ 262.242506][ T7074] ? netlink_sendmsg+0xa26/0xd60 [ 262.247472][ T7074] ? ____sys_sendmsg+0x5a5/0x8f0 [ 262.252493][ T7074] ? __sys_sendmsg+0x2a9/0x390 [ 262.257313][ T7074] ? memset+0x1f/0x40 [ 262.261367][ T7074] ? fifo_init+0x41e/0x760 [ 262.265812][ T7074] ? qdisc_peek_head+0x40/0x40 [ 262.270694][ T7074] ? taprio_peek+0x590/0x590 [ 262.275307][ T7074] qdisc_create+0x8a1/0x1220 [ 262.279976][ T7074] ? qdisc_notify+0x390/0x390 [ 262.284685][ T7074] ? lockdep_rtnl_is_held+0x22/0x30 [ 262.289988][ T7074] tc_modify_qdisc+0xa0a/0x1d70 [ 262.294888][ T7074] ? qdisc_offload_query_caps+0x170/0x170 [ 262.300710][ T7074] ? qdisc_offload_query_caps+0x170/0x170 [ 262.306450][ T7074] rtnetlink_rcv_msg+0x818/0xff0 [ 262.311472][ T7074] ? rtnetlink_bind+0x80/0x80 [ 262.316175][ T7074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 262.322237][ T7074] ? print_irqtrace_events+0x210/0x210 [ 262.327710][ T7074] ? do_raw_spin_unlock+0x137/0x8a0 [ 262.333006][ T7074] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 262.338923][ T7074] ? lockdep_hardirqs_on+0x94/0x130 [ 262.344202][ T7074] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 262.350160][ T7074] ? _raw_spin_unlock+0x40/0x40 [ 262.355034][ T7074] ? __dev_queue_xmit+0x173c/0x3d50 [ 262.360308][ T7074] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 262.366930][ T7074] ? __dev_queue_xmit+0x2d6/0x3d50 [ 262.372140][ T7074] ? rcu_read_unlock_special+0x540/0x540 [ 262.377795][ T7074] ? refcount_inc+0x80/0x80 [ 262.382381][ T7074] ? __copy_skb_header+0x47b/0x600 [ 262.387523][ T7074] netlink_rcv_skb+0x1cd/0x410 [ 262.392389][ T7074] ? rtnetlink_bind+0x80/0x80 [ 262.397541][ T7074] ? netlink_ack+0x1290/0x1290 [ 262.402472][ T7074] ? __netlink_deliver_tap+0x73e/0x770 [ 262.407970][ T7074] ? __rcu_read_unlock+0x92/0x100 [ 262.413048][ T7074] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.418266][ T7074] netlink_unicast+0x7d8/0x970 [ 262.423106][ T7074] ? netlink_detachskb+0x90/0x90 [ 262.428055][ T7074] ? __virt_addr_valid+0x45b/0x530 [ 262.433252][ T7074] ? __phys_addr_symbol+0x2b/0x70 [ 262.438287][ T7074] ? __check_object_size+0x4dd/0xa30 [ 262.443615][ T7074] ? bpf_lsm_netlink_send+0x5/0x10 [ 262.448739][ T7074] netlink_sendmsg+0xa26/0xd60 [ 262.453646][ T7074] ? netlink_getsockopt+0x580/0x580 [ 262.458885][ T7074] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 262.465346][ T7074] ? security_socket_sendmsg+0x42/0xa0 [ 262.470860][ T7074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.476156][ T7074] ? security_socket_sendmsg+0x7d/0xa0 [ 262.481667][ T7074] ? netlink_getsockopt+0x580/0x580 [ 262.486879][ T7074] ____sys_sendmsg+0x5a5/0x8f0 [ 262.491707][ T7074] ? __sys_sendmsg_sock+0x30/0x30 [ 262.496765][ T7074] __sys_sendmsg+0x2a9/0x390 [ 262.501456][ T7074] ? ____sys_sendmsg+0x8f0/0x8f0 [ 262.506457][ T7074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 262.512532][ T7074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 262.518538][ T7074] ? lockdep_hardirqs_on+0x94/0x130 [ 262.523780][ T7074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 262.529770][ T7074] do_syscall_64+0x3b/0xb0 [ 262.534244][ T7074] ? clear_bhb_loop+0x45/0xa0 [ 262.538933][ T7074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.544867][ T7074] RIP: 0033:0x7ffa50b85d29 [ 262.549298][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.568954][ T7074] RSP: 002b:00007ffa519ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.577414][ T7074] RAX: ffffffffffffffda RBX: 00007ffa50d75fa0 RCX: 00007ffa50b85d29 [ 262.585421][ T7074] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 262.593547][ T7074] RBP: 00007ffa50c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 262.601566][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.609545][ T7074] R13: 0000000000000000 R14: 00007ffa50d75fa0 R15: 00007ffdea648fb8 [ 262.617573][ T7074] [ 262.620641][ T7074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.627928][ T7074] CPU: 1 PID: 7074 Comm: syz.1.912 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 262.639112][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 262.649161][ T7074] Call Trace: [ 262.652430][ T7074] [ 262.655351][ T7074] dump_stack_lvl+0x1e3/0x2cb [ 262.660035][ T7074] ? nf_tcp_handle_invalid+0x642/0x642 [ 262.665491][ T7074] ? panic+0x764/0x764 [ 262.669552][ T7074] ? 0xffffffffa0001fa0 [ 262.673700][ T7074] ? vscnprintf+0x59/0x80 [ 262.678024][ T7074] panic+0x318/0x764 [ 262.681918][ T7074] ? __warn+0x169/0x520 [ 262.686070][ T7074] ? memcpy_page_flushcache+0xfc/0xfc [ 262.691445][ T7074] __warn+0x348/0x520 [ 262.695419][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.700875][ T7074] report_bug+0x2af/0x500 [ 262.705191][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.710644][ T7074] handle_bug+0x3d/0x70 [ 262.714797][ T7074] exc_invalid_op+0x16/0x40 [ 262.719383][ T7074] asm_exc_invalid_op+0x16/0x20 [ 262.724230][ T7074] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 262.730294][ T7074] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 c8 22 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 98 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 262.749891][ T7074] RSP: 0018:ffffc9000591edc0 EFLAGS: 00010287 [ 262.755950][ T7074] RAX: ffffffff88db03b2 RBX: 0000000000000000 RCX: 0000000000080000 [ 262.763920][ T7074] RDX: ffffc9000cc12000 RSI: 0000000000001d94 RDI: 0000000000001d95 [ 262.771880][ T7074] RBP: ffff88802880e2d4 R08: ffffffff88db035f R09: fffffbfff2249c7c [ 262.779842][ T7074] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 262.787833][ T7074] R13: 1812845b747a6602 R14: dffffc0000000000 R15: 0000000000000000 [ 262.795807][ T7074] ? taprio_get_start_time+0x10f/0x190 [ 262.801263][ T7074] ? taprio_get_start_time+0x162/0x190 [ 262.806726][ T7074] taprio_change+0x4319/0x5600 [ 262.811481][ T7074] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 262.817386][ T7074] ? taprio_destroy+0x4a0/0x4a0 [ 262.822225][ T7074] ? lockdep_init_map_type+0x9d/0x900 [ 262.827595][ T7074] ? rtnetlink_rcv_msg+0x818/0xff0 [ 262.832701][ T7074] ? netlink_rcv_skb+0x1cd/0x410 [ 262.837632][ T7074] ? netlink_unicast+0x7d8/0x970 [ 262.842558][ T7074] ? netlink_sendmsg+0xa26/0xd60 [ 262.847487][ T7074] ? ____sys_sendmsg+0x5a5/0x8f0 [ 262.852416][ T7074] ? __sys_sendmsg+0x2a9/0x390 [ 262.857172][ T7074] ? memset+0x1f/0x40 [ 262.861146][ T7074] ? fifo_init+0x41e/0x760 [ 262.865552][ T7074] ? qdisc_peek_head+0x40/0x40 [ 262.870327][ T7074] ? taprio_peek+0x590/0x590 [ 262.874904][ T7074] qdisc_create+0x8a1/0x1220 [ 262.879492][ T7074] ? qdisc_notify+0x390/0x390 [ 262.884166][ T7074] ? lockdep_rtnl_is_held+0x22/0x30 [ 262.889362][ T7074] tc_modify_qdisc+0xa0a/0x1d70 [ 262.894219][ T7074] ? qdisc_offload_query_caps+0x170/0x170 [ 262.899950][ T7074] ? qdisc_offload_query_caps+0x170/0x170 [ 262.905663][ T7074] rtnetlink_rcv_msg+0x818/0xff0 [ 262.910619][ T7074] ? rtnetlink_bind+0x80/0x80 [ 262.915321][ T7074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 262.921316][ T7074] ? print_irqtrace_events+0x210/0x210 [ 262.926773][ T7074] ? do_raw_spin_unlock+0x137/0x8a0 [ 262.931965][ T7074] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 262.937865][ T7074] ? lockdep_hardirqs_on+0x94/0x130 [ 262.943063][ T7074] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 262.948962][ T7074] ? _raw_spin_unlock+0x40/0x40 [ 262.953808][ T7074] ? __dev_queue_xmit+0x173c/0x3d50 [ 262.959008][ T7074] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 262.965590][ T7074] ? __dev_queue_xmit+0x2d6/0x3d50 [ 262.970700][ T7074] ? rcu_read_unlock_special+0x540/0x540 [ 262.976344][ T7074] ? refcount_inc+0x80/0x80 [ 262.980852][ T7074] ? __copy_skb_header+0x47b/0x600 [ 262.985978][ T7074] netlink_rcv_skb+0x1cd/0x410 [ 262.990748][ T7074] ? rtnetlink_bind+0x80/0x80 [ 262.995425][ T7074] ? netlink_ack+0x1290/0x1290 [ 263.000184][ T7074] ? __netlink_deliver_tap+0x73e/0x770 [ 263.005643][ T7074] ? __rcu_read_unlock+0x92/0x100 [ 263.010658][ T7074] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.015852][ T7074] netlink_unicast+0x7d8/0x970 [ 263.020614][ T7074] ? netlink_detachskb+0x90/0x90 [ 263.025542][ T7074] ? __virt_addr_valid+0x45b/0x530 [ 263.030646][ T7074] ? __phys_addr_symbol+0x2b/0x70 [ 263.035662][ T7074] ? __check_object_size+0x4dd/0xa30 [ 263.040942][ T7074] ? bpf_lsm_netlink_send+0x5/0x10 [ 263.046047][ T7074] netlink_sendmsg+0xa26/0xd60 [ 263.050812][ T7074] ? netlink_getsockopt+0x580/0x580 [ 263.056004][ T7074] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 263.062414][ T7074] ? security_socket_sendmsg+0x42/0xa0 [ 263.067866][ T7074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 263.073142][ T7074] ? security_socket_sendmsg+0x7d/0xa0 [ 263.078592][ T7074] ? netlink_getsockopt+0x580/0x580 [ 263.083788][ T7074] ____sys_sendmsg+0x5a5/0x8f0 [ 263.088558][ T7074] ? __sys_sendmsg_sock+0x30/0x30 [ 263.093588][ T7074] __sys_sendmsg+0x2a9/0x390 [ 263.098175][ T7074] ? ____sys_sendmsg+0x8f0/0x8f0 [ 263.103129][ T7074] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 263.109112][ T7074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 263.115083][ T7074] ? lockdep_hardirqs_on+0x94/0x130 [ 263.120273][ T7074] ? syscall_enter_from_user_mode+0x2e/0x230 [ 263.126246][ T7074] do_syscall_64+0x3b/0xb0 [ 263.130657][ T7074] ? clear_bhb_loop+0x45/0xa0 [ 263.135324][ T7074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.141213][ T7074] RIP: 0033:0x7ffa50b85d29 [ 263.145619][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.165231][ T7074] RSP: 002b:00007ffa519ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.173651][ T7074] RAX: ffffffffffffffda RBX: 00007ffa50d75fa0 RCX: 00007ffa50b85d29 [ 263.181627][ T7074] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 263.189591][ T7074] RBP: 00007ffa50c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 263.197553][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.205513][ T7074] R13: 0000000000000000 R14: 00007ffa50d75fa0 R15: 00007ffdea648fb8 [ 263.213487][ T7074] [ 263.216744][ T7074] Kernel Offset: disabled [ 263.221131][ T7074] Rebooting in 86400 seconds..