last executing test programs: 8.782326195s ago: executing program 2 (id=628): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$kcm(0x10, 0x2, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40000007}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000010}, 0x4004000) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) 8.599824554s ago: executing program 4 (id=630): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) getpid() prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0x28, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.59927007s ago: executing program 2 (id=631): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f000070a000/0x3000)=nil, 0x3000, 0x3000000, 0x11012, r0, 0x1000) 6.243870237s ago: executing program 2 (id=636): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c00000000000000000000000800"], 0x50}}], 0x1, 0x400c6) 6.243398761s ago: executing program 3 (id=637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x328, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x314, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x150, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x124, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xd8, 0xd, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffffd, 0x4, 0x9, 0x4}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x3d5, 0x1, 0x101, 0x3ff}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd06a, 0x3, 0x5, 0x0, 0x986}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x1d, 0x6, "8c7537c88dc5f9f594de6d41eb6b1259fbc1655d0043e27dfc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.234913856s ago: executing program 4 (id=638): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x67}, @in6={0xa, 0x4e24, 0x9, @empty, 0x401}, @in6={0xa, 0x4e21, 0x2, @private1, 0xbace}, @in6={0xa, 0x4e21, 0x7681, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, @in={0x2, 0x4e23, @loopback}], 0xa0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000080)={0x0, 0x0, 0x2c, 0xc, ""/12}, &(0x7f0000001280)=0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c001980080002000c080000180002"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) 5.983796354s ago: executing program 2 (id=641): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) 5.967095387s ago: executing program 3 (id=642): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$kcm(0x10, 0x2, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40000007}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000010}, 0x4004000) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) 5.517909137s ago: executing program 3 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) 5.284160716s ago: executing program 2 (id=646): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000001c0)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x3a}, 0x28) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsuid(r2) 5.262034014s ago: executing program 4 (id=647): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f000070a000/0x3000)=nil, 0x3000, 0x3000000, 0x11012, r0, 0x1000) 4.493755063s ago: executing program 3 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0x6, 0x4, 0x8000, 0xc7da, 0x9}, {0x40000000, 0x8, 0x4772, 0x8, 0x4}, {0x0, 0xa, 0x3ff, 0xc0000000, 0x5}, {0x80000000, 0x6, 0x3, 0x9, 0x3}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) 3.288018848s ago: executing program 2 (id=651): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 3.003991621s ago: executing program 1 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x1c, 0x52, 0x921, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}}, 0x0) 3.003231533s ago: executing program 3 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08001e00002c00000000002f9078ac1e0001e00000"], 0x3e) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x20}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) socketpair(0x18, 0x0, 0x2, 0x0) 1.731923619s ago: executing program 0 (id=656): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) 1.402174948s ago: executing program 1 (id=657): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x67}, @in6={0xa, 0x4e24, 0x9, @empty, 0x401}, @in6={0xa, 0x4e21, 0x2, @private1, 0xbace}, @in6={0xa, 0x4e21, 0x7681, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, @in={0x2, 0x4e23, @loopback}], 0xa0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000080)={0x0, 0x0, 0x2c, 0xc, ""/12}, &(0x7f0000001280)=0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c001980080002000c080000180002"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) 1.188443199s ago: executing program 1 (id=658): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) 1.119925695s ago: executing program 0 (id=659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f0000000580)=[0x0, 0x0], 0x2, 0x180000, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @in=@loopback, 0x4e21, 0x100, 0x4e22, 0x7ff, 0xa, 0x80, 0x20, 0x8}, {0x8000000000000000, 0x4, 0x29, 0x1000, 0x4, 0xea1, 0xffff, 0x5}, {0x3, 0x9, 0xad, 0x50}, 0x4, 0x6e6bb3, 0x1, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x2b}, 0xa, @in=@empty, 0x3506, 0x0, 0x1, 0x40, 0x4, 0x80000001, 0x73c}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, &(0x7f0000000480), 0x0, 0x0) 1.013586516s ago: executing program 1 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 793.455086ms ago: executing program 1 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_adjtime(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000, 0x0, 0x2003], [0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x200, 0x0, 0x0, 0x1ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20, 0x9, 0x0, 0x2000000], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x40, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x12d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) socket$nl_sock_diag(0x10, 0x3, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 733.529426ms ago: executing program 0 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r2, r4, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, &(0x7f0000000480), 0x0, 0x0) 664.198722ms ago: executing program 4 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0xfffffffffffffffd, {0x0, 0x0, 0x3}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 615.873897ms ago: executing program 1 (id=664): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) 554.333174ms ago: executing program 4 (id=665): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 291.913811ms ago: executing program 0 (id=666): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) 183.518634ms ago: executing program 0 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 182.517761ms ago: executing program 4 (id=668): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="796e00000000001346991fc525"], 0x14}}, 0x4000054) 102.927438ms ago: executing program 3 (id=669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r6, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006272696467650000"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 69.362659][ T5834] cgroup: Unknown subsys name 'net' [ 69.551223][ T5834] cgroup: Unknown subsys name 'cpuset' [ 69.560408][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.002369][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.482305][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491902][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.484006][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.493425][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.501355][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.511259][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.525746][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.534005][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.577835][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.595719][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.605944][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.618171][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.634268][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.642822][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.651656][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.660510][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.664310][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.680889][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.688978][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.698057][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.706852][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.719010][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.727986][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.735206][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.755584][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.777088][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.792034][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.376022][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 74.390104][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 74.474275][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 74.529644][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 74.719776][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.726883][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.734640][ T5848] bridge_slave_0: entered allmulticast mode [ 74.741941][ T5848] bridge_slave_0: entered promiscuous mode [ 74.771580][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.778821][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.786595][ T5853] bridge_slave_0: entered allmulticast mode [ 74.793972][ T5853] bridge_slave_0: entered promiscuous mode [ 74.803163][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.810399][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.817622][ T5853] bridge_slave_1: entered allmulticast mode [ 74.824590][ T5853] bridge_slave_1: entered promiscuous mode [ 74.842981][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.850440][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.857924][ T5848] bridge_slave_1: entered allmulticast mode [ 74.865023][ T5848] bridge_slave_1: entered promiscuous mode [ 74.895580][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 74.944676][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.952156][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.959958][ T5855] bridge_slave_0: entered allmulticast mode [ 74.966985][ T5855] bridge_slave_0: entered promiscuous mode [ 74.992643][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.000019][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.007199][ T5844] bridge_slave_0: entered allmulticast mode [ 75.014594][ T5844] bridge_slave_0: entered promiscuous mode [ 75.025076][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.038017][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.058469][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.065765][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.073491][ T5855] bridge_slave_1: entered allmulticast mode [ 75.081045][ T5855] bridge_slave_1: entered promiscuous mode [ 75.110714][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.118042][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.125305][ T5844] bridge_slave_1: entered allmulticast mode [ 75.133684][ T5844] bridge_slave_1: entered promiscuous mode [ 75.157025][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.170290][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.262905][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.294023][ T5848] team0: Port device team_slave_0 added [ 75.308270][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.320349][ T5853] team0: Port device team_slave_0 added [ 75.329106][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.350649][ T5848] team0: Port device team_slave_1 added [ 75.359561][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.385041][ T5853] team0: Port device team_slave_1 added [ 75.488931][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.496105][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.503848][ T5858] bridge_slave_0: entered allmulticast mode [ 75.511281][ T5858] bridge_slave_0: entered promiscuous mode [ 75.530731][ T5844] team0: Port device team_slave_0 added [ 75.537589][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.544555][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.574495][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.588298][ T5855] team0: Port device team_slave_0 added [ 75.594507][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.602165][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.610110][ T5858] bridge_slave_1: entered allmulticast mode [ 75.617223][ T5858] bridge_slave_1: entered promiscuous mode [ 75.624580][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.632105][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.638901][ T50] Bluetooth: hci0: command tx timeout [ 75.658631][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.660997][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.681775][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.708234][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.717968][ T5850] Bluetooth: hci1: command tx timeout [ 75.721381][ T5844] team0: Port device team_slave_1 added [ 75.724605][ T50] Bluetooth: hci2: command tx timeout [ 75.744121][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.751212][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.778338][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.792452][ T5855] team0: Port device team_slave_1 added [ 75.798313][ T50] Bluetooth: hci3: command tx timeout [ 75.875734][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.882902][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.910655][ T50] Bluetooth: hci4: command tx timeout [ 75.913598][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.929446][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.936412][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.962596][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.988708][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.023146][ T5848] hsr_slave_0: entered promiscuous mode [ 76.029943][ T5848] hsr_slave_1: entered promiscuous mode [ 76.049791][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.056864][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.083436][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.096097][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.103457][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.130180][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.144966][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.219313][ T5858] team0: Port device team_slave_0 added [ 76.243529][ T5853] hsr_slave_0: entered promiscuous mode [ 76.250314][ T5853] hsr_slave_1: entered promiscuous mode [ 76.256740][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 76.263060][ T5853] Cannot create hsr debugfs directory [ 76.294300][ T5858] team0: Port device team_slave_1 added [ 76.337229][ T5844] hsr_slave_0: entered promiscuous mode [ 76.343760][ T5844] hsr_slave_1: entered promiscuous mode [ 76.350365][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 76.356100][ T5844] Cannot create hsr debugfs directory [ 76.387865][ T5855] hsr_slave_0: entered promiscuous mode [ 76.394193][ T5855] hsr_slave_1: entered promiscuous mode [ 76.401017][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 76.406758][ T5855] Cannot create hsr debugfs directory [ 76.463409][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.470509][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.497033][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.546814][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.553910][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.580421][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.788028][ T5858] hsr_slave_0: entered promiscuous mode [ 76.795012][ T5858] hsr_slave_1: entered promiscuous mode [ 76.802672][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 76.808684][ T5858] Cannot create hsr debugfs directory [ 77.080262][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.110687][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.122456][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.160389][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.237409][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.257203][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.268797][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.281188][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.358715][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.371638][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.384555][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.395742][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.506959][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.520042][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.542381][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.553952][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.703442][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.715256][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.722954][ T50] Bluetooth: hci0: command tx timeout [ 77.734040][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.744146][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.798173][ T50] Bluetooth: hci2: command tx timeout [ 77.798513][ T5850] Bluetooth: hci1: command tx timeout [ 77.816540][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.863274][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.878667][ T5850] Bluetooth: hci3: command tx timeout [ 77.927449][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.942343][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.958045][ T5850] Bluetooth: hci4: command tx timeout [ 77.969600][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.976897][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.990942][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.013001][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.020194][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.034787][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.053287][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.060468][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.086197][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.100361][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.107473][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.150027][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.170408][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.177562][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192249][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.214474][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.225864][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.233573][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.263248][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.270483][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.319426][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.326659][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.341511][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.348687][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.391293][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.398514][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.850301][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.981998][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.100059][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.185509][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.242185][ T5848] veth0_vlan: entered promiscuous mode [ 79.326277][ T5848] veth1_vlan: entered promiscuous mode [ 79.383951][ T5844] veth0_vlan: entered promiscuous mode [ 79.393909][ T5858] veth0_vlan: entered promiscuous mode [ 79.421807][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.442264][ T5844] veth1_vlan: entered promiscuous mode [ 79.455878][ T5858] veth1_vlan: entered promiscuous mode [ 79.525478][ T5848] veth0_macvtap: entered promiscuous mode [ 79.551689][ T5848] veth1_macvtap: entered promiscuous mode [ 79.579331][ T5853] veth0_vlan: entered promiscuous mode [ 79.591325][ T5855] veth0_vlan: entered promiscuous mode [ 79.619768][ T5853] veth1_vlan: entered promiscuous mode [ 79.633330][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.645392][ T5855] veth1_vlan: entered promiscuous mode [ 79.655367][ T5858] veth0_macvtap: entered promiscuous mode [ 79.676340][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.685213][ T5844] veth0_macvtap: entered promiscuous mode [ 79.696218][ T5858] veth1_macvtap: entered promiscuous mode [ 79.717402][ T1334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.732164][ T5844] veth1_macvtap: entered promiscuous mode [ 79.752184][ T1334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761360][ T1334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.787454][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.799055][ T5850] Bluetooth: hci0: command tx timeout [ 79.811918][ T1334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.831399][ T5853] veth0_macvtap: entered promiscuous mode [ 79.841558][ T5853] veth1_macvtap: entered promiscuous mode [ 79.856537][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.875262][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.878017][ T5850] Bluetooth: hci2: command tx timeout [ 79.887148][ T50] Bluetooth: hci1: command tx timeout [ 79.893386][ T5855] veth0_macvtap: entered promiscuous mode [ 79.904873][ T5855] veth1_macvtap: entered promiscuous mode [ 79.914785][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.948552][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.962053][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.974508][ T50] Bluetooth: hci3: command tx timeout [ 79.979113][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.007748][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.019016][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.027948][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.039786][ T50] Bluetooth: hci4: command tx timeout [ 80.057181][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.072978][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.082329][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.092326][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.111940][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.127644][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.185414][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.194445][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223644][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.233337][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243525][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279783][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289525][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.301570][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.311632][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.341472][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.381296][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.402524][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.433173][ T4190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.442950][ T4190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.493691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.509177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.546568][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.597441][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.629066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.644126][ T4190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.687872][ T4190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.726134][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.734814][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.923594][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.923633][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.958293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.962045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.982127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.983728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.289388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.327913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.428185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.472612][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.497891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.511368][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.522260][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.537997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.573504][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.878884][ T50] Bluetooth: hci0: command tx timeout [ 82.007897][ T50] Bluetooth: hci1: command tx timeout [ 82.013447][ T50] Bluetooth: hci2: command tx timeout [ 82.048257][ T50] Bluetooth: hci3: command tx timeout [ 82.118194][ T50] Bluetooth: hci4: command tx timeout [ 82.157407][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.312849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.808907][ T6006] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9'. [ 84.811642][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.252929][ T6002] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 85.253013][ T6002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.417077][ T6002] : renamed from bond0 (while UP) [ 87.552182][ T5913] IPVS: starting estimator thread 0... [ 87.566803][ T9] cfg80211: failed to load regulatory.db [ 87.668127][ T6012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.687711][ T6024] IPVS: using max 25 ests per chain, 60000 per kthread [ 87.807452][ T6012] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 89.042090][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.067946][ T6012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.079180][ T6012] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 89.794982][ T6012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.826023][ T6012] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 89.950956][ T6012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.959075][ T6012] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 90.150361][ T6012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.158661][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 90.167777][ T6012] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 90.938020][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.401527][ T9] IPVS: starting estimator thread 0... [ 91.587772][ T6081] IPVS: using max 26 ests per chain, 62400 per kthread [ 91.606793][ T5913] usb 1-1: device descriptor read/64, error -71 [ 91.867830][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.941214][ T5913] usb 1-1: device descriptor read/64, error -71 [ 93.645000][ T5913] usb usb1-port1: attempt power cycle [ 94.347588][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.408252][ T5913] usb 1-1: device descriptor read/8, error -71 [ 94.691548][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.752850][ T5913] usb 1-1: device descriptor read/8, error -71 [ 94.807477][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'. [ 95.574779][ T5913] usb usb1-port1: unable to enumerate USB device [ 96.137774][ T5957] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.838471][ T6151] loop6: detected capacity change from 0 to 7 [ 101.314922][ T6151] Dev loop6: unable to read RDB block 7 [ 101.321605][ T6151] loop6: AHDI p1 p2 p3 [ 101.325972][ T6151] loop6: partition table partially beyond EOD, truncated [ 101.333702][ T6151] loop6: p1 start 1601398130 is beyond EOD, truncated [ 101.340670][ T6151] loop6: p2 start 1702059890 is beyond EOD, truncated [ 102.295594][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.359651][ T6162] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.441869][ T5957] usb 1-1: device descriptor read/64, error -110 [ 102.729201][ T5957] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.867709][ T5957] usb 1-1: device descriptor read/64, error -32 [ 103.001165][ T5957] usb usb1-port1: attempt power cycle [ 103.008101][ T5955] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.409639][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 103.412267][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 103.430391][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 103.430547][ T5957] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.599908][ T5955] usb 3-1: config 0 has no interfaces? [ 103.626249][ T5955] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.691234][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.737561][ T5955] usb 3-1: Product: syz [ 103.741762][ T5955] usb 3-1: SerialNumber: syz [ 103.794557][ T5955] usb 3-1: config 0 descriptor?? [ 103.939380][ T5957] usb 1-1: device not accepting address 8, error -71 [ 106.559335][ T5955] usb 3-1: USB disconnect, device number 2 [ 107.637472][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'. [ 108.244950][ T6242] input: syz0 as /devices/virtual/input/input5 [ 112.105588][ T6247] netlink: 116 bytes leftover after parsing attributes in process `syz.4.65'. [ 114.229070][ T30] audit: type=1326 audit(1752635415.492:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 114.825721][ T30] audit: type=1326 audit(1752635415.492:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 114.864352][ T30] audit: type=1326 audit(1752635415.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 115.653007][ T30] audit: type=1326 audit(1752635415.492:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 115.929518][ T30] audit: type=1326 audit(1752635415.492:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 116.042004][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 116.523871][ T30] audit: type=1326 audit(1752635415.492:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabf8f8d58a code=0x7ffc0000 [ 116.562895][ T30] audit: type=1326 audit(1752635415.502:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fabf8fc11e5 code=0x7ffc0000 [ 116.686873][ T30] audit: type=1326 audit(1752635415.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 116.710902][ T30] audit: type=1326 audit(1752635415.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 116.767671][ T30] audit: type=1326 audit(1752635415.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 116.993078][ T6325] loop0: detected capacity change from 0 to 1024 [ 117.000121][ T6325] ======================================================= [ 117.000121][ T6325] WARNING: The mand mount option has been deprecated and [ 117.000121][ T6325] and is ignored by this kernel. Remove the mand [ 117.000121][ T6325] option from the mount to silence this warning. [ 117.000121][ T6325] ======================================================= [ 118.145267][ T6325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.194047][ T6325] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.267332][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.86'. [ 118.301801][ T6325] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 13) [ 118.960235][ T6325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 119.174635][ T6325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.174635][ T6325] [ 119.353366][ T6322] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.432606][ T6322] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.471347][ T6349] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.524646][ T6322] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.584911][ T6349] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.633277][ T6322] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.675088][ T6349] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.719886][ T6322] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.855158][ T6349] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.82: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.981736][ T6368] tipc: Started in network mode [ 119.986822][ T6368] tipc: Node identity 0691001b626f, cluster identity 4711 [ 120.062169][ T6368] tipc: Enabled bearer , priority 0 [ 120.504423][ T6372] syzkaller0: entered promiscuous mode [ 120.510762][ T6372] syzkaller0: entered allmulticast mode [ 120.620849][ T6372] tipc: Resetting bearer [ 120.711964][ T6367] tipc: Resetting bearer [ 120.866344][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.905395][ T6367] tipc: Disabling bearer [ 120.976601][ T6383] syz.1.96 uses obsolete (PF_INET,SOCK_PACKET) [ 123.025095][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 123.025114][ T30] audit: type=1800 audit(1752635424.272:20): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.100" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 124.809182][ T6430] netlink: 'syz.4.108': attribute type 2 has an invalid length. [ 124.854380][ T6430] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 124.953817][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 126.649262][ T6466] fuse: Bad value for 'fd' [ 126.990801][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 127.042853][ T6475] loop2: detected capacity change from 0 to 1024 [ 127.182324][ T6475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.206940][ T6475] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.385047][ T6475] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 13) [ 127.409276][ T6475] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 127.425879][ T6475] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.425879][ T6475] [ 127.572108][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.579981][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.608329][ T6491] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 127.791037][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.807247][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.823642][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.838472][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.853816][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.868036][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 127.890265][ T6472] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.913245][ T54] usb 4-1: config 0 has no interfaces? [ 127.922648][ T54] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.932258][ T54] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.941528][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.955871][ T54] usb 4-1: Product: syz [ 127.961975][ T54] usb 4-1: SerialNumber: syz [ 127.968406][ T6472] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.120: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.986237][ T54] usb 4-1: config 0 descriptor?? [ 128.751438][ T5913] usb 4-1: USB disconnect, device number 2 [ 129.023831][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.798291][ T6509] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 130.188235][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 132.252235][ T6535] capability: warning: `syz.4.136' uses deprecated v2 capabilities in a way that may be insecure [ 132.820537][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.943055][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949526][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.293235][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'. [ 134.688683][ T6556] Zero length message leads to an empty skb [ 135.029776][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 137.217839][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 137.781244][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.155'. [ 141.172303][ T6636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.762711][ T30] audit: type=1326 audit(1752635446.032:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 145.233415][ T30] audit: type=1326 audit(1752635446.032:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 145.388995][ T30] audit: type=1326 audit(1752635446.032:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 145.444702][ T30] audit: type=1326 audit(1752635446.032:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 145.466868][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.473721][ T30] audit: type=1326 audit(1752635446.032:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 145.495929][ T30] audit: type=1326 audit(1752635446.032:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabf8f8d58a code=0x7ffc0000 [ 145.517849][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.959259][ T30] audit: type=1326 audit(1752635446.032:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fabf8fc11e5 code=0x7ffc0000 [ 146.001708][ T30] audit: type=1326 audit(1752635446.232:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 146.082670][ T30] audit: type=1326 audit(1752635446.252:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 146.218920][ T30] audit: type=1326 audit(1752635446.262:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fabf8f8e929 code=0x7ffc0000 [ 146.581168][ T6685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.328256][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.759885][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 153.847141][ T30] audit: type=1326 audit(1752635455.002:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 153.869444][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.429779][ T30] audit: type=1326 audit(1752635455.002:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 154.452145][ T30] audit: type=1326 audit(1752635455.002:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 154.474477][ T30] audit: type=1326 audit(1752635455.002:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 154.496630][ T30] audit: type=1326 audit(1752635455.002:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 154.544119][ T30] audit: type=1326 audit(1752635455.002:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f923578d58a code=0x7ffc0000 [ 154.664842][ T30] audit: type=1326 audit(1752635455.002:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92357c11e5 code=0x7ffc0000 [ 155.085385][ T30] audit: type=1326 audit(1752635455.212:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 155.109192][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.209507][ T30] audit: type=1326 audit(1752635455.212:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 155.243804][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 155.277634][ T30] audit: type=1326 audit(1752635455.222:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f923578e929 code=0x7ffc0000 [ 155.878045][ T6778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.025148][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 163.648862][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 164.527734][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.242'. [ 167.296408][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 168.308324][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'. [ 168.799511][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 169.774328][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 172.414561][ T6942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.037274][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'. [ 174.542321][ T6966] fuse: Bad value for 'fd' [ 175.068401][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.054574][ T6980] delete_channel: no stack [ 179.386706][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 179.708006][ T7005] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 179.734508][ T7005] CIFS mount error: No usable UNC path provided in device string! [ 179.734508][ T7005] [ 179.744958][ T7005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 181.137552][ T5957] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 181.318269][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 181.336467][ T5957] usb 5-1: config 0 has no interfaces? [ 181.346908][ T5957] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.373793][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.382752][ T5957] usb 5-1: Product: syz [ 181.387246][ T5957] usb 5-1: SerialNumber: syz [ 181.419964][ T5957] usb 5-1: config 0 descriptor?? [ 181.749840][ T7020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.334027][ T5913] usb 5-1: USB disconnect, device number 2 [ 184.301520][ T7046] block device autoloading is deprecated and will be removed. [ 184.526178][ T7050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.913751][ T7059] overlayfs: overlapping lowerdir path [ 185.553380][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 187.064937][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.309'. [ 190.466092][ T7133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.393416][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515069][ T7186] loop6: detected capacity change from 0 to 7 [ 194.862381][ T7186] Dev loop6: unable to read RDB block 7 [ 194.868158][ T7186] loop6: AHDI p1 p2 p3 [ 194.872336][ T7186] loop6: partition table partially beyond EOD, truncated [ 194.879712][ T7186] loop6: p1 start 1601398130 is beyond EOD, truncated [ 194.886500][ T7186] loop6: p2 start 1702059890 is beyond EOD, truncated [ 195.118436][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 195.118464][ T30] audit: type=1326 audit(1752635496.392:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f921518e929 code=0x0 [ 196.926541][ T7209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.881509][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 198.830581][ T7241] loop6: detected capacity change from 0 to 7 [ 198.877267][ T7241] Dev loop6: unable to read RDB block 7 [ 198.883258][ T7241] loop6: AHDI p1 p2 p3 [ 198.887573][ T7241] loop6: partition table partially beyond EOD, truncated [ 198.896713][ T7241] loop6: p1 start 1601398130 is beyond EOD, truncated [ 198.903663][ T7241] loop6: p2 start 1702059890 is beyond EOD, truncated [ 201.247310][ T7268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.667516][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 202.301316][ T7284] netlink: 'syz.4.367': attribute type 63 has an invalid length. [ 202.388757][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 203.293667][ T7294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.029406][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'. [ 207.383264][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.208198][ T7345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.001311][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.388'. [ 211.404359][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 212.247528][ T30] audit: type=1326 audit(1752635513.522:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921518e929 code=0x0 [ 212.377772][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 215.249232][ T7413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.749462][ T7426] loop6: detected capacity change from 0 to 7 [ 216.764019][ T7426] Dev loop6: unable to read RDB block 7 [ 216.769803][ T7426] loop6: AHDI p1 p2 p3 [ 216.774209][ T7426] loop6: partition table partially beyond EOD, truncated [ 216.782905][ T7426] loop6: p1 start 1601398130 is beyond EOD, truncated [ 216.789883][ T7426] loop6: p2 start 1702059890 is beyond EOD, truncated [ 217.119874][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 217.563099][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 218.118625][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 218.128105][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 220.905899][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.078723][ T7478] loop6: detected capacity change from 0 to 7 [ 221.198405][ T7478] Dev loop6: unable to read RDB block 7 [ 221.204151][ T7478] loop6: AHDI p1 p2 p3 [ 221.208649][ T7478] loop6: partition table partially beyond EOD, truncated [ 221.217020][ T7478] loop6: p1 start 1601398130 is beyond EOD, truncated [ 221.224042][ T7478] loop6: p2 start 1702059890 is beyond EOD, truncated [ 221.633340][ T5955] IPVS: starting estimator thread 0... [ 221.777689][ T7482] IPVS: using max 52 ests per chain, 124800 per kthread [ 222.821400][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.524778][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.432'. [ 224.022540][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.743171][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.953471][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 229.105792][ T7576] loop6: detected capacity change from 0 to 7 [ 229.117727][ T7576] Dev loop6: unable to read RDB block 7 [ 229.123442][ T7576] loop6: AHDI p1 p2 p3 [ 229.127902][ T7576] loop6: partition table partially beyond EOD, truncated [ 229.136365][ T7576] loop6: p1 start 1601398130 is beyond EOD, truncated [ 229.143291][ T7576] loop6: p2 start 1702059890 is beyond EOD, truncated [ 231.497927][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.996413][ T7621] loop6: detected capacity change from 0 to 7 [ 233.003383][ T7621] Dev loop6: unable to read RDB block 7 [ 233.009035][ T7621] loop6: AHDI p1 p2 p3 [ 233.013198][ T7621] loop6: partition table partially beyond EOD, truncated [ 233.020404][ T7621] loop6: p1 start 1601398130 is beyond EOD, truncated [ 233.027149][ T7621] loop6: p2 start 1702059890 is beyond EOD, truncated [ 233.399077][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 234.416901][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 236.023351][ T7644] mmap: syz.3.477 (7644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 237.475323][ T7669] loop6: detected capacity change from 0 to 7 [ 237.496028][ T7669] Dev loop6: unable to read RDB block 7 [ 237.501660][ T7669] loop6: AHDI p1 p2 p3 [ 237.505848][ T7669] loop6: partition table partially beyond EOD, truncated [ 237.514391][ T7669] loop6: p1 start 1601398130 is beyond EOD, truncated [ 237.521864][ T7669] loop6: p2 start 1702059890 is beyond EOD, truncated [ 237.578315][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 240.897847][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 241.612157][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 243.577733][ T5926] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 244.028454][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 244.037066][ T5926] usb 5-1: config 0 has no interfaces? [ 244.065304][ T5926] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 244.082838][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 244.102195][ T5926] usb 5-1: Product: syz [ 244.106402][ T5926] usb 5-1: SerialNumber: syz [ 244.132700][ T5926] usb 5-1: config 0 descriptor?? [ 245.514426][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 245.947333][ T5957] usb 5-1: USB disconnect, device number 3 [ 248.929795][ T7811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.341464][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.351004][ T7821] loop2: detected capacity change from 0 to 1024 [ 250.402627][ T7821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.415799][ T7821] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.438624][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 13) [ 250.455791][ T7821] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 250.470528][ T7821] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.470528][ T7821] [ 250.543088][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.559468][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.849707][ T7816] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.027584][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 251.084771][ T7816] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.407654][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.453397][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.554671][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.583188][ T7816] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.623459][ T7821] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.531: lblock 3 mapped to illegal pblock 3 (length 1) [ 252.206978][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.741971][ T7860] loop6: detected capacity change from 0 to 7 [ 253.946072][ T7860] Dev loop6: unable to read RDB block 7 [ 253.952202][ T7860] loop6: AHDI p1 p2 p3 [ 253.957153][ T7860] loop6: partition table partially beyond EOD, truncated [ 253.969287][ T7860] loop6: p1 start 1601398130 is beyond EOD, truncated [ 253.976288][ T7860] loop6: p2 start 1702059890 is beyond EOD, truncated [ 254.324469][ T7870] program syz.4.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.619453][ T7888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.875603][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.177812][ T5957] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 256.307135][ T7901] overlayfs: failed to clone upperpath [ 257.476771][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 258.056771][ T5957] usb 4-1: config 0 has no interfaces? [ 258.071147][ T5957] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 258.085506][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 258.385705][ T7912] loop6: detected capacity change from 0 to 7 [ 258.701459][ T7912] Dev loop6: unable to read RDB block 7 [ 258.707091][ T7912] loop6: AHDI p1 p2 p3 [ 258.711378][ T7912] loop6: partition table partially beyond EOD, truncated [ 258.719299][ T7912] loop6: p1 start 1601398130 is beyond EOD, truncated [ 258.726082][ T7912] loop6: p2 start 1702059890 is beyond EOD, truncated [ 258.786827][ T5957] usb 4-1: Product: syz [ 258.791091][ T5957] usb 4-1: SerialNumber: syz [ 258.818472][ T5957] usb 4-1: config 0 descriptor?? [ 259.649533][ T5957] usb 4-1: USB disconnect, device number 3 [ 261.490723][ T7958] program syz.2.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.925412][ T5964] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 262.077565][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 262.125872][ T5964] usb 4-1: config 0 has no interfaces? [ 262.154089][ T5964] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.186830][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.383998][ T5964] usb 4-1: Product: syz [ 262.388670][ T5964] usb 4-1: SerialNumber: syz [ 262.425267][ T5964] usb 4-1: config 0 descriptor?? [ 264.166215][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 264.181944][ T5913] usb 4-1: USB disconnect, device number 4 [ 264.399407][ T8001] program syz.4.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.876918][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 266.847561][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'. [ 267.579333][ T8022] syz.3.593: attempt to access beyond end of device [ 267.579333][ T8022] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 267.595628][ T8022] (syz.3.593,8022,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 267.603700][ T8022] (syz.3.593,8022,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 267.612681][ T8022] (syz.3.593,8022,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 267.621893][ T8022] (syz.3.593,8022,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 268.671289][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 269.879361][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 270.137571][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 270.248812][ T10] usb 4-1: config 0 has no interfaces? [ 270.340904][ T8077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.643777][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 270.699830][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 270.791676][ T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 270.988069][ T10] usb 4-1: Product: syz [ 271.072447][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 271.092545][ T10] usb 4-1: SerialNumber: syz [ 271.102946][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 271.156993][ T10] usb 4-1: config 0 descriptor?? [ 272.139653][ T5957] usb 4-1: USB disconnect, device number 5 [ 272.947750][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 273.570128][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 276.320228][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 276.935000][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 279.368881][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 281.061073][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 281.337663][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 281.364804][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.402270][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.439849][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.543366][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.612009][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.634673][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.660248][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 281.690297][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.717350][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.737284][ T24] usb 3-1: config 0 descriptor?? [ 282.026899][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.045918][ T24] usb 3-1: USB disconnect, device number 3 [ 282.058283][ T24] usblp0: removed [ 282.639047][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 282.654790][ T8247] program syz.4.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.978912][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 283.001926][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.682445][ T8259] [ 283.684806][ T8259] ====================================================== [ 283.691822][ T8259] WARNING: possible circular locking dependency detected [ 283.698941][ T8259] 6.16.0-rc6-next-20250714-syzkaller #0 Not tainted [ 283.705529][ T8259] ------------------------------------------------------ [ 283.712543][ T8259] syz.3.669/8259 is trying to acquire lock: [ 283.718430][ T8259] ffff88802fcf3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 283.727251][ T8259] [ 283.727251][ T8259] but task is already holding lock: [ 283.734609][ T8259] ffff8880252392f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 283.742977][ T8259] [ 283.742977][ T8259] which lock already depends on the new lock. [ 283.742977][ T8259] [ 283.753393][ T8259] [ 283.753393][ T8259] the existing dependency chain (in reverse order) is: [ 283.762403][ T8259] [ 283.762403][ T8259] -> #3 (&p->lock){+.+.}-{4:4}: [ 283.769445][ T8259] lock_acquire+0x120/0x360 [ 283.774472][ T8259] __mutex_lock+0x182/0xe80 [ 283.779500][ T8259] seq_read_iter+0xb7/0xe10 [ 283.784525][ T8259] copy_splice_read+0x54f/0x9b0 [ 283.789905][ T8259] splice_file_to_pipe+0x273/0x440 [ 283.795548][ T8259] do_sendfile+0x475/0x7e0 [ 283.800477][ T8259] __se_sys_sendfile64+0x13e/0x190 [ 283.806111][ T8259] do_syscall_64+0xfa/0x3b0 [ 283.811138][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.817551][ T8259] [ 283.817551][ T8259] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 283.824923][ T8259] lock_acquire+0x120/0x360 [ 283.829937][ T8259] __mutex_lock+0x182/0xe80 [ 283.834956][ T8259] anon_pipe_write+0x16a/0x1360 [ 283.840320][ T8259] __kernel_write_iter+0x3ec/0x860 [ 283.845938][ T8259] __kernel_write+0xef/0x150 [ 283.851046][ T8259] autofs_notify_daemon+0x748/0xe50 [ 283.856754][ T8259] autofs_wait+0x11dc/0x1870 [ 283.861850][ T8259] autofs_mount_wait+0x16b/0x330 [ 283.867292][ T8259] autofs_d_automount+0x393/0x720 [ 283.872820][ T8259] __traverse_mounts+0x308/0x5b0 [ 283.878266][ T8259] step_into+0x534/0xf30 [ 283.883019][ T8259] path_lookupat+0x163/0x430 [ 283.888113][ T8259] filename_lookup+0x212/0x570 [ 283.893391][ T8259] kern_path+0x35/0x50 [ 283.897965][ T8259] lookup_bdev+0xc0/0x280 [ 283.902833][ T8259] resume_store+0x169/0x460 [ 283.907866][ T8259] kernfs_fop_write_iter+0x375/0x4f0 [ 283.913679][ T8259] vfs_write+0x548/0xa90 [ 283.918445][ T8259] ksys_write+0x145/0x250 [ 283.923287][ T8259] do_syscall_64+0xfa/0x3b0 [ 283.928312][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.934720][ T8259] [ 283.934720][ T8259] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 283.942465][ T8259] lock_acquire+0x120/0x360 [ 283.947496][ T8259] __mutex_lock+0x182/0xe80 [ 283.952519][ T8259] autofs_notify_daemon+0x735/0xe50 [ 283.958241][ T8259] autofs_wait+0x11dc/0x1870 [ 283.963347][ T8259] autofs_mount_wait+0x16b/0x330 [ 283.968798][ T8259] autofs_d_automount+0x393/0x720 [ 283.977584][ T8259] __traverse_mounts+0x308/0x5b0 [ 283.983036][ T8259] step_into+0x534/0xf30 [ 283.987787][ T8259] path_lookupat+0x163/0x430 [ 283.992883][ T8259] filename_lookup+0x212/0x570 [ 283.998162][ T8259] kern_path+0x35/0x50 [ 284.002751][ T8259] lookup_bdev+0xc0/0x280 [ 284.007588][ T8259] resume_store+0x169/0x460 [ 284.012600][ T8259] kernfs_fop_write_iter+0x375/0x4f0 [ 284.018394][ T8259] vfs_write+0x548/0xa90 [ 284.023150][ T8259] ksys_write+0x145/0x250 [ 284.027988][ T8259] do_syscall_64+0xfa/0x3b0 [ 284.033001][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.039399][ T8259] [ 284.039399][ T8259] -> #0 (&of->mutex){+.+.}-{4:4}: [ 284.046593][ T8259] validate_chain+0xb9b/0x2140 [ 284.051863][ T8259] __lock_acquire+0xab9/0xd20 [ 284.057041][ T8259] lock_acquire+0x120/0x360 [ 284.062051][ T8259] __mutex_lock+0x182/0xe80 [ 284.067061][ T8259] kernfs_seq_start+0x55/0x3c0 [ 284.072346][ T8259] seq_read_iter+0x3f2/0xe10 [ 284.077446][ T8259] copy_splice_read+0x54f/0x9b0 [ 284.082809][ T8259] splice_file_to_pipe+0x273/0x440 [ 284.088428][ T8259] do_sendfile+0x475/0x7e0 [ 284.093357][ T8259] __se_sys_sendfile64+0x13e/0x190 [ 284.098972][ T8259] do_syscall_64+0xfa/0x3b0 [ 284.103982][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.110384][ T8259] [ 284.110384][ T8259] other info that might help us debug this: [ 284.110384][ T8259] [ 284.120590][ T8259] Chain exists of: [ 284.120590][ T8259] &of->mutex --> &pipe->mutex --> &p->lock [ 284.120590][ T8259] [ 284.132306][ T8259] Possible unsafe locking scenario: [ 284.132306][ T8259] [ 284.139740][ T8259] CPU0 CPU1 [ 284.145087][ T8259] ---- ---- [ 284.150433][ T8259] lock(&p->lock); [ 284.154228][ T8259] lock(&pipe->mutex); [ 284.160886][ T8259] lock(&p->lock); [ 284.167223][ T8259] lock(&of->mutex); [ 284.171192][ T8259] [ 284.171192][ T8259] *** DEADLOCK *** [ 284.171192][ T8259] [ 284.179314][ T8259] 2 locks held by syz.3.669/8259: [ 284.184318][ T8259] #0: ffff88802f737868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 284.193967][ T8259] #1: ffff8880252392f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 284.202742][ T8259] [ 284.202742][ T8259] stack backtrace: [ 284.208626][ T8259] CPU: 0 UID: 0 PID: 8259 Comm: syz.3.669 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 284.208644][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.208658][ T8259] Call Trace: [ 284.208665][ T8259] [ 284.208672][ T8259] dump_stack_lvl+0x189/0x250 [ 284.208690][ T8259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.208704][ T8259] ? __pfx__printk+0x10/0x10 [ 284.208721][ T8259] ? print_lock_name+0xde/0x100 [ 284.208738][ T8259] print_circular_bug+0x2ee/0x310 [ 284.208756][ T8259] check_noncircular+0x134/0x160 [ 284.208776][ T8259] validate_chain+0xb9b/0x2140 [ 284.208791][ T8259] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 284.208806][ T8259] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.208821][ T8259] ? look_up_lock_class+0x74/0x170 [ 284.208837][ T8259] ? register_lock_class+0x51/0x320 [ 284.208857][ T8259] __lock_acquire+0xab9/0xd20 [ 284.208870][ T8259] ? kernfs_seq_start+0x55/0x3c0 [ 284.208886][ T8259] lock_acquire+0x120/0x360 [ 284.208900][ T8259] ? kernfs_seq_start+0x55/0x3c0 [ 284.208925][ T8259] __mutex_lock+0x182/0xe80 [ 284.208940][ T8259] ? kernfs_seq_start+0x55/0x3c0 [ 284.208959][ T8259] ? kernfs_seq_start+0x55/0x3c0 [ 284.208975][ T8259] ? __pfx___mutex_lock+0x10/0x10 [ 284.208994][ T8259] ? seq_read_iter+0x1fd/0xe10 [ 284.209007][ T8259] ? rcu_is_watching+0x15/0xb0 [ 284.209021][ T8259] ? seq_read_iter+0x1fd/0xe10 [ 284.209038][ T8259] kernfs_seq_start+0x55/0x3c0 [ 284.209055][ T8259] seq_read_iter+0x3f2/0xe10 [ 284.209075][ T8259] copy_splice_read+0x54f/0x9b0 [ 284.209095][ T8259] ? splice_file_to_pipe+0x2e/0x440 [ 284.209111][ T8259] ? __pfx_copy_splice_read+0x10/0x10 [ 284.209132][ T8259] ? __pfx_copy_splice_read+0x10/0x10 [ 284.209148][ T8259] splice_file_to_pipe+0x273/0x440 [ 284.209169][ T8259] do_sendfile+0x475/0x7e0 [ 284.209181][ T8259] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.209198][ T8259] ? __pfx_do_sendfile+0x10/0x10 [ 284.209211][ T8259] ? __se_sys_futex+0x36f/0x400 [ 284.209228][ T8259] __se_sys_sendfile64+0x13e/0x190 [ 284.209246][ T8259] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 284.209264][ T8259] ? __secure_computing+0xe2/0x2a0 [ 284.209279][ T8259] do_syscall_64+0xfa/0x3b0 [ 284.209298][ T8259] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.209314][ T8259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.209326][ T8259] ? clear_bhb_loop+0x60/0xb0 [ 284.209340][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.209353][ T8259] RIP: 0033:0x7fabf8f8e929 [ 284.209369][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.209380][ T8259] RSP: 002b:00007fabf9d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 284.209393][ T8259] RAX: ffffffffffffffda RBX: 00007fabf91b6080 RCX: 00007fabf8f8e929 [ 284.209403][ T8259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 284.209410][ T8259] RBP: 00007fabf9010b39 R08: 0000000000000000 R09: 0000000000000000 [ 284.209418][ T8259] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 284.209426][ T8259] R13: 0000000000000000 R14: 00007fabf91b6080 R15: 00007fffdbe0e088 [ 284.209443][ T8259] [ 284.548159][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 284.557187][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 284.595733][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 284.611501][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.621661][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 284.641808][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 284.656528][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 284.665737][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.675341][ T24] usb 3-1: config 0 descriptor?? [ 284.681657][ T24] usb 3-1: can't set config #0, error -71 [ 284.688771][ T24] usb 3-1: USB disconnect, device number 4