last executing test programs: 11m56.720949195s ago: executing program 1 (id=3817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(r4, &(0x7f0000000540)='net/ip_vs\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) syz_open_dev$dri(&(0x7f0000000280), 0xf, 0x101000) syz_clone(0x903a5b80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 11m55.299750844s ago: executing program 1 (id=3820): syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u8=&(0x7f0000000080)=0x7}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 11m54.220478395s ago: executing program 1 (id=3822): pipe(&(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 11m53.575259576s ago: executing program 3 (id=3823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/bnep\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11m52.486058505s ago: executing program 1 (id=3825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x121) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) 11m49.723154646s ago: executing program 3 (id=3832): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 11m48.931920884s ago: executing program 3 (id=3834): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e9, 0x0) lstat(0x0, &(0x7f0000000380)) memfd_create(0x0, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) r6 = socket(0x1d, 0x2, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r5}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) 11m48.522141246s ago: executing program 3 (id=3835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010102}, 0x2, 0x1, 0x2}}, 0x26) 11m48.165566937s ago: executing program 1 (id=3837): mkdir(&(0x7f0000000200)='./bus\x00', 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 11m46.887767356s ago: executing program 1 (id=3840): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x8, 0x9, 0x8, 0xc9, 0x10001, 0x9, 0x3, 0x785d, 0x2}}, 0x43) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11m43.459783002s ago: executing program 3 (id=3851): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) read$eventfd(r3, &(0x7f0000000080), 0x8) recvfrom$netrom(r3, 0x0, 0x0, 0x100, 0x0, 0x0) r4 = shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r7, 0x40046104, &(0x7f0000000300)) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, 0x0, 0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x8080) 11m42.458293281s ago: executing program 3 (id=3853): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_io_uring_setup(0x82f, &(0x7f0000000500)={0x0, 0x814cf, 0x200, 0xffffffff, 0x1023e}, &(0x7f00000004c0), &(0x7f0000000080)) socket(0x2a, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 11m31.733648921s ago: executing program 32 (id=3840): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x8, 0x9, 0x8, 0xc9, 0x10001, 0x9, 0x3, 0x785d, 0x2}}, 0x43) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11m26.925409321s ago: executing program 33 (id=3853): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_io_uring_setup(0x82f, &(0x7f0000000500)={0x0, 0x814cf, 0x200, 0xffffffff, 0x1023e}, &(0x7f00000004c0), &(0x7f0000000080)) socket(0x2a, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 9m12.458408406s ago: executing program 4 (id=4319): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) 9m12.109658462s ago: executing program 4 (id=4324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38) 9m9.467741534s ago: executing program 4 (id=4332): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000280)="c021", 0x2}], 0x1) 9m9.437390363s ago: executing program 4 (id=4333): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 9m9.389697666s ago: executing program 4 (id=4335): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) lremovexattr(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="203553ecbc60e6b30014f4ce88bdc9afa1b3b675c94e5d4b38991002dd5305ee2c714eda0f078d7bc03e032c1863dfb80c4a7f657714f6c96261fdd4bee69daca889e3fb5c7de6e5488b68f3a0693d037f62779237"]) syz_fuse_handle_req(r6, &(0x7f0000000500)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0xcc3d, {0x7, 0x28, 0x4, 0x40000, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r2, r1, 0x0, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000080)="0b000300010001", 0x7) 9m7.108190559s ago: executing program 4 (id=4340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="183810877acbcac5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timerfd_create(0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000400)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x26d, 0x0, &(0x7f0000000480)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[], 0x0) 8m51.462494763s ago: executing program 34 (id=4340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="183810877acbcac5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timerfd_create(0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000400)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x26d, 0x0, &(0x7f0000000480)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[], 0x0) 4m51.61607788s ago: executing program 7 (id=5259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x6189) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 4m50.319246128s ago: executing program 7 (id=5262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x4000000000000f5, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000003380)={0x0, 0x80000001}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc0105303, &(0x7f0000000500)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) socket$alg(0x26, 0x5, 0x0) 4m49.415037998s ago: executing program 7 (id=5265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(r4, &(0x7f0000000540)='net/ip_vs\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) syz_open_dev$dri(&(0x7f0000000280), 0xf, 0x101000) syz_clone(0x903a5b80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 4m48.192122615s ago: executing program 7 (id=5268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m48.077672817s ago: executing program 7 (id=5271): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 4m46.806488769s ago: executing program 7 (id=5274): syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) syz_io_uring_setup(0x1b75, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0) unshare(0x4020400) connect$inet6(r1, 0x0, 0x0) 4m31.084191563s ago: executing program 35 (id=5274): syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) syz_io_uring_setup(0x1b75, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0) unshare(0x4020400) connect$inet6(r1, 0x0, 0x0) 48.51604693s ago: executing program 6 (id=6039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 45.441611676s ago: executing program 6 (id=6048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 40.160224577s ago: executing program 6 (id=6060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 36.693324293s ago: executing program 6 (id=6067): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[], 0xf8}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x1008}, {&(0x7f0000001580)=""/238, 0xf0}], 0x5, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) 35.52143997s ago: executing program 6 (id=6070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlockall() 34.044041014s ago: executing program 6 (id=6074): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 32.795826931s ago: executing program 5 (id=6079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f5368fce7bf91d3e36cbe0c0f119a3e30349ba7b75d8664eeea79a658", 0x71}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d", 0x29}, {&(0x7f0000001f40)="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", 0xa98}], 0x5}], 0x1, 0x1) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 29.16688073s ago: executing program 5 (id=6083): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) io_submit(r1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80000f892d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x633, 0x0, 0x1, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@local, {0x0, 0x10}, {}, {0x40}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 28.542772733s ago: executing program 8 (id=6085): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 27.638364483s ago: executing program 8 (id=6086): syz_io_uring_setup(0xf3d, 0x0, 0x0, &(0x7f0000000540)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 27.075523485s ago: executing program 5 (id=6087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 26.427399885s ago: executing program 0 (id=6089): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64], 0x48) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback, 0x100dd}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x260, 0x111, 0x4b4, 0x260, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x260, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x2, 0x80000001, 0x40, 0x6ad7, 0x65, 0x3, 0x100, 0x40, 0x78, 0x20}, {0x400000000000400}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0xbe2}, {0x8, 0x6}], 0xee00}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 26.42715125s ago: executing program 2 (id=6090): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ec0)='cpu.weight\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @my=0x0, 0xe, 0x0, 0x2449, 0x0, 0x5, 0x100000, 0x6}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) 26.401929462s ago: executing program 5 (id=6091): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x24, 0x0, 0x0) io_uring_setup(0x26ce, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 21.866416441s ago: executing program 5 (id=6092): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r4 = socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0x5, {0x8000, 0x200, 0x87, 0x8}}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 21.866145096s ago: executing program 8 (id=6093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f5368fce7bf91d3e36cbe0c0f119a3e30349ba7b75d8664eeea79a658", 0x71}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d", 0x29}, {&(0x7f0000001f40)="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", 0xa98}], 0x5}], 0x1, 0x1) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 21.764130028s ago: executing program 2 (id=6094): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 21.762237922s ago: executing program 0 (id=6095): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[], 0xf8}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x1008}, {&(0x7f0000001580)=""/238, 0xf0}], 0x5, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) 21.544012835s ago: executing program 8 (id=6096): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0x4000884) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) close_range(r1, 0xffffffffffffffff, 0x0) 21.032198707s ago: executing program 8 (id=6097): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) io_submit(r1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80000f892d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x633, 0x0, 0x1, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@local, {0x0, 0x10}, {}, {0x40}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 20.396080866s ago: executing program 2 (id=6098): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x8001a0) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 20.30759966s ago: executing program 5 (id=6099): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) 19.695567383s ago: executing program 0 (id=6100): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x3f) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r0, &(0x7f0000000100)='./file2\x00') ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5605, 0x0) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 19.503956796s ago: executing program 2 (id=6101): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) keyctl$instantiate(0xc, 0x0, 0x0, 0x34, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) get_robust_list(r4, &(0x7f0000000240)=0x0, 0x0) setrlimit(0x8, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 18.510349712s ago: executing program 36 (id=6074): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 18.283061521s ago: executing program 8 (id=6103): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2e365a339683931c}]}}, 0x0, 0x2a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) io_uring_enter(r3, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0x402c560b, &(0x7f0000000040)={0xf0f071, 0x1}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ppoll(&(0x7f0000000700)=[{r8}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x2c000011) r12 = socket(0x10, 0x3, 0x0) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x24, 0x2e, 0x205}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x8}, {0xfff2, 0xa}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x3, 0x4c9, 0x1, 0x101}, {0x7, 0x1, 0xce, 0x3, 0x2, 0x1}, 0x7, 0x3, 0x32d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe6ccd60b157bc5c8}, @TCA_TBF_RATE64={0xc, 0x4, 0xd34b0ff52d069371}]}}]}, 0x70}}, 0x4000) 17.125408989s ago: executing program 0 (id=6104): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) keyctl$join(0x1, 0x0) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084503, &(0x7f0000ffcffc)=0xfa) 17.007949885s ago: executing program 2 (id=6105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ec0)='cpu.weight\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @my=0x0, 0xe, 0x0, 0x2449, 0x0, 0x5, 0x100000, 0x6}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) 15.971012156s ago: executing program 0 (id=6106): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64], 0x48) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback, 0x100dd}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x260, 0x111, 0x4b4, 0x260, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x260, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x2, 0x80000001, 0x40, 0x6ad7, 0x65, 0x3, 0x100, 0x40, 0x78, 0x20}, {0x400000000000400}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0xbe2}, {0x8, 0x6}], 0xee00}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.893458565s ago: executing program 2 (id=6107): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) syz_io_uring_setup(0x7ad4, &(0x7f0000000300)={0x0, 0x5954, 0x80, 0x1, 0x317}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000080)='./file0\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 15.361516879s ago: executing program 0 (id=6108): r0 = socket(0x2a, 0x2, 0xe2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0xc084) openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x200) 5.050167412s ago: executing program 37 (id=6099): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) 3.05640267s ago: executing program 38 (id=6103): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2e365a339683931c}]}}, 0x0, 0x2a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) io_uring_enter(r3, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0x402c560b, &(0x7f0000000040)={0xf0f071, 0x1}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ppoll(&(0x7f0000000700)=[{r8}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x2c000011) r12 = socket(0x10, 0x3, 0x0) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x24, 0x2e, 0x205}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x8}, {0xfff2, 0xa}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x3, 0x4c9, 0x1, 0x101}, {0x7, 0x1, 0xce, 0x3, 0x2, 0x1}, 0x7, 0x3, 0x32d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe6ccd60b157bc5c8}, @TCA_TBF_RATE64={0xc, 0x4, 0xd34b0ff52d069371}]}}]}, 0x70}}, 0x4000) 42.43375ms ago: executing program 39 (id=6108): r0 = socket(0x2a, 0x2, 0xe2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0xc084) openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x200) 0s ago: executing program 40 (id=6107): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) syz_io_uring_setup(0x7ad4, &(0x7f0000000300)={0x0, 0x5954, 0x80, 0x1, 0x317}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000080)='./file0\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) kernel console output (not intermixed with test programs): 16723] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.840370][T16723] usb 8-1: config 0 descriptor?? [ 1394.653263][T16723] usbhid 8-1:0.0: can't add hid device: -71 [ 1394.660437][T16723] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1394.672565][T16723] usb 8-1: USB disconnect, device number 10 [ 1397.245941][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5160'. [ 1397.280618][T23743] pim6reg1: entered allmulticast mode [ 1397.344221][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1397.344245][ T29] audit: type=1326 audit(1734011100.986:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.372741][ T29] audit: type=1326 audit(1734011100.986:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.386954][T23747] netlink: 'syz.0.5168': attribute type 4 has an invalid length. [ 1397.394659][ T29] audit: type=1326 audit(1734011100.986:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.425388][ T29] audit: type=1326 audit(1734011100.986:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.447647][ T29] audit: type=1326 audit(1734011100.986:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.469591][ T29] audit: type=1326 audit(1734011101.016:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.491275][ T29] audit: type=1326 audit(1734011101.016:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.513059][ T29] audit: type=1326 audit(1734011101.016:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.535152][ T29] audit: type=1326 audit(1734011101.026:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1397.557175][ T29] audit: type=1326 audit(1734011101.026:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23746 comm="syz.0.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1399.157022][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1399.163095][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1399.420932][T23761] ceph: No mds server is up or the cluster is laggy [ 1399.486950][T16665] libceph: connect (1)[c::]:6789 error -101 [ 1399.504486][T16665] libceph: mon0 (1)[c::]:6789 connect error [ 1399.786492][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 1399.982450][T23784] netlink: 'syz.7.5181': attribute type 4 has an invalid length. [ 1400.234436][T23790] pim6reg1: entered allmulticast mode [ 1402.296170][T23823] netlink: 'syz.6.5193': attribute type 4 has an invalid length. [ 1402.934769][T23833] pim6reg1: entered allmulticast mode [ 1403.439497][T23847] binder: 23846:23847 ioctl c0286405 20000600 returned -22 [ 1406.374931][ T5868] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1406.983174][T23881] pim6reg1: entered allmulticast mode [ 1407.175524][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 1407.182135][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.199595][ T5868] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1407.300546][ T5851] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1407.326183][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.334336][ T5868] usb 7-1: Product: syz [ 1407.338799][ T5868] usb 7-1: Manufacturer: syz [ 1407.343539][ T5868] usb 7-1: SerialNumber: syz [ 1407.377726][ T5868] usb 7-1: config 0 descriptor?? [ 1407.391429][ T5868] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1407.459054][ T5851] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 1407.471449][ T5851] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1407.489324][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.508516][ T5851] usb 3-1: config 0 has no interface number 0 [ 1407.515646][ T5851] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1407.526203][ T5851] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.543511][ T5851] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1407.568040][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1407.577192][ T5851] usb 3-1: Product: syz [ 1407.581819][ T5851] usb 3-1: Manufacturer: syz [ 1407.587024][ T5851] usb 3-1: SerialNumber: syz [ 1407.592265][ T5868] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1407.594149][ T5851] usb 3-1: config 0 descriptor?? [ 1407.609448][ T5851] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1407.621947][ T5868] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1407.625832][ T5851] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1407.647101][ T5851] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1407.651805][ T5868] usb 7-1: USB disconnect, device number 19 [ 1407.812949][ T5851] usb 3-1: USB disconnect, device number 25 [ 1407.822941][ T5851] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1407.847816][ T5851] cyberjack 3-1:0.69: device disconnected [ 1409.275522][T16258] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1409.439397][T13559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1409.833349][T16258] usb 8-1: Using ep0 maxpacket: 32 [ 1409.897536][T16258] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1409.908010][T16258] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1409.919794][T16258] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 1409.931740][T16258] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1409.942025][T16258] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.187893][T16258] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1410.203769][T16258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.212350][T16258] usb 8-1: Product: syz [ 1410.217056][T16258] usb 8-1: Manufacturer: syz [ 1410.221703][T16258] usb 8-1: SerialNumber: syz [ 1410.235041][T23920] pim6reg1: entered allmulticast mode [ 1410.237459][T16258] usb 8-1: config 0 descriptor?? [ 1412.479690][ T9] usb 8-1: USB disconnect, device number 11 [ 1414.871539][T23975] pim6reg1: entered allmulticast mode [ 1417.045092][ T5834] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 1417.503815][T24005] fuse: Bad value for 'user_id' [ 1417.539244][T24005] fuse: Bad value for 'user_id' [ 1417.612317][T24009] netlink: 'syz.6.5255': attribute type 4 has an invalid length. [ 1417.653621][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 1417.653646][ T29] audit: type=1326 audit(1734011121.256:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.685669][ T29] audit: type=1326 audit(1734011121.256:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.709757][ T29] audit: type=1326 audit(1734011121.256:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.731325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.738340][ T29] audit: type=1326 audit(1734011121.256:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.759888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.766105][ T29] audit: type=1326 audit(1734011121.256:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.788501][ T29] audit: type=1326 audit(1734011121.256:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.810075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.827308][ T29] audit: type=1326 audit(1734011121.256:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.849245][ T29] audit: type=1326 audit(1734011121.256:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.871148][ T29] audit: type=1326 audit(1734011121.256:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1417.893983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.900447][ T29] audit: type=1326 audit(1734011121.256:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24008 comm="syz.6.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1419.289319][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1419.303954][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:8 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1419.314893][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1419.325008][ T5834] Workqueue: hci1 hci_rx_work [ 1419.329769][ T5834] Call Trace: [ 1419.333082][ T5834] [ 1419.336069][ T5834] dump_stack_lvl+0x241/0x360 [ 1419.340785][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1419.346004][ T5834] ? __pfx__printk+0x10/0x10 [ 1419.350612][ T5834] ? __kmalloc_cache_noprof+0x243/0x390 [ 1419.356168][ T5834] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1419.361470][ T5834] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1419.366591][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1419.372240][ T5834] kobject_add_internal+0x435/0x8d0 [ 1419.377463][ T5834] kobject_add+0x152/0x220 [ 1419.381894][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1419.387124][ T5834] ? device_add+0x3e7/0xbf0 [ 1419.391674][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 1419.396669][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 1419.401571][ T5834] ? get_device_parent+0x165/0x410 [ 1419.406734][ T5834] device_add+0x4e5/0xbf0 [ 1419.411117][ T5834] hci_conn_add_sysfs+0xe8/0x200 [ 1419.416108][ T5834] le_conn_complete_evt+0xc9f/0x12e0 [ 1419.421446][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1419.427213][ T5834] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1419.432905][ T5834] ? __pfx___mutex_lock+0x10/0x10 [ 1419.438000][ T5834] ? skb_pull_data+0x112/0x230 [ 1419.442825][ T5834] hci_le_enh_conn_complete_evt+0x185/0x420 [ 1419.448757][ T5834] hci_event_packet+0xa55/0x1540 [ 1419.453736][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1419.459053][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 1419.464457][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1419.469688][ T5834] ? rcu_is_watching+0x15/0xb0 [ 1419.474477][ T5834] ? hci_send_to_monitor+0xd8/0x7f0 [ 1419.479694][ T5834] ? kcov_remote_start+0x97/0x7d0 [ 1419.484733][ T5834] hci_rx_work+0x3f3/0xdb0 [ 1419.489173][ T5834] ? process_scheduled_works+0x976/0x1840 [ 1419.494913][ T5834] process_scheduled_works+0xa66/0x1840 [ 1419.500581][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 1419.506582][ T5834] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1419.512142][ T5834] ? assign_work+0x364/0x3d0 [ 1419.516755][ T5834] worker_thread+0x870/0xd30 [ 1419.521359][ T5834] ? __kthread_parkme+0x169/0x1d0 [ 1419.526396][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 1419.531513][ T5834] kthread+0x2f0/0x390 [ 1419.535592][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 1419.540710][ T5834] ? __pfx_kthread+0x10/0x10 [ 1419.545311][ T5834] ret_from_fork+0x4b/0x80 [ 1419.549740][ T5834] ? __pfx_kthread+0x10/0x10 [ 1419.554870][ T5834] ret_from_fork_asm+0x1a/0x30 [ 1419.559662][ T5834] [ 1419.562791][ C0] vkms_vblank_simulate: vblank timer overrun [ 1419.587831][ T5834] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1419.603510][ T5834] Bluetooth: hci1: failed to register connection device [ 1419.635562][ T5851] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1419.659069][T24038] pim6reg1: entered allmulticast mode [ 1419.785702][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 1419.792847][ T5851] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.817645][ T5851] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1419.847830][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.865030][ T5851] usb 7-1: Product: syz [ 1419.884084][ T5851] usb 7-1: Manufacturer: syz [ 1419.889001][ T5851] usb 7-1: SerialNumber: syz [ 1419.945264][ T5851] usb 7-1: config 0 descriptor?? [ 1419.974539][ T5851] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1420.391768][T13559] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 1421.578258][T24058] netlink: 'syz.5.5270': attribute type 4 has an invalid length. [ 1422.135893][ T5851] gspca_sunplus: reg_r err -110 [ 1422.614532][ T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1423.227056][T24080] overlayfs: failed to resolve './file0': -2 [ 1423.731038][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.962997][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1423.974500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.985153][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1423.986250][T24082] pim6reg1: entered allmulticast mode [ 1424.000380][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.014298][ T9] usb 3-1: config 0 descriptor?? [ 1424.034467][T13559] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1424.044920][T13559] CPU: 0 UID: 0 PID: 13559 Comm: kworker/u9:0 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1424.055908][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1424.065983][T13559] Workqueue: hci3 hci_rx_work [ 1424.070688][T13559] Call Trace: [ 1424.073967][T13559] [ 1424.076902][T13559] dump_stack_lvl+0x241/0x360 [ 1424.081588][T13559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1424.086791][T13559] ? __pfx__printk+0x10/0x10 [ 1424.091385][T13559] ? __kmalloc_cache_noprof+0x243/0x390 [ 1424.096948][T13559] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1424.102245][T13559] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1424.107366][T13559] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1424.113014][T13559] kobject_add_internal+0x435/0x8d0 [ 1424.119309][T13559] kobject_add+0x152/0x220 [ 1424.123751][T13559] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1424.128974][T13559] ? device_add+0x3e7/0xbf0 [ 1424.133742][T13559] ? __pfx_kobject_add+0x10/0x10 [ 1424.138687][T13559] ? _raw_spin_unlock+0x28/0x50 [ 1424.143546][T13559] ? get_device_parent+0x165/0x410 [ 1424.148695][T13559] device_add+0x4e5/0xbf0 [ 1424.153032][T13559] hci_conn_add_sysfs+0xe8/0x200 [ 1424.157983][T13559] le_conn_complete_evt+0xc9f/0x12e0 [ 1424.163279][T13559] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1424.169622][T13559] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1424.175275][T13559] ? __pfx___mutex_lock+0x10/0x10 [ 1424.180309][T13559] ? skb_pull_data+0x112/0x230 [ 1424.185085][T13559] hci_le_enh_conn_complete_evt+0x185/0x420 [ 1424.190987][T13559] hci_event_packet+0xa55/0x1540 [ 1424.195994][T13559] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1424.201303][T13559] ? __pfx_hci_event_packet+0x10/0x10 [ 1424.206688][T13559] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1424.211904][T13559] ? rcu_is_watching+0x15/0xb0 [ 1424.216673][T13559] ? hci_send_to_monitor+0xd8/0x7f0 [ 1424.221872][T13559] ? kcov_remote_start+0x97/0x7d0 [ 1424.226897][T13559] hci_rx_work+0x3f3/0xdb0 [ 1424.231343][T13559] ? process_scheduled_works+0x976/0x1840 [ 1424.237103][T13559] process_scheduled_works+0xa66/0x1840 [ 1424.242676][T13559] ? __pfx_process_scheduled_works+0x10/0x10 [ 1424.248673][T13559] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1424.254242][T13559] ? assign_work+0x364/0x3d0 [ 1424.258872][T13559] worker_thread+0x870/0xd30 [ 1424.263471][T13559] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1424.269392][T13559] ? __kthread_parkme+0x169/0x1d0 [ 1424.274431][T13559] ? __pfx_worker_thread+0x10/0x10 [ 1424.279544][T13559] kthread+0x2f0/0x390 [ 1424.283612][T13559] ? __pfx_worker_thread+0x10/0x10 [ 1424.288722][T13559] ? __pfx_kthread+0x10/0x10 [ 1424.293314][T13559] ret_from_fork+0x4b/0x80 [ 1424.297738][T13559] ? __pfx_kthread+0x10/0x10 [ 1424.302331][T13559] ret_from_fork_asm+0x1a/0x30 [ 1424.307132][T13559] [ 1424.310288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.440989][T13559] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1424.455386][T13559] Bluetooth: hci3: failed to register connection device [ 1426.815793][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1426.823307][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1426.889295][ T9] usb 3-1: USB disconnect, device number 26 [ 1426.909592][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1426.909613][ T29] audit: type=1326 audit(1734011130.556:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1426.913153][T24103] netlink: 'syz.2.5282': attribute type 4 has an invalid length. [ 1426.918665][ T29] audit: type=1326 audit(1734011130.556:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.024210][ T29] audit: type=1326 audit(1734011130.556:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.065569][ T29] audit: type=1326 audit(1734011130.556:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.105682][ T29] audit: type=1326 audit(1734011130.556:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.155773][ T29] audit: type=1326 audit(1734011130.556:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.225711][ T5851] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1427.225750][ T29] audit: type=1326 audit(1734011130.556:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.254371][ T5851] usb 7-1: USB disconnect, device number 20 [ 1427.263022][ T29] audit: type=1326 audit(1734011130.556:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.284823][ T29] audit: type=1326 audit(1734011130.556:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1427.306591][ T29] audit: type=1326 audit(1734011130.556:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24102 comm="syz.2.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1429.085843][T24128] overlayfs: failed to resolve './file0': -2 [ 1431.243426][T24137] pim6reg1: entered allmulticast mode [ 1431.465832][ T9] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1431.552206][T24151] netlink: 'syz.6.5295': attribute type 4 has an invalid length. [ 1431.617301][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1432.061353][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.078982][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1432.089474][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.113485][ T9] usb 3-1: config 0 descriptor?? [ 1432.147046][T16723] libceph: connect (1)[c::]:6789 error -101 [ 1432.153187][T16723] libceph: mon0 (1)[c::]:6789 connect error [ 1432.336046][T24160] ceph: No mds server is up or the cluster is laggy [ 1432.470873][T16723] libceph: connect (1)[c::]:6789 error -101 [ 1432.477530][T16723] libceph: mon0 (1)[c::]:6789 connect error [ 1432.558044][ T9] aquacomputer_d5next 0003:0C70:F0BD.0018: unknown main item tag 0x1 [ 1432.799803][ T9] aquacomputer_d5next 0003:0C70:F0BD.0018: item fetching failed at offset 2/5 [ 1432.987276][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1432.994383][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1433.114564][ T9] aquacomputer_d5next 0003:0C70:F0BD.0018: probe with driver aquacomputer_d5next failed with error -22 [ 1433.239106][ T9] usb 3-1: USB disconnect, device number 27 [ 1435.533186][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1435.533209][ T29] audit: type=1326 audit(1734011139.176:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24205 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1435.592083][T24203] pim6reg1: entered allmulticast mode [ 1435.636778][T24207] netlink: 'syz.0.5307': attribute type 4 has an invalid length. [ 1435.679331][ T29] audit: type=1326 audit(1734011139.326:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24205 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1435.731249][ T29] audit: type=1326 audit(1734011139.326:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24205 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1435.845025][ T29] audit: type=1326 audit(1734011139.326:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24205 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4385d19 code=0x7ffc0000 [ 1438.826828][T13559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1438.839457][T13559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1438.847142][T13559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1438.854958][T13559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1438.862741][T13559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1438.870664][T13559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.290191][T24249] pim6reg1: entered allmulticast mode [ 1440.688842][T24237] chnl_net:caif_netlink_parms(): no params data found [ 1440.750695][T24247] tipc: Trying to set illegal importance in message [ 1441.065557][ T5834] Bluetooth: hci5: command tx timeout [ 1441.415184][T24237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.424924][T24237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.514152][T24237] bridge_slave_0: entered allmulticast mode [ 1441.521958][T24237] bridge_slave_0: entered promiscuous mode [ 1441.529949][T24237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.571997][T24237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.580419][T24237] bridge_slave_1: entered allmulticast mode [ 1441.587683][T24237] bridge_slave_1: entered promiscuous mode [ 1442.048730][T24237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.140733][T24237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.222502][T24237] team0: Port device team_slave_0 added [ 1442.259582][T24237] team0: Port device team_slave_1 added [ 1442.475802][T24237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.482917][T24237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.520300][T24237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.534702][T24237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.541897][T24237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.567824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.573997][T24237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.862372][T24237] hsr_slave_0: entered promiscuous mode [ 1442.887157][T24237] hsr_slave_1: entered promiscuous mode [ 1442.908690][T24237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.942430][T24237] Cannot create hsr debugfs directory [ 1443.195720][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 1445.077223][T24300] pim6reg1: entered allmulticast mode [ 1445.651083][T13559] Bluetooth: hci5: command 0x041b tx timeout [ 1445.725109][T24237] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1446.925196][T24237] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1446.964339][T24237] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1447.218216][T24237] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1447.459654][T24335] tipc: Trying to set illegal importance in message [ 1447.705548][T13559] Bluetooth: hci5: command 0x041b tx timeout [ 1447.835273][T24237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.944380][T24237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.040348][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.047609][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.076970][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.084172][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.470032][T24237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1448.480619][T24237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1449.733778][T24363] pim6reg1: entered allmulticast mode [ 1449.828967][T13559] Bluetooth: hci5: command 0x041b tx timeout [ 1450.149346][T24365] Cannot find add_set index 0 as target [ 1450.239114][T24237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.177218][T24378] xt_connbytes: Forcing CT accounting to be enabled [ 1451.184088][T24378] xt_bpf: check failed: parse error [ 1451.222095][T24237] veth0_vlan: entered promiscuous mode [ 1451.271022][T24237] veth1_vlan: entered promiscuous mode [ 1451.725346][T24237] veth0_macvtap: entered promiscuous mode [ 1451.867569][T24237] veth1_macvtap: entered promiscuous mode [ 1451.881386][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.909892][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.953367][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.983304][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.025832][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.055361][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.082997][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.122413][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.134166][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.285730][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.296963][T24237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.306873][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.318047][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.328091][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.893974][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.039104][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.053974][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.064081][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.074760][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.084689][T24237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.095775][T24237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.106854][T24237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.121742][T24237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.131612][T24237] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.140964][T24237] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.150685][T24237] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.326994][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1453.366022][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.384272][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.407982][T24406] xt_nat: multiple ranges no longer supported [ 1453.430130][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.444026][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.485811][ T9] usb 1-1: device descriptor read/64, error -71 [ 1454.281875][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1454.640777][T24420] pim6reg1: entered allmulticast mode [ 1455.290944][ T9] usb 1-1: device descriptor read/64, error -71 [ 1455.398333][ T29] audit: type=1326 audit(1734011159.046:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24431 comm="syz.6.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1455.420505][ T9] usb usb1-port1: attempt power cycle [ 1455.502203][ T29] audit: type=1326 audit(1734011159.046:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24431 comm="syz.6.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1455.524750][ T29] audit: type=1326 audit(1734011159.086:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24431 comm="syz.6.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1455.546434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.575709][ T29] audit: type=1326 audit(1734011159.086:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24431 comm="syz.6.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1455.597394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.611372][T16665] IPVS: starting estimator thread 0... [ 1455.622741][ T29] audit: type=1326 audit(1734011159.086:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24431 comm="syz.6.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a18985d19 code=0x7ffc0000 [ 1455.715657][T24440] IPVS: using max 31 ests per chain, 74400 per kthread [ 1455.818615][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1455.824914][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1455.845707][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1455.866325][ T9] usb 1-1: device descriptor read/8, error -71 [ 1456.012009][T24441] ceph: No mds server is up or the cluster is laggy [ 1456.627008][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1456.637341][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1456.705982][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1456.893861][ T9] usb 1-1: device descriptor read/8, error -71 [ 1457.022265][ T9] usb usb1-port1: unable to enumerate USB device [ 1457.129981][T24458] overlayfs: failed to resolve './file0': -2 [ 1461.227360][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1461.395770][ T9] usb 3-1: device descriptor read/64, error -71 [ 1461.655563][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1461.842733][T24519] overlayfs: failed to resolve './file0': -2 [ 1462.229638][ T9] usb 3-1: device descriptor read/64, error -71 [ 1462.472657][ T9] usb usb3-port1: attempt power cycle [ 1462.825592][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1462.880347][ T9] usb 3-1: device descriptor read/8, error -71 [ 1464.166398][T24536] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1465.205600][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1465.252768][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1465.340619][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.395824][T16258] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1465.397421][ T9] usb 3-1: config 0 descriptor?? [ 1466.076119][T16258] usb 6-1: Using ep0 maxpacket: 8 [ 1466.084649][T16258] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1466.094434][T16258] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1466.108294][T16258] usb 6-1: Product: syz [ 1466.112524][T16258] usb 6-1: Manufacturer: syz [ 1466.125518][T16258] usb 6-1: SerialNumber: syz [ 1466.143591][T16258] usb 6-1: config 0 descriptor?? [ 1466.310491][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1466.327868][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1466.370488][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1466.385506][T16258] usb 6-1: USB disconnect, device number 23 [ 1466.523957][T24568] overlayfs: failed to resolve './file0': -2 [ 1467.118318][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1467.125276][ T9] [drm] Initialized udl on minor 2 [ 1467.141050][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1467.299565][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1467.307252][T15690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1467.324443][T15690] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1468.176727][T24563] udevd[24563]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.301428][ T9] usb 3-1: USB disconnect, device number 31 [ 1469.561413][T24602] overlayfs: missing 'lowerdir' [ 1470.340603][T24611] fuse: Invalid rootmode [ 1471.704311][T24620] overlayfs: failed to resolve './file0': -2 [ 1472.751461][T24626] veth0_to_team: entered promiscuous mode [ 1472.757584][T24626] veth0_to_team: entered allmulticast mode [ 1472.765773][T24615] block device autoloading is deprecated and will be removed. [ 1472.895660][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1473.009719][ T5851] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1473.068601][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1473.078504][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.088159][ T9] usb 6-1: config 0 descriptor?? [ 1473.245988][T24635] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1473.575597][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 1473.582498][ T5851] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 1473.590978][ T5851] usb 3-1: config 0 has no interface number 0 [ 1473.597190][ T5851] usb 3-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1473.608313][ T5851] usb 3-1: config 0 interface 244 has no altsetting 0 [ 1473.617021][T15690] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1473.626841][ T5851] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1473.636031][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.644057][ T5851] usb 3-1: Product: syz [ 1473.648311][ T5851] usb 3-1: Manufacturer: syz [ 1473.652959][ T5851] usb 3-1: SerialNumber: syz [ 1473.659156][ T5851] usb 3-1: config 0 descriptor?? [ 1473.667325][ T5851] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 1473.770384][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1473.779307][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1473.788698][T15690] usb 9-1: Using ep0 maxpacket: 8 [ 1473.795530][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1473.817742][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1473.827160][ T9] [drm] Initialized udl on minor 2 [ 1473.851405][ T5851] snd_usb_toneport 3-1:0.244: set_interface failed [ 1473.861091][T15690] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1473.870446][T15690] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1473.880201][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1473.905575][ T5868] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1473.950991][ T5851] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 1473.967016][T15690] usb 9-1: Product: syz [ 1473.989759][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1473.996586][T15690] usb 9-1: Manufacturer: syz [ 1474.001344][T16723] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1474.066474][ T5851] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 1474.200270][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 1474.272082][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1474.276377][T15690] usb 9-1: SerialNumber: syz [ 1474.304968][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1474.312129][ T9] usb 6-1: USB disconnect, device number 24 [ 1474.338537][T16723] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1474.370861][ T5851] usb 3-1: USB disconnect, device number 32 [ 1474.377426][T16723] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1474.403038][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1474.420680][T15690] usb 9-1: config 0 descriptor?? [ 1474.426269][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1474.459028][T24645] overlayfs: missing 'lowerdir' [ 1474.480015][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1474.519925][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1474.551084][ T5868] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1474.565328][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.606015][ T5868] usb 7-1: Product: syz [ 1474.610674][ T5868] usb 7-1: Manufacturer: syz [ 1474.694447][ T5868] usb 7-1: SerialNumber: syz [ 1474.841114][ T5868] usb 7-1: config 0 descriptor?? [ 1475.627785][T15690] usb 9-1: USB disconnect, device number 2 [ 1475.700454][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.725541][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.731637][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.745666][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.751754][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.757988][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.786735][ T2897] Bluetooth: (null): Invalid header checksum [ 1475.957518][T24563] udevd[24563]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1477.348993][T24683] block device autoloading is deprecated and will be removed. [ 1477.796015][ T9] usb 7-1: USB disconnect, device number 21 [ 1477.863773][T24681] Bluetooth: MGMT ver 1.23 [ 1478.375699][T15690] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1478.758526][T15690] usb 6-1: Using ep0 maxpacket: 32 [ 1478.899390][T15690] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1478.936988][T15690] usb 6-1: config 0 has no interface number 0 [ 1478.944517][T15690] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1478.955486][T15690] usb 6-1: config 0 interface 244 has no altsetting 0 [ 1478.965217][T15690] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1478.979422][T15690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.371379][T15690] usb 6-1: Product: syz [ 1479.375625][T15690] usb 6-1: Manufacturer: syz [ 1479.380256][T15690] usb 6-1: SerialNumber: syz [ 1479.386660][T15690] usb 6-1: config 0 descriptor?? [ 1479.395866][T15690] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 1479.593907][T24683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.602559][T24683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.722860][T15690] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 1479.743215][T15690] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 1479.767274][T15690] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1479.974762][T15690] usb 6-1: USB disconnect, device number 25 [ 1481.376957][T15690] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1481.769375][T15690] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1481.802738][T15690] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.880344][T15690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.977183][T15690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1481.998131][T15690] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1482.033218][T15690] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1482.043398][T15690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.089691][T15690] usb 9-1: config 0 descriptor?? [ 1482.095792][T24728] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1482.146552][ T5868] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1482.315598][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 1482.323049][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1482.354709][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1482.384943][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1482.412996][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1482.450004][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1482.464332][ T5868] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1482.474152][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.482634][ T5868] usb 7-1: Product: syz [ 1482.513403][ T5868] usb 7-1: Manufacturer: syz [ 1482.541070][ T5868] usb 7-1: SerialNumber: syz [ 1482.550384][T15690] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 1482.575497][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1482.591745][T15690] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1482.592242][ T5868] usb 7-1: config 0 descriptor?? [ 1482.672639][T15690] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1482.725504][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1482.737180][ T9] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 1482.746439][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.785577][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1482.811286][ T9] usb 6-1: config 1 has no interface number 0 [ 1482.838457][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1482.848580][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1482.848808][ T9] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.865502][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1482.871188][ T9] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.876410][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1482.884193][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1482.905322][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.913590][ T9] usb 6-1: Product: syz [ 1482.918075][ T9] usb 6-1: Manufacturer: syz [ 1482.922708][ T9] usb 6-1: SerialNumber: syz [ 1482.941210][ T9] cdc_wdm 6-1:1.128: skipping garbage [ 1482.953187][ T9] cdc_wdm 6-1:1.128: cdc-wdm1: USB WDM device [ 1482.959918][ T9] cdc_wdm 6-1:1.128: Unknown control protocol [ 1482.970289][ T5851] usb 9-1: USB disconnect, device number 3 [ 1483.145297][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.153876][ T9] usb 6-1: USB disconnect, device number 26 [ 1483.156273][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.167802][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.191865][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.205623][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.212222][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.225637][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.239046][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.255919][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.266134][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.280260][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.295835][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.306133][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.324981][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.335769][ T5868] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1483.341875][ T5868] input input39: Timeout waiting for response from device. [ 1483.374787][ T5868] usb 7-1: USB disconnect, device number 22 [ 1484.777354][T24791] overlayfs: failed to resolve './file0': -2 [ 1485.142038][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.365572][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1485.990488][T24804] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1486.015522][ T9] usb 6-1: device descriptor read/64, error -71 [ 1486.277703][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1487.085632][ T9] usb 6-1: device descriptor read/64, error -71 [ 1487.238921][ T9] usb usb6-port1: attempt power cycle [ 1490.226036][ T5868] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1490.432393][ T5868] usb 9-1: Using ep0 maxpacket: 32 [ 1490.494628][ T5868] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1490.504644][ T5868] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1490.575381][ T5868] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.645667][ T5868] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1490.710993][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1490.752096][ T5868] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1490.822705][ T5868] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1490.862766][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.931357][ T5868] usb 9-1: config 0 descriptor?? [ 1491.155780][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1491.846533][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.857089][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1491.872024][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1491.892484][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.926701][ T9] usb 3-1: config 0 descriptor?? [ 1493.313844][T16258] usb 9-1: USB disconnect, device number 4 [ 1493.518138][T24906] mac80211_hwsim hwsim38 : renamed from wlan1 (while UP) [ 1494.676740][T16258] usb 3-1: USB disconnect, device number 33 [ 1497.393677][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1497.399827][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1497.435578][T15690] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1497.595554][T15690] usb 6-1: Using ep0 maxpacket: 32 [ 1497.605716][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1497.615449][T15690] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1497.624284][T15690] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1497.636272][T15690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.819390][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1497.831855][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1497.849816][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1497.863018][T15690] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1497.882366][T15690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1497.893139][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1497.913355][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1497.926642][T15690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1497.952192][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1497.963536][T15690] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1497.972832][T15690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.976616][T24948] ceph: No mds server is up or the cluster is laggy [ 1497.983747][ T9] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1498.001044][T15690] usb 6-1: config 0 descriptor?? [ 1498.007424][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.099090][ T9] usb 9-1: Product: syz [ 1498.103752][ T9] usb 9-1: Manufacturer: syz [ 1498.109237][ T9] usb 9-1: SerialNumber: syz [ 1498.168957][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1498.175026][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1498.240433][ T9] usb 9-1: config 0 descriptor?? [ 1498.521010][ T9] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1498.535433][ T9] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1498.775748][ T9] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1498.886085][ T9] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1499.604849][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.611500][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.617919][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.635858][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.654483][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.665245][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.693494][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.703587][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.710789][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.723878][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.734139][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.746842][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.753327][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.776979][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.783445][ T9] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1499.789957][ T9] input input40: Timeout waiting for response from device. [ 1499.816351][ T9] usb 9-1: USB disconnect, device number 5 [ 1500.468357][T16258] usb 6-1: USB disconnect, device number 30 [ 1501.886289][T25009] o2cb: This node has not been configured. [ 1501.892209][T25009] o2cb: Cluster check failed. Fix errors before retrying. [ 1501.899543][T25009] (syz.0.5506,25009,0):user_dlm_register:674 ERROR: status = -22 [ 1501.907505][T25009] (syz.0.5506,25009,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1502.415668][T16258] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1502.575498][T16258] usb 9-1: Using ep0 maxpacket: 32 [ 1502.581990][T25019] overlayfs: missing 'workdir' [ 1502.588931][T16258] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1502.615567][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1502.647565][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1502.678162][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1502.821603][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1502.835032][T16258] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1502.844975][T16258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.865481][T16258] usb 9-1: Product: syz [ 1502.869718][T16258] usb 9-1: Manufacturer: syz [ 1502.874344][T16258] usb 9-1: SerialNumber: syz [ 1502.886864][T16258] usb 9-1: config 0 descriptor?? [ 1503.160418][T16258] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1503.205355][T16258] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1503.347810][T16258] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1503.378424][T16258] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1503.498648][T25025] syzkaller0: entered promiscuous mode [ 1503.524555][T25025] syzkaller0: entered allmulticast mode [ 1503.605646][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.614073][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.623069][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.630990][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.637388][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.645577][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.655518][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.665728][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.673429][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.695883][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.715573][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.735666][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.755818][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.843281][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.911655][T16258] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1503.982937][T16258] input input41: Timeout waiting for response from device. [ 1504.153694][T16258] usb 9-1: USB disconnect, device number 6 [ 1504.616118][ T5851] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1504.796060][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 1504.803057][ T5851] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1504.835640][ T5851] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1504.865343][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.876757][T25050] o2cb: This node has not been configured. [ 1504.882689][ T5851] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1504.883537][T25050] o2cb: Cluster check failed. Fix errors before retrying. [ 1504.892966][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1504.915552][ T5851] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1504.925344][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1504.945256][ T5851] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1504.963811][T25052] overlayfs: missing 'lowerdir' [ 1504.969776][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.005506][ T5851] usb 1-1: config 0 descriptor?? [ 1505.005523][T25050] (syz.8.5522,25050,1):user_dlm_register:674 ERROR: status = -22 [ 1505.045046][T25050] (syz.8.5522,25050,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1507.033353][T25088] overlayfs: missing 'lowerdir' [ 1507.422327][T25096] o2cb: This node has not been configured. [ 1507.433475][T25096] o2cb: Cluster check failed. Fix errors before retrying. [ 1507.453330][T25096] (syz.2.5537,25096,0):user_dlm_register:674 ERROR: status = -22 [ 1507.481544][T25096] (syz.2.5537,25096,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1508.068119][ T57] usb 1-1: USB disconnect, device number 15 [ 1510.361004][T25127] overlayfs: missing 'lowerdir' [ 1510.556505][T19041] Bluetooth: (null): Too short H5 packet [ 1510.562551][T19041] Bluetooth: (null): Invalid header checksum [ 1510.733873][T19041] Bluetooth: (null): Invalid header checksum [ 1510.854672][T19041] Bluetooth: (null): Invalid header checksum [ 1510.861180][T19041] Bluetooth: (null): Invalid header checksum [ 1510.900249][ T3012] Bluetooth: (null): Invalid header checksum [ 1511.997468][T25138] trusted_key: syz.6.5548 sent an empty control message without MSG_MORE. [ 1512.466026][T16258] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1512.635627][T16258] usb 7-1: Using ep0 maxpacket: 32 [ 1512.708964][T16258] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1512.864536][T16258] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1512.879608][T16258] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.944255][T16258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1512.957765][T16258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1512.971142][T16258] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1513.097338][T16258] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1513.113985][T16258] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1513.134347][T16258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.235319][T16258] usb 7-1: config 0 descriptor?? [ 1513.647189][T25173] ipvlan0: entered promiscuous mode [ 1513.680416][T25173] ipvlan0: entered allmulticast mode [ 1513.998223][T25173] veth0_vlan: entered allmulticast mode [ 1514.225161][ T5851] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1514.378136][ T5851] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1514.390999][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.430484][ T5851] usb 6-1: config 0 descriptor?? [ 1514.504435][T25179] capability: warning: `syz.0.5561' uses 32-bit capabilities (legacy support in use) [ 1514.667515][ T5851] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 1514.686219][ T5851] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1515.414743][ T5851] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1515.421779][ T5851] [drm] Initialized udl on minor 2 [ 1515.454386][T15690] usb 7-1: USB disconnect, device number 23 [ 1515.613973][ T5851] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1515.632061][ T5851] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.640037][T15690] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.663295][ T5851] usb 6-1: USB disconnect, device number 31 [ 1515.669847][T15690] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1515.714571][T15690] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.996657][T16723] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1516.343577][T16723] usb 9-1: Using ep0 maxpacket: 32 [ 1516.357386][T16723] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1516.369623][T16723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1516.380658][T16723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1516.390505][T16723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1516.401919][T16723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1516.955780][T16723] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1516.965010][T16723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.976662][T16723] usb 9-1: Product: syz [ 1516.984319][T16723] usb 9-1: Manufacturer: syz [ 1516.993773][T16723] usb 9-1: SerialNumber: syz [ 1517.014766][T16723] usb 9-1: config 0 descriptor?? [ 1517.920923][T16723] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1518.321239][T16723] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1518.346234][T16723] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1518.378219][T16723] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1519.039061][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.045531][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.051878][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.058250][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.065625][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.072650][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.445806][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.456164][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.464030][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.473846][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.483882][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.495778][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.505997][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.523870][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.538980][T16723] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1519.545019][T16723] input input43: Timeout waiting for response from device. [ 1519.906083][T16723] usb 9-1: USB disconnect, device number 7 [ 1520.156167][T15056] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1520.526503][T15056] usb 7-1: Using ep0 maxpacket: 32 [ 1520.537519][T15056] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1520.556339][T15056] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1520.608433][T15056] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.644058][T15056] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1520.678263][T25243] syzkaller0: entered promiscuous mode [ 1520.686900][T15056] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1520.702540][T25243] syzkaller0: entered allmulticast mode [ 1520.713282][T15056] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1520.740870][T15056] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1520.755200][T15056] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1520.770618][T15056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.811702][T15056] usb 7-1: config 0 descriptor?? [ 1524.054801][T16258] usb 7-1: USB disconnect, device number 24 [ 1524.505615][T16723] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1525.365455][T16723] usb 6-1: Using ep0 maxpacket: 32 [ 1525.747744][T16723] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1525.759716][T16723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1525.881856][T16723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1525.891751][T16723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1525.902988][T16723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1525.914264][ T57] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1525.985582][T16723] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1525.995521][T16723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.033957][T16723] usb 6-1: Product: syz [ 1526.038363][T16723] usb 6-1: Manufacturer: syz [ 1526.045169][T16723] usb 6-1: SerialNumber: syz [ 1526.062210][T16723] usb 6-1: config 0 descriptor?? [ 1526.081305][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.111144][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1526.140490][ T57] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1526.151581][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.224802][ T57] usb 7-1: config 0 descriptor?? [ 1526.233475][ T57] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1526.617042][T16723] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1526.625994][T16723] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1526.643910][T16723] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1527.390072][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.400813][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.408187][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.414591][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.421696][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.428592][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.434993][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.441872][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.448490][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.454845][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.461652][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.468961][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.475292][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.484210][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.490858][T16723] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1527.497118][T16723] input input44: Timeout waiting for response from device. [ 1527.524867][T16723] usb 6-1: USB disconnect, device number 32 [ 1528.502428][T16258] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1528.894537][T16258] usb 9-1: Using ep0 maxpacket: 32 [ 1528.901350][T16258] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1528.923941][T16258] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1528.932795][T16258] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1528.942209][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1528.952296][T16258] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1528.962714][T16258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1529.060469][ T9] usb 7-1: USB disconnect, device number 25 [ 1529.088856][T16258] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1529.100818][T25373] syzkaller0: entered promiscuous mode [ 1529.102106][T16258] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1529.117452][T16258] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.125030][T25373] syzkaller0: entered allmulticast mode [ 1529.653977][T16258] usb 9-1: config 0 descriptor?? [ 1531.475501][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1531.742814][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1531.749611][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1531.762565][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1531.910678][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1532.076119][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1532.228376][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1532.241645][T25415] fuse: Unknown parameter 'user_id00000000000000000000' [ 1532.266215][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1532.276373][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.284508][ T9] usb 3-1: Product: syz [ 1532.288906][ T9] usb 3-1: Manufacturer: syz [ 1532.302845][ T9] usb 3-1: SerialNumber: syz [ 1532.309456][ T9] usb 3-1: config 0 descriptor?? [ 1532.325765][ T5851] usb 9-1: USB disconnect, device number 8 [ 1532.361322][T16258] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1532.757959][T16258] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.769107][T16258] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1532.782674][T16258] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1532.791828][T16258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.805588][T16258] usb 7-1: config 0 descriptor?? [ 1532.929782][ T9] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1532.949723][ T9] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1532.960033][ T9] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1532.965257][T16258] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1533.176645][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.188765][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.217213][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.335791][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.352320][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.372566][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1533.391495][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.090680][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.097146][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.103498][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.110459][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.125779][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.132137][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.155937][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.185858][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1534.191942][ T9] input input45: Timeout waiting for response from device. [ 1534.220569][ T9] usb 3-1: USB disconnect, device number 34 [ 1535.072869][T25455] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1535.601147][T25457] syzkaller0: entered promiscuous mode [ 1535.618340][T25457] syzkaller0: entered allmulticast mode [ 1535.732986][T16258] usb 7-1: USB disconnect, device number 26 [ 1537.216004][ T5851] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1537.511236][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 1537.525091][ T5851] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1537.544125][T25467] Cannot find add_set index 0 as target [ 1537.651148][T16258] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1537.741990][ T5851] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1537.765486][ T5851] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1537.774528][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1537.806355][T16258] usb 7-1: Using ep0 maxpacket: 32 [ 1537.811251][ T5851] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1537.813107][T16258] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1537.860090][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1537.956355][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1537.969661][ T5851] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1537.975953][T16258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1537.979592][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.990236][T16258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1538.015512][T16258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1538.027227][T16258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1538.041540][T16258] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1538.052025][T16258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.064769][ T5851] usb 6-1: config 0 descriptor?? [ 1538.221416][T16258] usb 7-1: Product: syz [ 1538.225718][T16258] usb 7-1: Manufacturer: syz [ 1538.230827][T16258] usb 7-1: SerialNumber: syz [ 1538.264527][T16258] usb 7-1: config 0 descriptor?? [ 1538.535579][T16723] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1538.696957][T16723] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.713808][T16723] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1538.755480][T16723] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1538.784219][T16258] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1538.790444][T16723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.815806][T16258] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1538.827926][T16258] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1538.834344][T16723] usb 9-1: config 0 descriptor?? [ 1538.864282][T16723] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1539.040877][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.051857][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.058801][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.065135][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.079317][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.213483][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.220568][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.227261][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.243385][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.249828][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.258110][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.264753][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.271253][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.280318][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.735276][T16258] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1539.741625][T16258] input input46: Timeout waiting for response from device. [ 1539.754483][T16258] usb 7-1: USB disconnect, device number 27 [ 1541.098394][ T5851] usb 6-1: USB disconnect, device number 33 [ 1541.419155][T15056] usb 9-1: USB disconnect, device number 9 [ 1542.091921][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1542.155557][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1542.427711][T25575] ceph: No mds server is up or the cluster is laggy [ 1542.843642][T16723] libceph: connect (1)[c::]:6789 error -101 [ 1542.852772][T16723] libceph: mon0 (1)[c::]:6789 connect error [ 1544.285586][T16723] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1544.522462][T16723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.532691][T16723] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1544.546663][T16723] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1544.716812][T16723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.745030][T16723] usb 1-1: config 0 descriptor?? [ 1544.759124][T16723] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1546.187438][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.743730][T16258] usb 1-1: USB disconnect, device number 16 [ 1548.557170][T25659] block device autoloading is deprecated and will be removed. [ 1549.004009][T15056] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1549.155471][T15056] usb 7-1: Using ep0 maxpacket: 32 [ 1549.162823][T15056] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 1549.180290][T15056] usb 7-1: config 0 has no interface number 0 [ 1549.206349][T15056] usb 7-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1549.243109][T15056] usb 7-1: config 0 interface 244 has no altsetting 0 [ 1549.270539][T15056] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1549.299988][T15056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.323118][T15056] usb 7-1: Product: syz [ 1549.335343][T15056] usb 7-1: Manufacturer: syz [ 1549.349279][T15056] usb 7-1: SerialNumber: syz [ 1549.367999][T15056] usb 7-1: config 0 descriptor?? [ 1549.408797][T15056] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort found [ 1549.608770][T25659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.617737][T25659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.651500][T15056] snd_usb_toneport 7-1:0.244: cannot get proper max packet size [ 1550.659543][T15056] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort now disconnected [ 1550.668720][T15056] snd_usb_toneport 7-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1550.861100][T15056] usb 7-1: USB disconnect, device number 28 [ 1566.562729][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 1574.833442][T25878] pim6reg1: entered allmulticast mode [ 1574.916440][ T5868] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1576.328316][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.340524][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.351335][ T5868] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1576.361206][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.374493][ T5868] usb 6-1: config 0 descriptor?? [ 1576.597113][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 1576.609171][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1576.633302][ T5868] usb 6-1: USB disconnect, device number 34 [ 1579.762124][T25929] block device autoloading is deprecated and will be removed. [ 1579.994776][ T29] audit: type=1326 audit(1734011283.636:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25939 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1580.041309][ T29] audit: type=1326 audit(1734011283.666:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25939 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1580.475489][T15056] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1580.544791][ T29] audit: type=1326 audit(1734011284.106:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25939 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1580.548333][T25947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1580.631936][ T29] audit: type=1326 audit(1734011284.106:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25939 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1580.671867][ T29] audit: type=1326 audit(1734011284.106:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25939 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105bb85d19 code=0x7ffc0000 [ 1580.695595][T15056] usb 9-1: Using ep0 maxpacket: 32 [ 1580.702493][T15056] usb 9-1: config 0 has an invalid interface number: 244 but max is 0 [ 1580.715513][T16665] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1580.835619][T15056] usb 9-1: config 0 has no interface number 0 [ 1580.849846][T15056] usb 9-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1580.878822][T16665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.115213][T16665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.144156][T15056] usb 9-1: config 0 interface 244 has no altsetting 0 [ 1581.153395][T16665] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1581.170535][T15056] usb 9-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1581.180283][T16665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.193003][T15056] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.210517][T15056] usb 9-1: Product: syz [ 1581.219139][T15056] usb 9-1: Manufacturer: syz [ 1581.232192][T15056] usb 9-1: SerialNumber: syz [ 1581.238655][T16665] usb 6-1: config 0 descriptor?? [ 1581.263465][T15056] usb 9-1: config 0 descriptor?? [ 1581.272318][T15056] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort found [ 1581.456892][T16665] usbhid 6-1:0.0: can't add hid device: -71 [ 1581.464141][T16665] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1581.486591][T25929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.495280][T25929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.514524][T15056] snd_usb_toneport 9-1:0.244: cannot get proper max packet size [ 1581.551568][T16665] usb 6-1: USB disconnect, device number 35 [ 1581.565775][T15056] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort now disconnected [ 1581.604928][T15056] snd_usb_toneport 9-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1581.770415][T15056] usb 9-1: USB disconnect, device number 10 [ 1585.605291][T26005] pim6reg1: entered allmulticast mode [ 1588.260636][T26047] fuse: Unknown parameter 'grou00000000000000000000' [ 1588.446329][T26045] hfs: unable to load iocharset "io#harset" [ 1591.265732][T26120] pim6reg1: entered allmulticast mode [ 1591.277649][T26121] o2cb: This node has not been configured. [ 1591.283594][T26121] o2cb: Cluster check failed. Fix errors before retrying. [ 1591.290906][T26121] (syz.8.5805,26121,0):user_dlm_register:674 ERROR: status = -22 [ 1591.298830][T26121] (syz.8.5805,26121,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1594.681599][T26181] o2cb: This node has not been configured. [ 1594.687748][T26181] o2cb: Cluster check failed. Fix errors before retrying. [ 1594.694870][T26181] (syz.8.5819,26181,1):user_dlm_register:674 ERROR: status = -22 [ 1594.702692][T26181] (syz.8.5819,26181,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1595.075658][T26190] pim6reg1: entered allmulticast mode [ 1597.810543][T26201] 9pnet: Unknown protocol version 9p200 [ 1598.327300][T26245] lo speed is unknown, defaulting to 1000 [ 1598.333164][T26245] lo speed is unknown, defaulting to 1000 [ 1598.339485][T26245] lo speed is unknown, defaulting to 1000 [ 1598.347033][T26245] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1598.358015][T26245] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1598.374882][T26245] lo speed is unknown, defaulting to 1000 [ 1598.381547][T26245] lo speed is unknown, defaulting to 1000 [ 1598.388283][T26245] lo speed is unknown, defaulting to 1000 [ 1598.394811][T26245] lo speed is unknown, defaulting to 1000 [ 1598.401390][T26245] lo speed is unknown, defaulting to 1000 [ 1598.407964][T26245] lo speed is unknown, defaulting to 1000 [ 1598.414501][T26245] lo speed is unknown, defaulting to 1000 [ 1598.421136][T26245] lo speed is unknown, defaulting to 1000 [ 1598.427917][T26245] lo speed is unknown, defaulting to 1000 [ 1598.435699][T26245] lo speed is unknown, defaulting to 1000 [ 1598.442824][T26245] lo speed is unknown, defaulting to 1000 [ 1598.531461][T26238] netlink: 'syz.5.5830': attribute type 39 has an invalid length. [ 1598.855524][ T5851] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1599.320549][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.331610][ T5851] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1599.340815][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.371139][ T5851] usb 1-1: config 0 descriptor?? [ 1599.407628][ T5851] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1599.485307][T26270] pim6reg1: entered allmulticast mode [ 1601.846993][T16723] usb 1-1: USB disconnect, device number 17 [ 1605.432120][T26378] syz.5.5858: attempt to access beyond end of device [ 1605.432120][T26378] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1605.480903][T26378] FAT-fs (nbd5): unable to read boot sector [ 1607.253372][T26407] pim6reg1: entered allmulticast mode [ 1607.627914][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.065560][T15690] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1608.408999][T15690] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1608.421105][T15690] usb 7-1: config 0 has no interface number 0 [ 1608.428703][T15690] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.462876][T15690] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1608.474767][T15690] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1608.486119][T15690] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1608.497922][T15690] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1608.513834][T15690] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1608.524071][T15690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.555304][T15690] usb 7-1: config 0 descriptor?? [ 1608.564606][T26423] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1608.580675][T15690] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1608.836728][ T5868] usb 7-1: USB disconnect, device number 29 [ 1608.836785][ C1] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 1608.850260][T26421] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1608.859473][ T5868] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1609.264894][T26419] delete_channel: no stack [ 1609.567802][T15690] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1610.244288][T15690] usb 3-1: Using ep0 maxpacket: 32 [ 1610.316335][T15690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.382433][T15690] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1610.612790][T15690] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1610.622015][T15690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.632436][T15690] usb 3-1: config 0 descriptor?? [ 1610.640560][T15690] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1610.861809][ T5851] usb 3-1: USB disconnect, device number 35 [ 1612.123913][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.176755][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.184336][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1612.649425][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1612.681348][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1612.689831][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1612.740187][T26460] lo speed is unknown, defaulting to 1000 [ 1612.831798][T26478] pim6reg1: entered allmulticast mode [ 1613.001984][T26460] chnl_net:caif_netlink_parms(): no params data found [ 1613.249933][T26460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.294237][T26460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.345781][T26460] bridge_slave_0: entered allmulticast mode [ 1613.359534][T26460] bridge_slave_0: entered promiscuous mode [ 1613.368319][T26460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.376013][T26460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.387996][T26460] bridge_slave_1: entered allmulticast mode [ 1613.438887][T26460] bridge_slave_1: entered promiscuous mode [ 1613.703290][T26460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.758408][T26460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.850942][T26460] team0: Port device team_slave_0 added [ 1613.879811][T26460] team0: Port device team_slave_1 added [ 1613.897860][T26494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.979814][T26494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.003531][T26460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.020019][T26460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1614.046125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.053622][T26460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.076643][T26494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.122140][T26460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.141720][T26460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1614.173472][T26460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.197400][T26494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.245762][T15056] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1614.274301][T26460] hsr_slave_0: entered promiscuous mode [ 1614.282959][T26460] hsr_slave_1: entered promiscuous mode [ 1614.294313][T26460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1614.309203][T26460] Cannot create hsr debugfs directory [ 1614.370324][T26494] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.405537][T15056] usb 7-1: Using ep0 maxpacket: 32 [ 1614.414285][T15056] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1614.425637][T15056] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1614.448450][T26494] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.457362][T15056] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1614.494470][T15056] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1614.505532][T26494] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.516645][T15056] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1614.534148][T15056] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1614.542125][T26494] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.547934][T15056] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1614.565660][T15056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.596081][T15056] usb 7-1: config 0 descriptor?? [ 1614.700799][T26460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.745757][ T5834] Bluetooth: hci2: command tx timeout [ 1614.754660][T26460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.820453][T15056] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1614.821256][T26460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.921815][T26460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.023850][ C1] usblp0: nonzero read bulk status received: -71 [ 1615.030982][T15056] usb 7-1: USB disconnect, device number 30 [ 1615.112103][T26460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1615.154729][T26460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1615.190600][T26460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1615.201295][T26460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1615.238904][T26496] usblp0: removed [ 1615.568252][T26460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.632864][T26460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.686298][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.693517][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.777868][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.785063][ T6605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.825838][ T5834] Bluetooth: hci2: command tx timeout [ 1617.105827][T26460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.258091][T26460] veth0_vlan: entered promiscuous mode [ 1617.300271][T26460] veth1_vlan: entered promiscuous mode [ 1617.317305][T26540] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1617.371389][T26460] veth0_macvtap: entered promiscuous mode [ 1617.382597][T26460] veth1_macvtap: entered promiscuous mode [ 1617.399973][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.410708][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.421525][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.432049][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.441992][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.452554][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.462969][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.473692][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.483604][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.494131][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.504092][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.514764][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.527479][T26460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.538605][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.549376][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.559508][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.570234][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.580330][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.591070][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.601218][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.611951][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.622148][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.632915][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.643106][T26460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.653828][T26460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.675034][T26460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.694182][T26460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.703158][T26460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.712358][T26460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.721394][T26460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.730328][T24642] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1617.842308][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.850561][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.876704][T24642] usb 6-1: Using ep0 maxpacket: 32 [ 1617.884081][T24642] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1617.896563][T24642] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1617.913558][T24642] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1618.323554][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.335195][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.430977][T24642] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1618.440789][T24642] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1618.450586][T24642] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1618.463729][T24642] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1618.472911][T24642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.483892][T24642] usb 6-1: config 0 descriptor?? [ 1618.714780][T24642] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1618.912317][ T5834] Bluetooth: hci2: command tx timeout [ 1619.265978][T24642] usb 6-1: USB disconnect, device number 36 [ 1619.295859][T24642] usblp0: removed [ 1619.332416][T26570] netlink: 'syz.0.5872': attribute type 2 has an invalid length. [ 1619.341078][T26570] netlink: 'syz.0.5872': attribute type 11 has an invalid length. [ 1619.349446][T26570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5872'. [ 1620.035590][T16723] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1620.565549][T16723] usb 1-1: Using ep0 maxpacket: 8 [ 1620.574044][T16723] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1620.584065][T16723] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1620.592885][T16723] usb 1-1: Product: syz [ 1620.597639][T16723] usb 1-1: Manufacturer: syz [ 1620.607674][T16723] usb 1-1: SerialNumber: syz [ 1620.629650][T16723] usb 1-1: config 0 descriptor?? [ 1620.911340][T24642] usb 1-1: USB disconnect, device number 18 [ 1620.985761][ T5834] Bluetooth: hci2: command tx timeout [ 1622.388773][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1627.523672][ T57] IPVS: starting estimator thread 0... [ 1627.615573][T26685] IPVS: using max 32 ests per chain, 76800 per kthread [ 1631.113702][T26717] infiniband syz0: set active [ 1631.119153][T26717] infiniband syz0: added bond0 [ 1631.129316][T26717] syz0: rxe_create_cq: returned err = -12 [ 1631.138562][T26717] infiniband syz0: Couldn't create ib_mad CQ [ 1631.175144][T26717] infiniband syz0: Couldn't open port 1 [ 1631.220720][T26717] RDS/IB: syz0: added [ 1631.229093][T26717] smc: adding ib device syz0 with port count 1 [ 1631.240867][T26717] smc: ib device syz0 port 1 has pnetid [ 1632.145470][ T5851] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1632.305469][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 1632.327342][ T5851] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1632.354331][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1632.399157][ T5851] usb 7-1: Product: syz [ 1632.425016][ T5851] usb 7-1: Manufacturer: syz [ 1632.450231][ T5851] usb 7-1: SerialNumber: syz [ 1632.706539][ T5851] usb 7-1: config 0 descriptor?? [ 1632.959380][T15690] usb 7-1: USB disconnect, device number 31 [ 1633.897116][T26773] o2cb: This node has not been configured. [ 1633.903067][T26773] o2cb: Cluster check failed. Fix errors before retrying. [ 1633.910609][T26773] (syz.6.5961,26773,0):user_dlm_register:674 ERROR: status = -22 [ 1633.918544][T26773] (syz.6.5961,26773,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1634.022551][T26775] ipvlan0: entered promiscuous mode [ 1634.028297][T26775] ipvlan0: entered allmulticast mode [ 1634.033619][T26775] veth0_vlan: entered allmulticast mode [ 1636.467552][T26813] o2cb: This node has not been configured. [ 1636.473450][T26813] o2cb: Cluster check failed. Fix errors before retrying. [ 1636.481081][T26813] (syz.8.5973,26813,0):user_dlm_register:674 ERROR: status = -22 [ 1636.488905][T26813] (syz.8.5973,26813,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1636.871795][T26820] ipvlan0: entered promiscuous mode [ 1636.877167][T26820] ipvlan0: entered allmulticast mode [ 1636.882513][T26820] veth0_vlan: entered allmulticast mode [ 1637.765532][T13559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1637.776061][T13559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1637.783353][T13559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1637.792910][T13559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1637.800816][T13559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1637.808369][T13559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1637.957184][T26826] lo speed is unknown, defaulting to 1000 [ 1639.299770][T26856] o2cb: This node has not been configured. [ 1639.305797][T26856] o2cb: Cluster check failed. Fix errors before retrying. [ 1639.312946][T26856] (syz.0.5985,26856,0):user_dlm_register:674 ERROR: status = -22 [ 1639.320794][T26856] (syz.0.5985,26856,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1639.418928][T26826] chnl_net:caif_netlink_parms(): no params data found [ 1640.737531][T13559] Bluetooth: hci1: command tx timeout [ 1642.064285][T26826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.083847][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.249931][T26826] bridge_slave_0: entered allmulticast mode [ 1642.268628][T26826] bridge_slave_0: entered promiscuous mode [ 1642.282186][T26826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.295492][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.311112][T26826] bridge_slave_1: entered allmulticast mode [ 1642.383034][T26826] bridge_slave_1: entered promiscuous mode [ 1643.011604][T13559] Bluetooth: hci1: command tx timeout [ 1643.403198][T26826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.414739][T26826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.552256][T26826] team0: Port device team_slave_0 added [ 1643.582237][T26826] team0: Port device team_slave_1 added [ 1643.658912][T26826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.688110][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.754655][T26826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.791280][T26826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.813662][T26826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.887416][T26826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.988472][T26826] hsr_slave_0: entered promiscuous mode [ 1644.013940][T26826] hsr_slave_1: entered promiscuous mode [ 1644.033608][T26826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1644.057534][T26826] Cannot create hsr debugfs directory [ 1644.439100][T26826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.539469][T26826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.610755][T26826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.673088][T26826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.878767][T26826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1644.912718][T26826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1644.940553][T26826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1644.969612][T26826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1645.146216][T13559] Bluetooth: hci1: command tx timeout [ 1645.174743][T26826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.206910][T26826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.229703][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.236877][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.328560][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.335725][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.404022][T26826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1645.421344][T26826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.178312][T26826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.232121][T13559] Bluetooth: hci1: command tx timeout [ 1647.317766][T26938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6005'. [ 1647.448995][T26826] veth0_vlan: entered promiscuous mode [ 1647.493968][T26826] veth1_vlan: entered promiscuous mode [ 1648.039443][T26826] veth0_macvtap: entered promiscuous mode [ 1648.051679][T26826] veth1_macvtap: entered promiscuous mode [ 1648.225574][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.236540][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.246621][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.257113][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.267091][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.277873][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.287797][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.298356][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.308264][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.318942][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.329034][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.339682][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.349605][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.360208][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.371248][T26826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.380854][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.391373][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.401376][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.412173][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.422311][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.432913][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.442820][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.453321][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.463250][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.473737][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.483670][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.494755][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.506147][T26826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.517045][T26826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.528270][T26826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.539800][T26826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.548621][T26826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.557393][T26826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.566168][T26826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.186831][T13559] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 1649.328231][ T6605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.346159][ T6605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.416869][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.431831][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.918797][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6024'. [ 1657.895504][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6027'. [ 1660.203965][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6036'. [ 1669.216301][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1680.864588][T27253] ipvlan0: entered promiscuous mode [ 1680.870259][T27253] ipvlan0: entered allmulticast mode [ 1680.877068][T27253] veth0_vlan: entered allmulticast mode [ 1691.929340][T27325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1691.937975][T27325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1691.946293][T27325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1691.953991][T27325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1691.968175][T27325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1691.975960][T27325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1693.955278][T27339] Cannot find add_set index 0 as target [ 1694.106373][T27325] Bluetooth: hci0: command tx timeout [ 1696.185505][T27325] Bluetooth: hci0: command tx timeout [ 1698.265478][T27325] Bluetooth: hci0: command tx timeout [ 1700.345660][T27325] Bluetooth: hci0: command tx timeout [ 1704.808396][T13559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1704.816012][T13559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1704.823283][T13559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1704.832331][T13559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1704.842140][T13559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1704.853959][T13559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1706.742018][T27325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1706.756749][T27325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1706.768499][T27325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1706.776251][T27325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1706.784769][T27325] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1706.792088][T27325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1706.905679][T27325] Bluetooth: hci6: command tx timeout [ 1708.825621][T27325] Bluetooth: hci7: command tx timeout [ 1708.985683][T27325] Bluetooth: hci6: command tx timeout [ 1709.943735][T13559] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1709.954336][T13559] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1709.965827][T13559] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1709.975965][T13559] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1709.985094][T13559] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1709.993460][T13559] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1710.047922][T13559] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1710.055237][T13559] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1710.071320][T13559] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1710.079188][T13559] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1710.087292][T13559] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1710.094601][T13559] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1710.905641][T13559] Bluetooth: hci7: command tx timeout [ 1711.065690][T13559] Bluetooth: hci6: command tx timeout [ 1712.025588][T13559] Bluetooth: hci8: command tx timeout [ 1712.105673][T13559] Bluetooth: hci9: command tx timeout [ 1712.985559][T13559] Bluetooth: hci7: command tx timeout [ 1713.145649][T13559] Bluetooth: hci6: command tx timeout [ 1714.105684][T13559] Bluetooth: hci8: command tx timeout [ 1714.185528][T13559] Bluetooth: hci9: command tx timeout [ 1715.065600][T13559] Bluetooth: hci7: command tx timeout [ 1716.189059][T13559] Bluetooth: hci8: command tx timeout [ 1716.265613][T13559] Bluetooth: hci9: command tx timeout [ 1718.265498][T13559] Bluetooth: hci8: command tx timeout [ 1718.345784][T13559] Bluetooth: hci9: command tx timeout [ 1730.509533][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.705471][T13559] Bluetooth: hci2: command 0x0406 tx timeout [ 1752.281416][T13559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1752.289054][T13559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1752.298349][T13559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1752.313593][T13559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1752.327206][T13559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1752.334523][T13559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1763.307821][T27411] Bluetooth: hci1: command 0x0406 tx timeout [ 1765.428591][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1765.440007][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1765.449306][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1765.458034][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1765.473488][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1765.481616][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1767.822117][T27419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1767.830231][T27419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1767.844791][T27419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1767.852675][T27419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1767.873283][T27419] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1767.881300][T27419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1769.877414][T27414] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1769.884801][T27414] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1769.899542][T27414] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1769.910395][T27414] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1769.923398][T27414] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1769.933846][T27414] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1770.749507][T27427] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1770.761016][T27427] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1770.769476][T27427] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1770.777457][T27427] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1770.786336][T27427] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1770.794377][T27427] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1790.549733][T27427] Bluetooth: hci11: command tx timeout [ 1791.960927][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.585532][T13559] Bluetooth: hci3: command tx timeout [ 1792.591655][T13559] Bluetooth: hci11: command tx timeout [ 1792.597558][T27411] Bluetooth: hci10: command tx timeout [ 1792.603082][T27411] Bluetooth: hci5: command tx timeout [ 1792.608701][T27427] Bluetooth: hci2: command tx timeout [ 1794.665556][T27411] Bluetooth: hci5: command tx timeout [ 1794.671032][T27411] Bluetooth: hci11: command tx timeout [ 1794.685501][T13559] Bluetooth: hci2: command tx timeout [ 1794.690980][T13559] Bluetooth: hci10: command tx timeout [ 1794.696541][T27419] Bluetooth: hci3: command tx timeout [ 1796.758304][T27411] Bluetooth: hci11: command tx timeout [ 1796.763869][T27411] Bluetooth: hci3: command tx timeout [ 1796.773042][T27411] Bluetooth: hci10: command tx timeout [ 1796.778739][T27427] Bluetooth: hci2: command tx timeout [ 1796.784334][T27427] Bluetooth: hci5: command tx timeout [ 1798.035279][ C1] sched: DL replenish lagged too much [ 1798.831122][T27419] Bluetooth: hci5: command tx timeout [ 1798.836836][T27427] Bluetooth: hci10: command tx timeout [ 1798.842359][T27427] Bluetooth: hci2: command tx timeout [ 1798.848202][T27411] Bluetooth: hci3: command tx timeout [ 1813.504386][T27427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1813.511739][T27427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1813.519369][T27427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1813.528309][T27427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1813.535876][T27427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1813.543157][T27427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1815.625661][T13559] Bluetooth: hci0: command tx timeout [ 1817.705848][T13559] Bluetooth: hci0: command tx timeout [ 1819.785615][T13559] Bluetooth: hci0: command tx timeout [ 1821.865674][T13559] Bluetooth: hci0: command tx timeout [ 1825.881277][T27427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1825.889980][T27427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1825.898018][T27427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1825.906046][T27427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1825.913611][T27427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1825.921306][T27427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1827.945655][T13559] Bluetooth: hci1: command tx timeout [ 1828.404429][T27427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1828.415609][T27427] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1828.422930][T27427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1828.434457][T27427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1828.442124][T27427] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1828.451152][T27427] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1830.025981][T13559] Bluetooth: hci1: command tx timeout [ 1830.347417][T27427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1830.354857][T27427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1830.366623][T27427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1830.386735][T27427] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1830.394282][T27427] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1830.402637][T27427] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1830.505384][T27427] Bluetooth: hci4: command tx timeout [ 1831.403578][T13559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1831.411079][T13559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1831.419112][T13559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1831.427938][T13559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1831.435818][T13559] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1831.443085][T13559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1832.105764][T13559] Bluetooth: hci1: command tx timeout [ 1832.428508][T13559] Bluetooth: hci6: command tx timeout [ 1832.585613][T13559] Bluetooth: hci4: command tx timeout [ 1833.467264][T13559] Bluetooth: hci7: command tx timeout [ 1834.185931][T13559] Bluetooth: hci1: command tx timeout [ 1834.505527][T13559] Bluetooth: hci6: command tx timeout [ 1834.665646][T13559] Bluetooth: hci4: command tx timeout [ 1835.546307][T13559] Bluetooth: hci7: command tx timeout [ 1836.585436][T13559] Bluetooth: hci6: command tx timeout [ 1836.745691][T13559] Bluetooth: hci4: command tx timeout [ 1837.625733][T13559] Bluetooth: hci7: command tx timeout [ 1838.665520][T13559] Bluetooth: hci6: command tx timeout [ 1839.705378][T13559] Bluetooth: hci7: command tx timeout [ 1853.390920][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1874.632824][T27427] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1874.642740][T27427] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1874.659586][T27427] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1874.667724][T27427] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1874.675652][T27427] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1874.683643][T27427] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1876.745579][T27427] Bluetooth: hci8: command tx timeout [ 1878.825634][T27427] Bluetooth: hci8: command tx timeout [ 1880.905663][T27427] Bluetooth: hci8: command tx timeout [ 1882.985707][T13559] Bluetooth: hci8: command tx timeout [ 1885.385643][ T30] INFO: task kworker/u8:6:2982 blocked for more than 143 seconds. [ 1885.393547][ T30] Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1885.431325][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1885.482614][ T30] task:kworker/u8:6 state:D stack:21264 pid:2982 tgid:2982 ppid:2 flags:0x00004000 [ 1885.577703][ T30] Workqueue: events_unbound linkwatch_event [ 1885.625536][ T30] Call Trace: [ 1885.628914][ T30] [ 1885.631872][ T30] __schedule+0x17fb/0x4be0 [ 1885.685805][ T30] ? rcu_is_watching+0x15/0xb0 [ 1885.690670][ T30] ? lock_release+0xbf/0xa30 [ 1885.721609][ T30] ? __pfx___schedule+0x10/0x10 [ 1885.740184][ T30] ? __pfx_lock_release+0x10/0x10 [ 1885.754543][ T30] ? rcu_is_watching+0x15/0xb0 [ 1885.765740][ T30] ? kthread_data+0x52/0xd0 [ 1885.770325][ T30] ? schedule+0x90/0x320 [ 1885.781820][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1885.788147][ T30] ? schedule+0x90/0x320 [ 1885.792926][ T30] schedule+0x14b/0x320 [ 1885.803079][ T30] schedule_preempt_disabled+0x13/0x30 [ 1885.810424][ T30] __mutex_lock+0x7e7/0xee0 [ 1885.815008][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1885.825347][ T30] ? linkwatch_event+0xe/0x60 [ 1885.830101][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1885.835173][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1885.848523][ T30] ? rcu_is_watching+0x15/0xb0 [ 1885.853369][ T30] ? process_scheduled_works+0x976/0x1840 [ 1885.864462][ T30] linkwatch_event+0xe/0x60 [ 1885.873889][ T30] process_scheduled_works+0xa66/0x1840 [ 1885.883418][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1885.893952][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1885.903371][ T30] ? assign_work+0x364/0x3d0 [ 1885.911107][ T30] worker_thread+0x870/0xd30 [ 1885.919636][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1885.924734][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1885.940550][ T30] kthread+0x2f0/0x390 [ 1885.944713][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1885.951884][ T30] ? __pfx_kthread+0x10/0x10 [ 1885.962476][ T30] ret_from_fork+0x4b/0x80 [ 1885.968216][ T30] ? __pfx_kthread+0x10/0x10 [ 1885.972872][ T30] ret_from_fork_asm+0x1a/0x30 [ 1885.985582][ T30] [ 1885.988801][ T30] INFO: task syz.8.6103:27322 blocked for more than 143 seconds. [ 1886.003754][ T30] Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1886.011892][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1886.038591][ T30] task:syz.8.6103 state:D stack:26704 pid:27322 tgid:27310 ppid:24237 flags:0x00004002 [ 1886.055297][ T30] Call Trace: [ 1886.058651][ T30] [ 1886.061620][ T30] __schedule+0x17fb/0x4be0 [ 1886.076340][ T30] ? __pfx___schedule+0x10/0x10 [ 1886.081280][ T30] ? __pfx_lock_release+0x10/0x10 [ 1886.094859][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.101235][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1886.115376][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1886.123513][ T30] ? schedule+0x90/0x320 [ 1886.133188][ T30] schedule+0x14b/0x320 [ 1886.142097][ T30] schedule_preempt_disabled+0x13/0x30 [ 1886.157506][ T30] __mutex_lock+0x7e7/0xee0 [ 1886.162154][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1886.171763][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1886.179179][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1886.184301][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1886.197245][ T30] tun_chr_close+0x3b/0x1b0 [ 1886.204860][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1886.214435][ T30] __fput+0x23c/0xa50 [ 1886.221627][ T30] task_work_run+0x24f/0x310 [ 1886.230889][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.238918][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1886.244113][ T30] ? do_exit+0xa2a/0x28e0 [ 1886.252629][ T30] ? do_exit+0xa2a/0x28e0 [ 1886.262875][ T30] do_exit+0xa2f/0x28e0 [ 1886.273302][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.281298][ T30] ? __pfx_do_exit+0x10/0x10 [ 1886.288210][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1886.293715][ T30] ? __pfx_lock_release+0x10/0x10 [ 1886.304087][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1886.314236][ T30] ? cgroup_freezing+0x2a8/0x350 [ 1886.324326][ T30] do_group_exit+0x207/0x2c0 [ 1886.330959][ T30] get_signal+0x16b2/0x1750 [ 1886.340676][ T30] ? __pfx_get_signal+0x10/0x10 [ 1886.347634][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1886.353258][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1886.368275][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.373130][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 1886.387195][ T30] do_syscall_64+0x100/0x230 [ 1886.391877][ T30] ? clear_bhb_loop+0x35/0x90 [ 1886.403282][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.410848][ T30] RIP: 0033:0x7f833ab85d19 [ 1886.422630][ T30] RSP: 002b:00007f833ba1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.432307][ T30] RAX: 0000000000000048 RBX: 00007f833ad76160 RCX: 00007f833ab85d19 [ 1886.448093][ T30] RDX: 0000000000044080 RSI: 0000000020000040 RDI: 0000000000000003 [ 1886.461400][ T30] RBP: 00007f833ac01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1886.471386][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.486260][ T30] R13: 0000000000000000 R14: 00007f833ad76160 R15: 00007ffcb2452838 [ 1886.494328][ T30] [ 1886.505170][ T30] INFO: task syz.0.6108:27356 blocked for more than 144 seconds. [ 1886.513917][ T30] Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1886.530663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1886.542857][ T30] task:syz.0.6108 state:D stack:26800 pid:27356 tgid:27348 ppid:26460 flags:0x00004002 [ 1886.559902][ T30] Call Trace: [ 1886.563259][ T30] [ 1886.568611][ T30] __schedule+0x17fb/0x4be0 [ 1886.573193][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.583352][ T30] ? lock_release+0xbf/0xa30 [ 1886.592631][ T30] ? __pfx___schedule+0x10/0x10 [ 1886.604124][ T30] ? __pfx_lock_release+0x10/0x10 [ 1886.612905][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.622842][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1886.631725][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1886.644806][ T30] ? schedule+0x90/0x320 [ 1886.651330][ T30] schedule+0x14b/0x320 [ 1886.661503][ T30] schedule_preempt_disabled+0x13/0x30 [ 1886.670798][ T30] __mutex_lock+0x7e7/0xee0 [ 1886.680517][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1886.687318][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1886.692071][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1886.704306][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1886.713150][ T30] tun_chr_close+0x3b/0x1b0 [ 1886.723712][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1886.730918][ T30] __fput+0x23c/0xa50 [ 1886.735111][ T30] task_work_run+0x24f/0x310 [ 1886.747031][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.752326][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1886.764086][ T30] ? do_exit+0xa2a/0x28e0 [ 1886.769869][ T30] ? do_exit+0xa2a/0x28e0 [ 1886.774451][ T30] do_exit+0xa2f/0x28e0 [ 1886.779148][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.783974][ T30] ? __pfx_do_exit+0x10/0x10 [ 1886.795559][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1886.801024][ T30] ? __pfx_lock_release+0x10/0x10 [ 1886.814446][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1886.822774][ T30] ? cgroup_freezing+0x2a8/0x350 [ 1886.834907][ T30] do_group_exit+0x207/0x2c0 [ 1886.840356][ T30] get_signal+0x16b2/0x1750 [ 1886.844931][ T30] ? __pfx_get_signal+0x10/0x10 [ 1886.856842][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1886.862485][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1886.877425][ T30] ? rcu_is_watching+0x15/0xb0 [ 1886.882278][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 1886.895299][ T30] do_syscall_64+0x100/0x230 [ 1886.900005][ T30] ? clear_bhb_loop+0x35/0x90 [ 1886.904739][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.921338][ T30] RIP: 0033:0x7fd759d85d19 [ 1886.930725][ T30] RSP: 002b:00007fd757bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.942294][ T30] RAX: 0000000000000024 RBX: 00007fd759f76160 RCX: 00007fd759d85d19 [ 1886.954375][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 000000000000000a [ 1886.966946][ T30] RBP: 00007fd759e01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1886.975005][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.990633][ T30] R13: 0000000000000000 R14: 00007fd759f76160 R15: 00007ffc6c4c14b8 [ 1887.002533][ T30] [ 1887.010532][ T30] INFO: lockdep is turned off. [ 1887.017930][ T30] NMI backtrace for cpu 0 [ 1887.022329][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1887.032875][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1887.042974][ T30] Call Trace: [ 1887.046284][ T30] [ 1887.049290][ T30] dump_stack_lvl+0x241/0x360 [ 1887.054013][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1887.059256][ T30] ? __pfx__printk+0x10/0x10 [ 1887.063889][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1887.070885][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1887.075868][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1887.081381][ T30] ? _printk+0xd5/0x120 [ 1887.085584][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1887.091607][ T30] ? __pfx__printk+0x10/0x10 [ 1887.096243][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1887.102271][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1887.108298][ T30] watchdog+0xff6/0x1040 [ 1887.112576][ T30] ? watchdog+0x1ea/0x1040 [ 1887.117130][ T30] ? __pfx_watchdog+0x10/0x10 [ 1887.121855][ T30] kthread+0x2f0/0x390 [ 1887.125970][ T30] ? __pfx_watchdog+0x10/0x10 [ 1887.130733][ T30] ? __pfx_kthread+0x10/0x10 [ 1887.135400][ T30] ret_from_fork+0x4b/0x80 [ 1887.139856][ T30] ? __pfx_kthread+0x10/0x10 [ 1887.144491][ T30] ret_from_fork_asm+0x1a/0x30 [ 1887.149308][ T30] [ 1887.153317][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1887.158673][ C1] NMI backtrace for cpu 1 [ 1887.158694][ C1] CPU: 1 UID: 0 PID: 26522 Comm: kworker/1:0 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1887.158718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1887.158731][ C1] Workqueue: events ovs_dp_masks_rebalance [ 1887.158762][ C1] RIP: 0010:deref_stack_reg+0x18b/0x210 [ 1887.158786][ C1] Code: 49 8d 48 08 31 c0 4c 39 e1 76 33 4c 39 f9 77 2e 4c 89 c7 48 89 d3 e8 f4 07 00 00 49 89 c6 48 8b 6c 24 18 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 d7 74 b7 00 4c 89 75 00 b0 01 48 83 [ 1887.158802][ C1] RSP: 0018:ffffc90000a17b58 EFLAGS: 00000a02 [ 1887.158818][ C1] RAX: 1ffff92000142f98 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1887.158833][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: ffffc90000a182d0 [ 1887.158848][ C1] RBP: ffffc90000a17cc0 R08: ffffc90000a182d0 R09: 0000000000000000 [ 1887.158861][ C1] R10: ffffc90000a17cd0 R11: fffff52000142f9c R12: 1ffff92000142f91 [ 1887.158877][ C1] R13: 1ffff92000142f92 R14: ffffc90000a18530 R15: ffffc90000a19000 [ 1887.158892][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1887.158908][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1887.158922][ C1] CR2: 00005605de7d1d88 CR3: 0000000067f58000 CR4: 00000000003526f0 [ 1887.158940][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1887.158952][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1887.158965][ C1] Call Trace: [ 1887.158972][ C1] [ 1887.158980][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1887.159002][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1887.159025][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1887.159052][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1887.159080][ C1] ? nmi_handle+0x14f/0x5a0 [ 1887.159101][ C1] ? nmi_handle+0x2a/0x5a0 [ 1887.159122][ C1] ? deref_stack_reg+0x18b/0x210 [ 1887.159141][ C1] ? default_do_nmi+0x63/0x160 [ 1887.159161][ C1] ? exc_nmi+0x123/0x1f0 [ 1887.159179][ C1] ? end_repeat_nmi+0xf/0x53 [ 1887.159211][ C1] ? deref_stack_reg+0x18b/0x210 [ 1887.159231][ C1] ? deref_stack_reg+0x18b/0x210 [ 1887.159250][ C1] ? deref_stack_reg+0x18b/0x210 [ 1887.159270][ C1] [ 1887.159277][ C1] [ 1887.159286][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1887.159305][ C1] unwind_next_frame+0x1799/0x22d0 [ 1887.159328][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1887.159349][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1887.159379][ C1] arch_stack_walk+0x11c/0x150 [ 1887.159403][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1887.159423][ C1] stack_trace_save+0x118/0x1d0 [ 1887.159451][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1887.159479][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1887.159505][ C1] ? __pfx_lock_release+0x10/0x10 [ 1887.159528][ C1] kasan_save_track+0x3f/0x80 [ 1887.159552][ C1] ? kasan_save_track+0x3f/0x80 [ 1887.159574][ C1] ? kasan_save_free_info+0x40/0x50 [ 1887.159594][ C1] ? __kasan_slab_free+0x59/0x70 [ 1887.159625][ C1] ? kmem_cache_free+0x195/0x410 [ 1887.159643][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1887.159660][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1887.159696][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1887.159717][ C1] kasan_save_free_info+0x40/0x50 [ 1887.159737][ C1] __kasan_slab_free+0x59/0x70 [ 1887.159761][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1887.159778][ C1] kmem_cache_free+0x195/0x410 [ 1887.159796][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 1887.159816][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 1887.159836][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1887.159854][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1887.159876][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1887.159896][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1887.159917][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1887.159939][ C1] ? nft_do_chain+0x399/0x1da0 [ 1887.159955][ C1] ? nft_do_chain+0x454/0x1da0 [ 1887.159976][ C1] nft_do_chain+0x4ad/0x1da0 [ 1887.160000][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1887.160017][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1887.160046][ C1] ? lapic_next_event+0x11/0x20 [ 1887.160072][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1887.160094][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1887.160114][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1887.160130][ C1] ? ipt_do_table+0x312/0x1860 [ 1887.160157][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1887.160174][ C1] nf_hook_slow+0xc3/0x220 [ 1887.160200][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1887.160224][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1887.160248][ C1] NF_HOOK+0x29e/0x450 [ 1887.160271][ C1] ? NF_HOOK+0x9a/0x450 [ 1887.160292][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1887.160316][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1887.160342][ C1] ? ip_rcv_finish+0x406/0x560 [ 1887.160366][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1887.160389][ C1] NF_HOOK+0x3a4/0x450 [ 1887.160413][ C1] ? NF_HOOK+0x9a/0x450 [ 1887.160435][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1887.160456][ C1] ? ip_rcv_core+0x801/0xd10 [ 1887.160479][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1887.160506][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1887.160529][ C1] __netif_receive_skb+0x2bf/0x650 [ 1887.160554][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1887.160573][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1887.160597][ C1] ? __pfx_lock_release+0x10/0x10 [ 1887.160622][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1887.160642][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1887.160665][ C1] ? rcu_is_watching+0x15/0xb0 [ 1887.160689][ C1] ? process_backlog+0x33b/0x15b0 [ 1887.160716][ C1] process_backlog+0x662/0x15b0 [ 1887.160743][ C1] ? process_backlog+0x33b/0x15b0 [ 1887.160772][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1887.160801][ C1] __napi_poll+0xcb/0x490 [ 1887.160825][ C1] net_rx_action+0x89b/0x1240 [ 1887.160859][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1887.160886][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1887.160918][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 1887.160944][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1887.160981][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1887.161011][ C1] handle_softirqs+0x2d4/0x9b0 [ 1887.161041][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 1887.161067][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1887.161095][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1887.161117][ C1] __irq_exit_rcu+0xf7/0x220 [ 1887.161142][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1887.161171][ C1] irq_exit_rcu+0x9/0x30 [ 1887.161195][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1887.161219][ C1] [ 1887.161225][ C1] [ 1887.161232][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1887.161259][ C1] RIP: 0010:queue_delayed_work_on+0x271/0x390 [ 1887.161280][ C1] Code: 75 19 e8 52 dd 37 00 eb 18 e8 4b dd 37 00 e8 86 b9 58 0a 48 83 7c 24 08 00 74 e7 e8 39 dd 37 00 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 43 c7 44 27 09 00 00 00 00 66 43 c7 44 27 [ 1887.161296][ C1] RSP: 0018:ffffc9001b6cfac0 EFLAGS: 00000293 [ 1887.161311][ C1] RAX: ffffffff816780b7 RBX: 0000000000000000 RCX: ffff88802d10da00 [ 1887.161325][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1887.161337][ C1] RBP: ffffc9001b6cfbb0 R08: ffffffff81678087 R09: 1ffffffff203075e [ 1887.161352][ C1] R10: dffffc0000000000 R11: fffffbfff203075f R12: 1ffff920036d9f5c [ 1887.161367][ C1] R13: 0000000000000046 R14: ffff888023378801 R15: dffffc0000000000 [ 1887.161384][ C1] ? queue_delayed_work_on+0x237/0x390 [ 1887.161402][ C1] ? queue_delayed_work_on+0x267/0x390 [ 1887.161425][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1887.161444][ C1] ? process_scheduled_works+0x976/0x1840 [ 1887.161475][ C1] ? ovs_dp_masks_rebalance+0xa3/0xe0 [ 1887.161499][ C1] ? process_scheduled_works+0x976/0x1840 [ 1887.161527][ C1] process_scheduled_works+0xa66/0x1840 [ 1887.161565][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1887.161595][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1887.161622][ C1] ? assign_work+0x364/0x3d0 [ 1887.161652][ C1] worker_thread+0x870/0xd30 [ 1887.161672][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1887.161696][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1887.161716][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1887.161733][ C1] kthread+0x2f0/0x390 [ 1887.161753][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1887.161770][ C1] ? __pfx_kthread+0x10/0x10 [ 1887.161791][ C1] ret_from_fork+0x4b/0x80 [ 1887.161807][ C1] ? __pfx_kthread+0x10/0x10 [ 1887.161827][ C1] ret_from_fork_asm+0x1a/0x30 [ 1887.161860][ C1] [ 1888.025891][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1888.032828][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1888.043367][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1888.053465][ T30] Call Trace: [ 1888.056775][ T30] [ 1888.059739][ T30] dump_stack_lvl+0x241/0x360 [ 1888.064644][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1888.069980][ T30] ? __pfx__printk+0x10/0x10 [ 1888.074623][ T30] ? vscnprintf+0x5d/0x90 [ 1888.078997][ T30] panic+0x349/0x880 [ 1888.082955][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1888.089165][ T30] ? __pfx_panic+0x10/0x10 [ 1888.093628][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1888.099054][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1888.104644][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1888.110060][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1888.117138][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1888.123348][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1888.129557][ T30] watchdog+0x1035/0x1040 [ 1888.133934][ T30] ? watchdog+0x1ea/0x1040 [ 1888.138397][ T30] ? __pfx_watchdog+0x10/0x10 [ 1888.143119][ T30] kthread+0x2f0/0x390 [ 1888.147235][ T30] ? __pfx_watchdog+0x10/0x10 [ 1888.151958][ T30] ? __pfx_kthread+0x10/0x10 [ 1888.156591][ T30] ret_from_fork+0x4b/0x80 [ 1888.161044][ T30] ? __pfx_kthread+0x10/0x10 [ 1888.165673][ T30] ret_from_fork_asm+0x1a/0x30 [ 1888.170499][ T30] [ 1888.173886][ T30] Kernel Offset: disabled [ 1888.178409][ T30] Rebooting in 86400 seconds..