last executing test programs: 3m2.106475179s ago: executing program 1 (id=951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) 3m0.854105076s ago: executing program 1 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m58.910635676s ago: executing program 1 (id=957): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b501020301090212"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_robust_list(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.165746621s ago: executing program 1 (id=962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@nullb, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 2m54.176780684s ago: executing program 1 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x7ffc, 0x2bc}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, 0x0) sendmsg(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000f00)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d302c696f636861727365743d63703737352c73686f72746e616d653d77696e39352c756e695f786c6174653d302c6e6f636173652c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c696f636861727365743d6d6163677265656b2c757466383d302c00f4f168e95dab38d0ec2bd96f7cdbaecb21e70292435ed8777cfa9b37331faa9394479a76a69348cc8f8d0f08d42aed344c00"/203], 0x3, 0x350, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 2m45.148339235s ago: executing program 1 (id=978): socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "8d19c87c3c29a39100"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2m29.277889239s ago: executing program 32 (id=978): socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "8d19c87c3c29a39100"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 58.602734963s ago: executing program 5 (id=1177): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 56.172638674s ago: executing program 5 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 55.0803618s ago: executing program 5 (id=1185): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000280)=0x8) 53.08722632s ago: executing program 5 (id=1198): r0 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 47.04934984s ago: executing program 5 (id=1202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000400000000020000000000000802000000000061"], 0x0, 0x44}, 0x28) 46.011796797s ago: executing program 5 (id=1206): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = msgget(0x0, 0x40) msgctl$MSG_INFO(r1, 0xc, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 30.862960984s ago: executing program 33 (id=1206): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = msgget(0x0, 0x40) msgctl$MSG_INFO(r1, 0xc, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.04909184s ago: executing program 3 (id=1254): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 15.69520519s ago: executing program 3 (id=1262): open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x200000402) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x4010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0xd8, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa8, 0x2, {{}, [@TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4, 0x1, {0x0, 0x0, 0x0, 0x0, 0x40000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x898, 0x5, 0xed3, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x85, 0xffff, 0x8524}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4b6, 0x31, 0x8, 0x7fffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x6}}]}}}]}, 0xd8}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) 14.849691355s ago: executing program 3 (id=1264): r0 = creat(0x0, 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = dup3(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', r2, @fallback=0x7, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, r0, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, r0, r0, r4, r0, r0, r0], &(0x7f0000000d80)=[{0x4, 0x4, 0x6, 0x3}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x9}, &(0x7f0000000ec0)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11.59508352s ago: executing program 3 (id=1270): r0 = socket(0x1e, 0x4, 0x0) close(0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x92000000000000f4) 9.241093836s ago: executing program 2 (id=1274): gettid() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$SG_IO(r0, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100004001000287}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af83, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0x0, 0xec, 0x2, 0x0}) 9.237106383s ago: executing program 3 (id=1275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x368, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x33c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MARK_BLOCK={0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_EARLY_DROP_BLOCK={0x4b, 0x5, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x801}, 0x0) 8.595787104s ago: executing program 0 (id=1276): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x90680, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x20089002) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.595448879s ago: executing program 2 (id=1277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r4}, 0x38) 7.522615833s ago: executing program 2 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 7.518698077s ago: executing program 4 (id=1280): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x368, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x33c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "a08741d53c17fe788c52901a81d1b55cac4134f7a04b4912d6d32223ec53f0f61efb5e06a113b739419f64fb10e47d9a31b8e43cb652fe7c40ef95996b3f9594a9ac4287bd548b76af89a5f0eceb4373fefeba1adb94a86f2892f1654f6f6c47b0b4c6fc930a7a001394c1e1c7e45b3842f682f0e473b8d58e70b3e2017457a33a1a2f62915604ba172eb0e09f3d2249561e2faa3b6bd250eac2a9eafc22b0fd4d008fabbab0fe519afde99b517780d70c1c116a7f677f62aeb04b69b5b41e5323a3632b933e874af700b3b6b632f9c2f86f238d1f0404e8a273cb44f40ae977ae1220bd65705cd5a849c8df8464c6b7596b3b3c38545eeb7afc96f607f7b77d"}, @TCA_RED_MARK_BLOCK={0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_EARLY_DROP_BLOCK={0x4b, 0x5, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x801}, 0x0) 6.959720741s ago: executing program 0 (id=1281): dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000000)=0x4) 6.02982936s ago: executing program 4 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0x2d, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) sendmsg$inet(r1, 0x0, 0x10004) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 6.014656114s ago: executing program 2 (id=1283): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) r2 = dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_GETXATTR(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat(0xffffffffffffff9c, 0x0, 0x20942, 0xc0) read$FUSE(r4, 0x0, 0x0) 4.945028177s ago: executing program 0 (id=1284): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2200000, &(0x7f0000002080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0], 0x1, 0x248, &(0x7f0000000a00)="$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") r0 = socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.782607855s ago: executing program 4 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000100)={{0xa, 0xffff, 0x101, @empty, 0xfffffffc}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x10000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd]}}, 0x5c) 3.37245243s ago: executing program 4 (id=1286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r3, 0x0, 0x0, 0x8040, 0x0, 0x0) 2.90005414s ago: executing program 2 (id=1287): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r3, 0x0, r2}) 2.89777955s ago: executing program 0 (id=1288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r4}, 0x38) 1.84621208s ago: executing program 0 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 1.844291011s ago: executing program 4 (id=1290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.185836982s ago: executing program 2 (id=1291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x104) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x6125}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getuid() syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 566.233958ms ago: executing program 3 (id=1292): capset(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 20.763372ms ago: executing program 4 (id=1293): r0 = socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x800000, 0x4, 0x16e, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2, 0x0, 0x10000}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x106, 0x9}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x56, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x69, 0x0, 0x0, 0x8c5}, @initr0]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) 0s ago: executing program 0 (id=1294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 81.471734][ T5850] cgroup: Unknown subsys name 'net' [ 81.589360][ T5850] cgroup: Unknown subsys name 'cpuset' [ 81.599318][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.346873][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.645928][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.664160][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.675925][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.684260][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.691693][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.699446][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.707908][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.716705][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.718409][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.724876][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.732607][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.739540][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.750404][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.759896][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.760074][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.768493][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.781821][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.807453][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.859387][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.874341][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.882638][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.891355][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.899777][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.900577][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.915185][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.524089][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.591126][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 88.653353][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 88.785003][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 88.837379][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 88.972497][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.980037][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.987976][ T5860] bridge_slave_0: entered allmulticast mode [ 88.995229][ T5860] bridge_slave_0: entered promiscuous mode [ 89.046138][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.053293][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.060941][ T5860] bridge_slave_1: entered allmulticast mode [ 89.069008][ T5860] bridge_slave_1: entered promiscuous mode [ 89.088027][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.095552][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.103084][ T5861] bridge_slave_0: entered allmulticast mode [ 89.111030][ T5861] bridge_slave_0: entered promiscuous mode [ 89.119104][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.126397][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.133564][ T5873] bridge_slave_0: entered allmulticast mode [ 89.141031][ T5873] bridge_slave_0: entered promiscuous mode [ 89.179741][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.187104][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.194242][ T5861] bridge_slave_1: entered allmulticast mode [ 89.201854][ T5861] bridge_slave_1: entered promiscuous mode [ 89.209458][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.216684][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.223867][ T5873] bridge_slave_1: entered allmulticast mode [ 89.231258][ T5873] bridge_slave_1: entered promiscuous mode [ 89.296373][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.318880][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.326153][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.333299][ T5869] bridge_slave_0: entered allmulticast mode [ 89.340994][ T5869] bridge_slave_0: entered promiscuous mode [ 89.370345][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.395176][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.431216][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438754][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.446353][ T5869] bridge_slave_1: entered allmulticast mode [ 89.453559][ T5869] bridge_slave_1: entered promiscuous mode [ 89.463204][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.489229][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.512757][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.520076][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.527935][ T5875] bridge_slave_0: entered allmulticast mode [ 89.535359][ T5875] bridge_slave_0: entered promiscuous mode [ 89.582960][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.594062][ T5860] team0: Port device team_slave_0 added [ 89.600578][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.608112][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.615275][ T5875] bridge_slave_1: entered allmulticast mode [ 89.622830][ T5875] bridge_slave_1: entered promiscuous mode [ 89.632561][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.645717][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.657267][ T5861] team0: Port device team_slave_0 added [ 89.690859][ T5860] team0: Port device team_slave_1 added [ 89.723782][ T5861] team0: Port device team_slave_1 added [ 89.731633][ T5873] team0: Port device team_slave_0 added [ 89.797399][ T5873] team0: Port device team_slave_1 added [ 89.824034][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.835228][ T5869] team0: Port device team_slave_0 added [ 89.867537][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.874531][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.896359][ T5867] Bluetooth: hci2: command tx timeout [ 89.902143][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.906404][ T5866] Bluetooth: hci0: command tx timeout [ 89.922438][ T5867] Bluetooth: hci1: command tx timeout [ 89.931677][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.942595][ T5869] team0: Port device team_slave_1 added [ 89.949382][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.956528][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.982909][ T5867] Bluetooth: hci4: command tx timeout [ 89.983496][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.988818][ T5867] Bluetooth: hci3: command tx timeout [ 90.019049][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.026138][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.052329][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.088719][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.096027][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.122425][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.134169][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.141274][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.167952][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.219941][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.226995][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.253780][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.267792][ T5875] team0: Port device team_slave_0 added [ 90.289015][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.296084][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.322318][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.347402][ T5875] team0: Port device team_slave_1 added [ 90.367449][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.374433][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.400872][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.454887][ T5860] hsr_slave_0: entered promiscuous mode [ 90.461663][ T5860] hsr_slave_1: entered promiscuous mode [ 90.508633][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.516105][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.542643][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.556171][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.563145][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.589394][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.618724][ T5861] hsr_slave_0: entered promiscuous mode [ 90.625136][ T5861] hsr_slave_1: entered promiscuous mode [ 90.632034][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 90.637937][ T5861] Cannot create hsr debugfs directory [ 90.690069][ T5869] hsr_slave_0: entered promiscuous mode [ 90.697203][ T5869] hsr_slave_1: entered promiscuous mode [ 90.704047][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 90.709971][ T5869] Cannot create hsr debugfs directory [ 90.721109][ T5873] hsr_slave_0: entered promiscuous mode [ 90.727846][ T5873] hsr_slave_1: entered promiscuous mode [ 90.734252][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 90.740268][ T5873] Cannot create hsr debugfs directory [ 90.906494][ T5875] hsr_slave_0: entered promiscuous mode [ 90.912895][ T5875] hsr_slave_1: entered promiscuous mode [ 90.919792][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 90.926044][ T5875] Cannot create hsr debugfs directory [ 91.408402][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.431085][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.442346][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.468943][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.524111][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.535165][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.560229][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.574120][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.657366][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.669018][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.687601][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.709024][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.797875][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.817839][ T984] cfg80211: failed to load regulatory.db [ 91.840756][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.854488][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.901237][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.975605][ T5866] Bluetooth: hci1: command tx timeout [ 91.975623][ T5871] Bluetooth: hci0: command tx timeout [ 91.986742][ T5867] Bluetooth: hci2: command tx timeout [ 92.004640][ T5875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.016116][ T5875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.039045][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.047985][ T5875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.057093][ T5867] Bluetooth: hci3: command tx timeout [ 92.062366][ T5875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.062590][ T5867] Bluetooth: hci4: command tx timeout [ 92.082506][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.099926][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.143711][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.157191][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.174423][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.181734][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.203888][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.224638][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.231907][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.242103][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.249257][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.260397][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.267578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.285260][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.292467][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.304578][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.311755][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.599715][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.674372][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.720692][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.727900][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.766656][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.773822][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.837315][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.929803][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.969041][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.981650][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.032040][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.039236][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.064373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.071619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.166462][ T5869] veth0_vlan: entered promiscuous mode [ 93.208359][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.218084][ T5869] veth1_vlan: entered promiscuous mode [ 93.237184][ T5861] veth0_vlan: entered promiscuous mode [ 93.283072][ T5861] veth1_vlan: entered promiscuous mode [ 93.386834][ T5860] veth0_vlan: entered promiscuous mode [ 93.397746][ T5869] veth0_macvtap: entered promiscuous mode [ 93.422838][ T5869] veth1_macvtap: entered promiscuous mode [ 93.450794][ T5860] veth1_vlan: entered promiscuous mode [ 93.473743][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.504635][ T5861] veth0_macvtap: entered promiscuous mode [ 93.529322][ T5861] veth1_macvtap: entered promiscuous mode [ 93.539942][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.554176][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.599437][ T5860] veth0_macvtap: entered promiscuous mode [ 93.637882][ T5860] veth1_macvtap: entered promiscuous mode [ 93.645006][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.654912][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682443][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.691345][ T1114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702592][ T1114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.745821][ T5873] veth0_vlan: entered promiscuous mode [ 93.762329][ T5873] veth1_vlan: entered promiscuous mode [ 93.771587][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.788084][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.810528][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.818726][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828474][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.841767][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.869516][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.879753][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.936237][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.945251][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.982128][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006645][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015172][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.026298][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.057668][ T5867] Bluetooth: hci0: command tx timeout [ 94.063153][ T5867] Bluetooth: hci2: command tx timeout [ 94.068598][ T5866] Bluetooth: hci1: command tx timeout [ 94.085071][ T5873] veth0_macvtap: entered promiscuous mode [ 94.135563][ T5867] Bluetooth: hci4: command tx timeout [ 94.136046][ T5871] Bluetooth: hci3: command tx timeout [ 94.167727][ T5873] veth1_macvtap: entered promiscuous mode [ 94.201340][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.223475][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.254831][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.276673][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.322504][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.349257][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.351379][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.409780][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.419015][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.420129][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.438048][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.460398][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509907][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.524768][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.534164][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.689215][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.704236][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.718330][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.724468][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.762608][ T5875] veth0_vlan: entered promiscuous mode [ 94.781189][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.790248][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.464005][ T5875] veth1_vlan: entered promiscuous mode [ 95.649952][ T5875] veth0_macvtap: entered promiscuous mode [ 95.721100][ T5875] veth1_macvtap: entered promiscuous mode [ 95.836360][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.349618][ T5871] Bluetooth: hci2: command tx timeout [ 96.355932][ T5871] Bluetooth: hci1: command tx timeout [ 96.361383][ T5871] Bluetooth: hci0: command tx timeout [ 96.367505][ T5867] Bluetooth: hci4: command tx timeout [ 96.373007][ T5867] Bluetooth: hci3: command tx timeout [ 96.448267][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.519141][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.584704][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.762004][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808906][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.186876][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.214499][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.254408][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.297301][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.536522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 98.545475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.696038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.704962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.459290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.696780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.788693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.358773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.563660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.906723][ T6053] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.236470][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 111.783628][ T6130] binder: BINDER_SET_CONTEXT_MGR already set [ 111.790297][ T6130] binder: 6129:6130 ioctl 4018620d 200000004a80 returned -16 [ 112.956267][ T6141] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.962762][ T6141] EXT4-fs: inline encryption not supported [ 113.028396][ T6141] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.040464][ T6141] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 113.051324][ T6141] EXT4-fs (loop0): unable to read superblock [ 113.186337][ T6140] EXT4-fs: Ignoring removed i_version option [ 113.192570][ T6140] EXT4-fs: inline encryption not supported [ 113.329152][ T6140] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 113.397264][ T6140] EXT4-fs (loop3): unable to read superblock [ 116.120131][ T6167] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.140540][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 116.178779][ T6167] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.229129][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 116.260629][ T6167] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 116.283163][ T6167] UDF-fs: Scanning with blocksize 512 failed [ 116.307458][ T6167] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.332713][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 116.356824][ T6167] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.381357][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 116.420356][ T6167] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 116.438160][ T6167] UDF-fs: Scanning with blocksize 1024 failed [ 116.447517][ T6167] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.516820][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 116.572462][ T6167] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.655495][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 116.668708][ T6167] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 116.676592][ T6167] UDF-fs: Scanning with blocksize 2048 failed [ 116.733335][ T6174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.794264][ T6167] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.228686][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 117.314219][ T6167] I/O error, dev loop1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.354750][ T6167] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 117.557946][ T6167] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.568696][ T6167] UDF-fs: Scanning with blocksize 4096 failed [ 117.574810][ T6167] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 122.338035][ T6219] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 122.366771][ T6219] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.508305][ T6239] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 124.518307][ T6239] hfsplus: unable to find HFS+ superblock [ 125.906555][ T6012] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 126.905782][ T6012] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.924538][ T6012] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 126.942355][ T6012] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 126.968755][ T6012] usb 1-1: config 1 has no interface number 0 [ 126.982859][ T6012] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 126.999594][ T6012] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.106009][ T6012] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 127.118866][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.582774][ T6012] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 127.753131][ T6012] snd_usb_pod 1-1:1.1: set_interface failed [ 127.768302][ T6012] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 127.776380][ T6012] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 127.833562][ T6012] usb 1-1: USB disconnect, device number 2 [ 132.842359][ T6310] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.868848][ T6310] CIFS mount error: No usable UNC path provided in device string! [ 132.868848][ T6310] [ 132.879168][ T6310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 133.568127][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.574721][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.659403][ T5866] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 133.725466][ T6313] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 133.948291][ T6313] EXT4-fs (loop1): unable to read superblock [ 138.431168][ T30] audit: type=1326 audit(1758224998.898:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 138.525426][ T30] audit: type=1326 audit(1758224998.908:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 138.642713][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 138.658323][ T30] audit: type=1326 audit(1758224998.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 138.681292][ T30] audit: type=1326 audit(1758224998.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 138.755970][ T30] audit: type=1326 audit(1758224998.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 139.210469][ T30] audit: type=1326 audit(1758224998.948:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 139.335459][ T30] audit: type=1326 audit(1758224998.948:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 139.362598][ T30] audit: type=1326 audit(1758224998.988:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 139.435446][ T30] audit: type=1326 audit(1758224998.988:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 139.515547][ T30] audit: type=1326 audit(1758224998.988:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 140.771793][ T6374] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 143.680449][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 143.689509][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 145.959764][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 146.203628][ T5850] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 146.211634][ T6433] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 146.570976][ T6437] bridge0: entered promiscuous mode [ 146.585669][ T6437] vlan2: entered promiscuous mode [ 146.794722][ T6444] process 'syz.3.107' launched '/dev/fd/6' with NULL argv: empty string added [ 148.474652][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 148.474671][ T30] audit: type=1326 audit(1758225008.948:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 148.630700][ T30] audit: type=1326 audit(1758225008.988:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 148.809768][ T30] audit: type=1326 audit(1758225008.988:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 149.722470][ T30] audit: type=1326 audit(1758225008.988:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.104649][ T6480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 150.122321][ T30] audit: type=1326 audit(1758225008.988:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.228917][ T30] audit: type=1326 audit(1758225008.988:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.424104][ T30] audit: type=1326 audit(1758225008.988:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.542793][ T6482] kvm: pic: non byte write [ 150.555905][ T6482] kvm: pic: non byte write [ 150.570711][ T30] audit: type=1326 audit(1758225008.988:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.630956][ T6482] kvm: pic: non byte write [ 150.651756][ T6482] kvm: pic: non byte write [ 150.691742][ T6482] kvm: pic: non byte write [ 150.711520][ T30] audit: type=1326 audit(1758225008.988:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.754172][ T6482] kvm: pic: non byte write [ 150.769699][ T6482] kvm: pic: non byte write [ 150.779493][ T6482] kvm: pic: non byte write [ 150.821868][ T30] audit: type=1326 audit(1758225008.998:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 150.822440][ T6482] kvm: pic: non byte write [ 151.205515][ T6482] kvm: pic: non byte write [ 151.726979][ T6482] kvm: pic: single mode not supported [ 157.845626][ T6537] netlink: 'syz.1.132': attribute type 3 has an invalid length. [ 157.853320][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 158.252630][ T6543] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 158.408914][ T6543] EXT4-fs (loop2): unable to read superblock [ 158.959885][ T6548] netlink: 148 bytes leftover after parsing attributes in process `syz.2.134'. [ 158.970972][ T6548] netlink: 56 bytes leftover after parsing attributes in process `syz.2.134'. [ 158.980156][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'. [ 164.172424][ T6602] tipc: Started in network mode [ 164.407435][ T6602] tipc: Node identity ca52f40b0606, cluster identity 4711 [ 164.447800][ T6602] tipc: Enabled bearer , priority 0 [ 165.112862][ T6599] syzkaller0: entered promiscuous mode [ 165.181043][ T6599] syzkaller0: entered allmulticast mode [ 165.458639][ T5931] tipc: Node number set to 3428119563 [ 166.226523][ T6593] tipc: Resetting bearer [ 166.244490][ T6619] sctp: [Deprecated]: syz.4.154 (pid 6619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.244490][ T6619] Use struct sctp_sack_info instead [ 166.349196][ T6593] tipc: Disabling bearer [ 168.018155][ T6636] EXT4-fs: Ignoring removed bh option [ 168.067946][ T6636] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 168.165859][ T6636] EXT4-fs (loop3): unable to read superblock [ 169.916019][ T6651] iso9660: Unknown parameter '0x000000000000000000000000000000000000ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000' [ 170.264902][ T6662] trusted_key: syz.0.162 sent an empty control message without MSG_MORE. [ 173.516229][ T984] libceph: connect (1)[c::]:6789 error -101 [ 173.522723][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 173.674127][ T6690] ceph: No mds server is up or the cluster is laggy [ 180.737802][ T6758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.555836][ T6767] team_slave_0: entered promiscuous mode [ 183.561916][ T6767] team_slave_1: entered promiscuous mode [ 183.587122][ T6767] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.601357][ T6767] Zero length message leads to an empty skb [ 185.655452][ T5953] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.576986][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.642973][ T5953] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 186.725597][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.739722][ T5953] usb 4-1: Product: syz [ 186.744388][ T5953] usb 4-1: Manufacturer: syz [ 186.750207][ T5953] usb 4-1: SerialNumber: syz [ 186.779388][ T5953] usb 4-1: config 0 descriptor?? [ 186.852441][ T5953] yurex 4-1:0.0: Could not find endpoints [ 187.371834][ T9] usb 4-1: USB disconnect, device number 2 [ 187.562203][ T6806] ntfs3(loop1): try to read out of volume at offset 0x0 [ 187.846935][ T6810] erofs (device loop1): cannot find valid erofs superblock [ 190.030624][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 190.113265][ T6829] vlan2: entered promiscuous mode [ 190.121281][ T6829] vlan2: entered allmulticast mode [ 190.126522][ T6829] hsr_slave_1: entered allmulticast mode [ 190.159594][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 190.177261][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 194.140401][ T6862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.212'. [ 194.226004][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232545][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.350018][ T6874] ======================================================= [ 195.350018][ T6874] WARNING: The mand mount option has been deprecated and [ 195.350018][ T6874] and is ignored by this kernel. Remove the mand [ 195.350018][ T6874] option from the mount to silence this warning. [ 195.350018][ T6874] ======================================================= [ 195.633181][ T6874] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 195.695019][ T6874] EXT4-fs (loop1): unable to read superblock [ 196.606880][ T6886] syz.2.217 uses obsolete (PF_INET,SOCK_PACKET) [ 201.677341][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 201.677355][ T30] audit: type=1326 audit(1758225062.158:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 202.329024][ T30] audit: type=1326 audit(1758225062.158:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 202.437426][ T30] audit: type=1326 audit(1758225062.158:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 202.674075][ T30] audit: type=1326 audit(1758225062.158:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 202.697070][ T30] audit: type=1326 audit(1758225062.188:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 202.719564][ T30] audit: type=1326 audit(1758225062.188:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc59b58ebe3 code=0x7ffc0000 [ 202.745390][ T30] audit: type=1326 audit(1758225062.968:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc59b58d65f code=0x7ffc0000 [ 202.785603][ T30] audit: type=1326 audit(1758225063.258:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc59b58ec37 code=0x7ffc0000 [ 202.796894][ T6928] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 202.985044][ T30] audit: type=1326 audit(1758225063.258:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc59b58d510 code=0x7ffc0000 [ 203.007935][ T30] audit: type=1326 audit(1758225063.258:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59b58e7ab code=0x7ffc0000 [ 203.466595][ T6928] EXT4-fs (loop4): unable to read superblock [ 206.029208][ T6961] uprobe: syz.3.238:6961 failed to unregister, leaking uprobe [ 210.564657][ T7000] ALSA: mixer_oss: invalid OSS volume 'u' [ 210.570500][ T7000] ALSA: mixer_oss: invalid OSS volume 'KÙðÎçøE(ÒE…–½Ö¤Yºë¯a³]f¨ ' [ 210.579099][ T7000] ALSA: mixer_oss: invalid OSS volume 'ŠøI' ÄYÙÙôx¾†Ý\8' [ 210.595431][ T7000] ALSA: mixer_oss: invalid OSS volume '“KA•w…Õˆ«ÿiIñ¹LÒrJÿ4¬EÇmͽ' [ 210.622867][ T7000] ALSA: mixer_oss: invalid OSS volume '¹X*ÎyÄ“þÒˆš¬ |)¶ÂSv'ºÖMô3' [ 210.646681][ T7000] ALSA: mixer_oss: invalid OSS volume '&οer5ë¸ü<Ô-{kUqvW~¤7ó¢–|' [ 210.681712][ T7000] ALSA: mixer_oss: invalid OSS volume '/Ó‘Å+¯¾eøè!5ý86| CÉ‚²óçË' [ 210.719948][ T7000] ALSA: mixer_oss: invalid OSS volume 'óÈÇaøQÞ4̳È–ñ~ç›A$nVnÝrÛ' [ 210.747481][ T7000] ALSA: mixer_oss: invalid OSS volume 'ËÊÉ•›¬§ïB\Ì,ÐPs9 HoŸFŽ²‡r˜' [ 210.759387][ T7000] ALSA: mixer_oss: invalid OSS volume ')™KŒ4¸7`ìá.Ùí|=*‰Íò:þ}±¿4*' [ 210.769847][ T7000] ALSA: mixer_oss: invalid OSS volume 'Ï!ò|' [ 210.781545][ T7000] ALSA: mixer_oss: invalid OSS volume 'ÊJ' [ 210.795307][ T7000] ALSA: mixer_oss: invalid OSS volume 'òUeIg’=c•­Â¸Ö‹‹Í“ÝõhXyÛC„ì9' [ 210.804433][ T7000] ALSA: mixer_oss: invalid OSS volume 'øC<žŠ—_ÝE=¦b£?©ðõúý²´ƒûH7' [ 210.822677][ T7000] ALSA: mixer_oss: invalid OSS volume '–rFà·cß‹;Ç’JlvıøÛú;1.h´ëg¾' [ 210.835825][ T7000] ALSA: mixer_oss: invalid OSS volume '®' [ 210.856071][ T7000] ALSA: mixer_oss: invalid OSS volume 'yBqþL¼aêú'M‡ÐmÐŒ_ŠdÔn÷µD&¼' [ 210.867878][ T7000] ALSA: mixer_oss: invalid OSS volume '|÷økªÀ¾GþhÎòó¿¿oºQÞæˆ6' [ 210.882910][ T7000] ALSA: mixer_oss: invalid OSS volume 'îVåüsí1Àâ’Jå Éy[ïÜÛó¬'&[w´ô›­àŽÚn)¼Y3ïEFÛI' [ 211.147830][ T7000] ALSA: mixer_oss: invalid OSS volume '³ö_¸ˆLÿ>™úµú‹Ÿ rËDÛM' [ 211.156785][ T7000] ALSA: mixer_oss: invalid OSS volume 'HÙìùs7dâÄ' [ 211.165819][ T7000] ALSA: mixer_oss: invalid OSS volume '­‚ÆJˆË/ÙÝšO5æ§ô·@gô¾?©Raö±' [ 211.181435][ T7000] ALSA: mixer_oss: invalid OSS volume 'Ùæ ÒÄO¢#|I«øXÉw7ý!йT'g¾Óóš' [ 211.198955][ T7000] ALSA: mixer_oss: invalid OSS volume 'UÖU’I@W;dÛÔ*( ÝÄ4ù0?Û½Ç-±IL' [ 211.217925][ T7000] ALSA: mixer_oss: invalid OSS volume '‹r,4fAçÄrïJpX:' [ 211.664784][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 211.671990][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 211.678870][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 211.679716][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 212.824821][ T7020] veth1_macvtap: left promiscuous mode [ 212.861858][ T7020] macsec0: entered allmulticast mode [ 218.973027][ T7064] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.425434][ T984] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 221.464662][ T7086] warning: `syz.4.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.585437][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 221.609300][ T984] usb 2-1: config 2 has an invalid interface number: 78 but max is 0 [ 221.695769][ T984] usb 2-1: config 2 has no interface number 0 [ 222.094517][ T984] usb 2-1: config 2 interface 78 has no altsetting 0 [ 222.339019][ T984] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=82.1b [ 223.064990][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.085421][ T984] usb 2-1: Product: syz [ 223.095431][ T984] usb 2-1: Manufacturer: syz [ 223.105576][ T984] usb 2-1: SerialNumber: syz [ 223.300258][ T984] usb 2-1: can't set config #2, error -71 [ 223.444320][ T984] usb 2-1: USB disconnect, device number 2 [ 231.313609][ T7164] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 231.326551][ T7164] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 233.321942][ T7178] random: crng reseeded on system resumption [ 233.418148][ T7176] binder: 7174:7176 ioctl 400c620e 2000000005c0 returned -22 [ 233.539983][ T7178] Restarting kernel threads ... [ 233.547502][ T7178] Done restarting kernel threads. [ 235.473193][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 239.426742][ T7235] usb usb1: check_ctrlrecip: process 7235 (syz.4.313) requesting ep 01 but needs 81 [ 239.436905][ T7235] usb usb1: usbfs: process 7235 (syz.4.313) did not claim interface 0 before use [ 243.300380][ T5953] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.336682][ T7261] delete_channel: no stack [ 243.726783][ T7263] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 243.866879][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 244.015313][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 244.082067][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 244.249145][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 244.260163][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 244.269292][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.299552][ T5953] usb 4-1: config 0 descriptor?? [ 245.195474][ T5953] hdpvr 4-1:0.0: firmware version 0x0 dated [ 245.230945][ T5953] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 245.543654][ T5953] hdpvr 4-1:0.0: device init failed [ 245.549096][ T5953] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 245.633119][ T5953] usb 4-1: USB disconnect, device number 3 [ 248.018862][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 248.047274][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 248.047293][ T30] audit: type=1800 audit(1758225108.528:71): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.331" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 254.002961][ T7332] team0: Port device team_slave_0 removed [ 254.033331][ T7344] netlink: 96 bytes leftover after parsing attributes in process `syz.1.341'. [ 255.273321][ T7353] Bluetooth: MGMT ver 1.23 [ 255.278199][ T7353] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 255.661994][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774266][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.715896][ T7371] binder_alloc: 7366: binder_alloc_buf, no vma [ 260.191815][ T7398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.355389][ T7402] bond_slave_0: entered promiscuous mode [ 260.361198][ T7402] bond_slave_1: entered promiscuous mode [ 260.368018][ T7402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.396546][ T7402] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 261.406494][ T7410] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 261.701928][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 262.398068][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.469848][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 262.498637][ T7410] team_slave_0: left promiscuous mode [ 262.523142][ T7410] team_slave_1: left promiscuous mode [ 263.555557][ T7417] bond_slave_0: entered promiscuous mode [ 263.561268][ T7417] bond_slave_1: entered promiscuous mode [ 263.597825][ T7417] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.638087][ T7417] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 265.399615][ T7442] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.415776][ T5953] IPVS: starting estimator thread 0... [ 265.733382][ T7446] IPVS: using max 38 ests per chain, 91200 per kthread [ 266.484035][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 268.604439][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 271.901814][ T7502] capability: warning: `syz.2.383' uses deprecated v2 capabilities in a way that may be insecure [ 271.964090][ T7510] capability: warning: `syz.2.383' uses 32-bit capabilities (legacy support in use) [ 272.550115][ T7502] netlink: 996 bytes leftover after parsing attributes in process `syz.2.383'. [ 272.696369][ T7502] mmap: syz.2.383 (7502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 273.101506][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 275.202383][ T7529] journal_path: Non-blockdev passed as './file0' [ 275.223099][ T7529] EXT4-fs: error: could not find journal device path [ 275.257204][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 276.845395][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.005343][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 277.019498][ T10] usb 4-1: config 0 has no interfaces? [ 277.033348][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.069916][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.083928][ T10] usb 4-1: config 0 descriptor?? [ 277.555314][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 277.676155][ T6012] usb 4-1: USB disconnect, device number 4 [ 278.383168][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 278.451433][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 278.626915][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 278.659603][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 278.674250][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.691399][ T10] usb 5-1: Product: syz [ 278.870254][ T5953] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 278.896387][ T10] usb 5-1: Manufacturer: syz [ 279.191506][ T10] usb 5-1: SerialNumber: syz [ 279.347464][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 279.360516][ T5953] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.369115][ T5953] usb 2-1: config 0 has no interface number 0 [ 279.387524][ T5953] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 279.397047][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.415433][ T5953] usb 2-1: Product: syz [ 279.426666][ T5953] usb 2-1: Manufacturer: syz [ 279.588113][ T5953] usb 2-1: SerialNumber: syz [ 279.624498][ T5953] usb 2-1: config 0 descriptor?? [ 279.630371][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 279.658111][ T5953] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 280.339691][ T5953] usb 2-1: selecting invalid altsetting 1 [ 280.373129][ T5953] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 280.394211][ T7563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 280.394272][ T5953] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.466418][ T5953] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 280.476178][ T5953] usb 2-1: media controller created [ 280.576647][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.607394][ T7586] netlink: 'syz.2.406': attribute type 12 has an invalid length. [ 280.838247][ T5953] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 280.856360][ T5953] zl10353_read_register: readreg error (reg=127, ret==-71) [ 280.891141][ T5953] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 281.644653][ T10] usb 5-1: USB disconnect, device number 2 [ 281.843612][ T10] usblp0: removed [ 282.110574][ T5953] usb 2-1: USB disconnect, device number 3 [ 283.394048][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 284.305853][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 285.455168][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 286.398725][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.418134][ T43] usb 2-1: config 253 has an invalid interface number: 140 but max is 0 [ 286.427301][ T43] usb 2-1: config 253 has no interface number 0 [ 286.443531][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 289.074534][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.244388][ T43] usb 2-1: Product: syz [ 289.259959][ T43] usb 2-1: Manufacturer: syz [ 289.272699][ T43] usb 2-1: SerialNumber: syz [ 289.444075][ T43] usb 2-1: can't set config #253, error -71 [ 289.452293][ T43] usb 2-1: USB disconnect, device number 4 [ 292.897831][ T7634] tipc: Failed to remove unknown binding: 66,1,1/0:1558355325/1558355327 [ 292.906666][ T7634] tipc: Failed to remove unknown binding: 66,1,1/0:1558355325/1558355327 [ 295.196672][ T7654] ceph: No mds server is up or the cluster is laggy [ 295.204272][ T981] libceph: connect (1)[c::]:6789 error -101 [ 295.221301][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 295.539360][ T981] libceph: connect (1)[c::]:6789 error -101 [ 295.546144][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 296.220674][ T981] libceph: connect (1)[c::]:6789 error -101 [ 296.228118][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 301.046293][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 301.131114][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 304.235583][ T7687] team0 (unregistering): Port device team_slave_0 removed [ 304.359818][ T7687] team0 (unregistering): Port device team_slave_1 removed [ 306.585838][ T7719] hub 9-0:1.0: USB hub found [ 306.595442][ T7719] hub 9-0:1.0: 1 port detected [ 315.111339][ T7757] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 315.128010][ T7758] binder: BINDER_SET_CONTEXT_MGR already set [ 315.620227][ T7757] EXT4-fs (loop1): unable to read superblock [ 315.765305][ T7758] binder: 7754:7758 ioctl 4018620d 200000000040 returned -16 [ 317.289254][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.295817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.631612][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 319.429057][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 319.582196][ T7796] dummy0: entered promiscuous mode [ 319.728042][ T7796] bridge0: port 3(macvlan3) entered blocking state [ 319.734860][ T7796] bridge0: port 3(macvlan3) entered disabled state [ 319.741969][ T7796] macvlan3: entered allmulticast mode [ 319.747464][ T7796] dummy0: entered allmulticast mode [ 319.754697][ T7796] macvlan3: entered promiscuous mode [ 319.761575][ T7796] bridge0: port 3(macvlan3) entered blocking state [ 319.768501][ T7796] bridge0: port 3(macvlan3) entered forwarding state [ 324.390269][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 324.399271][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 325.415951][ T7829] usb usb1: check_ctrlrecip: process 7829 (syz.0.470) requesting ep 01 but needs 81 [ 325.425537][ T7829] usb usb1: usbfs: process 7829 (syz.0.470) did not claim interface 0 before use [ 328.499414][ T7844] EXT4-fs: Ignoring removed nobh option [ 328.514949][ T7844] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 328.536275][ T7844] EXT4-fs (loop4): unable to read superblock [ 330.253468][ T30] audit: type=1326 audit(1758225190.728:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.300250][ T30] audit: type=1326 audit(1758225190.758:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.362621][ T30] audit: type=1326 audit(1758225190.758:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.404850][ T7867] netlink: 'syz.0.484': attribute type 39 has an invalid length. [ 330.413205][ T30] audit: type=1326 audit(1758225190.758:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.462483][ T30] audit: type=1326 audit(1758225190.758:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.542419][ T30] audit: type=1326 audit(1758225190.758:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.840990][ T7867] veth0_macvtap: left promiscuous mode [ 330.858110][ T30] audit: type=1326 audit(1758225190.758:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 330.928422][ T30] audit: type=1326 audit(1758225190.758:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 331.694508][ T7880] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 331.719790][ T7880] cramfs: wrong magic [ 332.086031][ T30] audit: type=1326 audit(1758225190.758:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 332.125271][ T30] audit: type=1326 audit(1758225190.758:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 334.626451][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 335.895560][ T5876] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 336.957767][ T5876] usb 2-1: config 0 has no interfaces? [ 336.963326][ T5876] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 337.986251][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.161430][ T5876] usb 2-1: config 0 descriptor?? [ 338.416741][ T5876] usb 2-1: USB disconnect, device number 6 [ 341.626179][ T7963] fuse: Unknown parameter 'use00000000000000000000' [ 345.038685][ T5876] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 346.130926][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.201755][ T5876] usb 3-1: config 1 has no interface number 0 [ 346.221108][ T5876] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.274534][ T5876] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 346.317570][ T5876] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 346.378397][ T5876] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 346.417310][ T5876] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.448249][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.475542][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.496630][ T7999] ext3: Unknown parameter 'obj_role' [ 346.505632][ T5876] usb 3-1: Product: syz [ 346.509857][ T5876] usb 3-1: Manufacturer: syz [ 346.525073][ T5876] usb 3-1: SerialNumber: syz [ 346.535775][ T7978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.894528][ T7978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.487343][ T7978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.428884][ T5876] cdc_ncm 3-1:1.1: bind() failure [ 350.441071][ T5876] usb 3-1: USB disconnect, device number 2 [ 350.966984][ T8029] syz_tun: entered allmulticast mode [ 351.772265][ T8026] syz_tun: left allmulticast mode [ 354.826922][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 354.836206][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 359.112388][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 359.112407][ T30] audit: type=1326 audit(1758225219.574:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 359.162715][ T30] audit: type=1326 audit(1758225219.574:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 359.218238][ T30] audit: type=1326 audit(1758225219.634:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 359.467432][ T30] audit: type=1326 audit(1758225219.634:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 360.055001][ T30] audit: type=1326 audit(1758225219.634:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 361.455414][ T30] audit: type=1326 audit(1758225219.634:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 361.499698][ T30] audit: type=1326 audit(1758225219.634:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 361.522660][ T30] audit: type=1326 audit(1758225219.634:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 361.701875][ T30] audit: type=1326 audit(1758225219.634:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 362.360966][ T30] audit: type=1326 audit(1758225219.634:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 364.884770][ T8129] bridge2: entered allmulticast mode [ 364.906767][ T981] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 365.067401][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.077897][ T981] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.094657][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.165713][ T981] usb 4-1: config 0 descriptor?? [ 365.173931][ T981] pwc: Askey VC010 type 2 USB webcam detected. [ 366.397087][ T981] pwc: recv_control_msg error -32 req 02 val 2b00 [ 366.404414][ T981] pwc: recv_control_msg error -32 req 02 val 2700 [ 366.412020][ T981] pwc: recv_control_msg error -32 req 02 val 2c00 [ 366.426266][ T981] pwc: recv_control_msg error -32 req 04 val 1000 [ 366.435614][ T981] pwc: recv_control_msg error -32 req 04 val 1300 [ 366.443430][ T981] pwc: recv_control_msg error -32 req 04 val 1400 [ 366.451544][ T981] pwc: recv_control_msg error -32 req 02 val 2000 [ 366.476906][ T981] pwc: recv_control_msg error -32 req 02 val 2100 [ 366.587604][ T981] pwc: recv_control_msg error -32 req 04 val 1500 [ 366.596869][ T981] pwc: recv_control_msg error -32 req 02 val 2500 [ 366.604810][ T981] pwc: recv_control_msg error -32 req 02 val 2400 [ 366.615395][ T981] pwc: recv_control_msg error -32 req 02 val 2600 [ 366.824251][ T981] pwc: recv_control_msg error -71 req 02 val 2800 [ 366.838961][ T981] pwc: recv_control_msg error -71 req 04 val 1100 [ 367.747859][ T981] pwc: recv_control_msg error -71 req 04 val 1200 [ 367.748168][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 367.773393][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 368.131273][ T981] pwc: Registered as video103. [ 368.292907][ T981] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 368.317760][ T981] usb 4-1: USB disconnect, device number 5 [ 371.165391][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 372.111702][ T5953] usb 4-1: device descriptor read/64, error -71 [ 375.208763][ T8206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.575'. [ 378.601943][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 378.601965][ T30] audit: type=1107 audit(1758225239.074:121): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 379.055985][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.062394][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.716122][ T8350] netlink: 512 bytes leftover after parsing attributes in process `syz.2.612'. [ 390.032782][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 393.403536][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.623'. [ 400.322748][ T8406] netlink: 'syz.4.629': attribute type 7 has an invalid length. [ 400.330716][ T8406] netlink: 'syz.4.629': attribute type 8 has an invalid length. [ 400.552312][ T8413] netlink: 'syz.0.631': attribute type 29 has an invalid length. [ 400.560305][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 404.687145][ T8456] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.372700][ T8465] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 406.695091][ T8465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 409.106052][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 409.156863][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.411277][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.818319][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 412.986616][ T8514] journal_path: Non-blockdev passed as './file1' [ 412.993015][ T8514] EXT4-fs: error: could not find journal device path [ 416.065022][ T8547] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 416.255807][ T8547] EXT4-fs (loop3): unable to read superblock [ 423.724585][ T8619] vfat: Bad value for 'uid' [ 423.729171][ T8619] vfat: Bad value for 'uid' [ 425.151972][ T8628] netlink: 72 bytes leftover after parsing attributes in process `syz.1.684'. [ 426.322185][ T8642] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 426.586783][ T8642] EXT4-fs (loop2): unable to read superblock [ 427.081542][ T8647] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.097303][ T8647] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.107964][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 427.122491][ T8647] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.133137][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 427.143998][ T8647] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 427.151895][ T8647] UDF-fs: Scanning with blocksize 512 failed [ 427.172652][ T8647] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.183840][ T8647] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.193887][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 427.205064][ T8647] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.214602][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 427.224233][ T8647] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 427.231926][ T8647] UDF-fs: Scanning with blocksize 1024 failed [ 427.238783][ T8647] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.248354][ T8647] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.258618][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 427.268476][ T8647] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.278011][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 427.287712][ T8647] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 427.295409][ T8647] UDF-fs: Scanning with blocksize 2048 failed [ 427.303917][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 427.313791][ T8647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 427.323414][ T8647] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 427.331108][ T8647] UDF-fs: Scanning with blocksize 4096 failed [ 427.337242][ T8647] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 431.759963][ T24] libceph: connect (1)[c::]:6789 error -101 [ 431.766708][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 431.778878][ T24] libceph: connect (1)[c::]:6789 error -101 [ 431.941790][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 432.731152][ T24] libceph: connect (1)[c::]:6789 error -101 [ 432.737334][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 432.763010][ T8674] ceph: No mds server is up or the cluster is laggy [ 435.705324][ T8708] syz.4.704 (8708) used greatest stack depth: 16056 bytes left [ 437.614951][ T8738] netlink: 'syz.0.714': attribute type 12 has an invalid length. [ 438.675733][ T8747] ext4: Unknown parameter 'fsuuid' [ 439.978780][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.985500][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.263807][ T8792] tipc: Started in network mode [ 443.288606][ T8792] tipc: Node identity 6ecf1985ccc6, cluster identity 4711 [ 443.454482][ T8792] tipc: Enabled bearer , priority 0 [ 443.479977][ T8792] syzkaller0: entered promiscuous mode [ 444.534998][ T8792] syzkaller0: entered allmulticast mode [ 444.610999][ T10] tipc: Node number set to 2718505349 [ 445.781547][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 447.344269][ T8806] tipc: Resetting bearer [ 447.428088][ T8790] tipc: Resetting bearer [ 447.732563][ T8790] tipc: Disabling bearer [ 449.586047][ T8846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.740'. [ 452.779904][ T8868] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 472.003061][ T9006] blk_print_req_error: 3 callbacks suppressed [ 472.003082][ T9006] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 472.264897][ T9006] EXT4-fs (loop2): unable to read superblock [ 475.341629][ T9024] tipc: Enabled bearer , priority 0 [ 475.828398][ T9027] syzkaller0: entered promiscuous mode [ 475.841619][ T9027] syzkaller0: entered allmulticast mode [ 475.975027][ T9024] tipc: Resetting bearer [ 476.949345][ T9021] tipc: Resetting bearer [ 477.187503][ T9021] tipc: Disabling bearer [ 477.961931][ T9045] tipc: Enabling of bearer rejected, failed to enable media [ 482.928676][ T5938] IPVS: starting estimator thread 0... [ 483.295247][ T9083] IPVS: using max 38 ests per chain, 91200 per kthread [ 485.974666][ T10] libceph: connect (1)[c::]:6789 error -101 [ 486.000205][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 486.237062][ T9102] ceph: No mds server is up or the cluster is laggy [ 486.280384][ T10] libceph: connect (1)[c::]:6789 error -101 [ 487.008502][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 489.302637][ T9139] siw: device registration error -23 [ 491.156589][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 491.249040][ T9149] bridge0: entered promiscuous mode [ 491.257463][ T9149] bridge0: left promiscuous mode [ 497.217922][ T9194] kvm: kvm [9193]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3f00003e00 [ 497.235802][ T9194] kvm: kvm [9193]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x3f00007e00 [ 497.447006][ T9194] kvm: kvm [9193]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xb300005b00 [ 498.125673][ T9194] kvm: kvm [9193]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xb300001b00 [ 499.224531][ T30] audit: type=1326 audit(1758225359.674:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 499.463918][ T30] audit: type=1326 audit(1758225359.674:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 499.487141][ T30] audit: type=1326 audit(1758225359.674:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.097104][ T30] audit: type=1326 audit(1758225359.674:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.122035][ T30] audit: type=1326 audit(1758225359.674:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.160078][ T30] audit: type=1326 audit(1758225359.694:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.321858][ T30] audit: type=1326 audit(1758225359.694:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.465503][ T30] audit: type=1326 audit(1758225359.694:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.653354][ T30] audit: type=1326 audit(1758225359.694:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.681229][ T30] audit: type=1326 audit(1758225359.694:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a1858eba9 code=0x7ffc0000 [ 500.698578][ T9225] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ000000000000000000000000x00000000000000030x0000000000000003' [ 501.419248][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.721786][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.034493][ T9225] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 502.060179][ T9225] ref_ctr increment failed for inode: 0x361 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880291aa040 [ 502.288869][ T9224] uprobe: syz.1.839:9224 failed to unregister, leaking uprobe [ 508.722178][ T9286] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 508.820438][ T9290] bridge0: port 4(syz_tun) entered blocking state [ 508.827788][ T9290] bridge0: port 4(syz_tun) entered disabled state [ 508.837390][ T9290] syz_tun: entered allmulticast mode [ 508.858311][ T9290] syz_tun: entered promiscuous mode [ 508.866503][ T9290] bridge0: port 4(syz_tun) entered blocking state [ 508.873274][ T9290] bridge0: port 4(syz_tun) entered forwarding state [ 513.307127][ T9333] tipc: Enabling of bearer rejected, failed to enable media [ 518.336418][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 519.226062][ T9390] netlink: 1 bytes leftover after parsing attributes in process `syz.4.875'. [ 519.235203][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.309290][ T9477] tipc: Started in network mode [ 531.345324][ T9477] tipc: Node identity 9a04fb79737e, cluster identity 4711 [ 531.352742][ T9477] tipc: Enabled bearer , priority 0 [ 531.368044][ T9477] syzkaller0: entered promiscuous mode [ 531.373721][ T9477] syzkaller0: entered allmulticast mode [ 531.397912][ T9477] tipc: Resetting bearer [ 531.408814][ T9476] tipc: Resetting bearer [ 531.655616][ T9487] syz.1.901 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 532.460550][ T43] tipc: Node number set to 3917151097 [ 532.514509][ T9476] tipc: Disabling bearer [ 535.412873][ T9517] Unsupported ieee802154 address type: 0 [ 535.605243][ T9520] vivid-003: disconnect [ 535.611523][ T9520] vivid-003: reconnect [ 536.426229][ T9532] netlink: 1 bytes leftover after parsing attributes in process `syz.1.910'. [ 536.435188][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.293045][ T981] libceph: connect (1)[c::]:6789 error -101 [ 538.300229][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 538.384406][ T9538] ceph: No mds server is up or the cluster is laggy [ 540.818544][ T9563] overlayfs: failed to clone lowerpath [ 546.095151][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.103115][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.630271][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.653001][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.890926][ T981] syz1: Port: 1 Link DOWN [ 547.895762][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.919376][ T6082] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.956787][ T6082] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.017532][ T6082] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.052225][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 549.052245][ T30] audit: type=1326 audit(1758225409.524:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.148581][ T30] audit: type=1326 audit(1758225409.564:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.175939][ T30] audit: type=1326 audit(1758225409.564:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.568022][ T30] audit: type=1326 audit(1758225409.564:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.784115][ T30] audit: type=1326 audit(1758225409.564:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.845552][ T30] audit: type=1326 audit(1758225409.564:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 549.894004][ T30] audit: type=1326 audit(1758225409.564:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 550.425355][ T30] audit: type=1326 audit(1758225409.564:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 551.515226][ T30] audit: type=1326 audit(1758225409.564:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 551.544479][ T30] audit: type=1326 audit(1758225409.564:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59b58eba9 code=0x7ffc0000 [ 558.293241][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 559.915570][ T9733] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 560.618980][ T9733] veth0_vlan: left promiscuous mode [ 560.654789][ T9733] veth0_vlan: entered promiscuous mode [ 561.332394][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 561.530276][ T9733] team0: Device veth0_vlan failed to register rx_handler [ 561.547142][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.737708][ T43] usb 2-1: config 0 has no interfaces? [ 562.570459][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 562.676455][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.835251][ T43] usb 2-1: Product: syz [ 562.845218][ T43] usb 2-1: Manufacturer: syz [ 562.861625][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.491379][ T43] usb 2-1: SerialNumber: syz [ 563.618187][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.690590][ T43] usb 2-1: config 0 descriptor?? [ 563.877781][ T43] usb 2-1: can't set config #0, error -71 [ 564.663483][ T43] usb 2-1: USB disconnect, device number 7 [ 565.713701][ T9768] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 565.727473][ T9768] FAT-fs (loop1): unable to read boot sector [ 573.250818][ T9811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.975'. [ 573.484008][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.973'. [ 577.799153][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 583.255275][ T5876] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 583.429708][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 586.341417][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 586.355030][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 586.365343][ T5876] usb 4-1: can't read configurations, error -71 [ 589.555738][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 590.439784][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 590.452514][ T9927] nbd: device at index 64 is going down [ 590.854808][ T9941] netlink: 'syz.4.1006': attribute type 5 has an invalid length. [ 592.481448][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 592.481492][ T30] audit: type=1326 audit(1758225452.944:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc078eba9 code=0x0 [ 593.434856][ T9641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 593.465157][ T9641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 593.475343][ T9641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 593.497183][ T9641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 593.507039][ T9641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.305273][ T9641] Bluetooth: hci5: command tx timeout [ 596.503065][ T9962] chnl_net:caif_netlink_parms(): no params data found [ 596.751817][ T9987] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.888267][ T9987] FAT-fs (loop2): unable to read boot sector [ 597.250965][ T9962] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.314706][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.333896][ T9962] bridge_slave_0: entered allmulticast mode [ 597.358592][ T9962] bridge_slave_0: entered promiscuous mode [ 597.800825][ T9962] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.932961][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.008606][ T9962] bridge_slave_1: entered allmulticast mode [ 598.153075][ T9962] bridge_slave_1: entered promiscuous mode [ 598.383824][T10002] bridge_slave_0: left allmulticast mode [ 598.389682][ T9641] Bluetooth: hci5: command tx timeout [ 598.838947][T10002] bridge_slave_0: left promiscuous mode [ 598.844983][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.898572][T10002] bridge_slave_1: left allmulticast mode [ 598.936759][T10002] bridge_slave_1: left promiscuous mode [ 598.942682][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.009258][T10002] bond0: (slave bond_slave_0): Releasing backup interface [ 599.037468][T10002] bond_slave_0: left promiscuous mode [ 599.094700][T10002] bond0: (slave bond_slave_1): Releasing backup interface [ 599.168055][T10002] bond_slave_1: left promiscuous mode [ 599.236568][T10002] team0: Port device team_slave_0 removed [ 599.821655][T10002] team0: Port device team_slave_1 removed [ 599.837018][T10002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.895728][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.917684][T10002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.023014][T10005] vlan0: entered promiscuous mode [ 600.148815][ T1169] bond1: (slave macvlan3): speed changed to 0 on port 1 [ 600.174794][ T9962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.194531][T10003] tipc: Enabled bearer , priority 0 [ 600.203559][ T8610] bond1: (slave macvlan3): link status definitely down, disabling slave [ 600.254655][ T9962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.293106][T10024] fuse: Bad value for 'fd' [ 600.461200][ T9962] team0: Port device team_slave_0 added [ 600.461204][ T9641] Bluetooth: hci5: command tx timeout [ 600.493863][ T9962] team0: Port device team_slave_1 added [ 600.615258][ T5938] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 600.639042][T10027] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 600.691284][T10027] EXT4-fs (loop3): unable to read superblock [ 600.713318][ T9962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.735432][ T9962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.800591][ T9962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.952869][ T9962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.959985][ T9962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.986920][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 600.992306][ T9962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.776588][ T5938] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 601.784758][ T5938] usb 3-1: config 0 has no interface number 0 [ 601.798406][ T5938] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 601.815344][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.828004][ T5938] usb 3-1: Product: syz [ 601.832199][ T5938] usb 3-1: Manufacturer: syz [ 601.838271][ T5938] usb 3-1: SerialNumber: syz [ 601.889917][ T5938] usb 3-1: config 0 descriptor?? [ 601.903189][ T5938] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 601.966196][T10030] tipc: Started in network mode [ 601.971126][T10030] tipc: Node identity ac1414aa, cluster identity 4711 [ 602.047246][T10030] tipc: Enabled bearer , priority 10 [ 602.057026][T10037] tipc: Enabled bearer , priority 0 [ 602.176271][ T5938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 602.207202][ T5938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 602.279676][ T9962] hsr_slave_0: entered promiscuous mode [ 602.520343][ T9962] hsr_slave_1: entered promiscuous mode [ 603.130134][ T9962] debugfs: 'hsr0' already exists in 'hsr' [ 603.136305][ T9962] Cannot create hsr debugfs directory [ 603.264885][ T9641] Bluetooth: hci5: command tx timeout [ 603.289482][ T24] tipc: Node number set to 2886997162 [ 605.251014][ T9962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.079556][ T9962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.279298][ T9962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.357534][ T9962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.024817][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 608.027081][ T981] usb 3-1: USB disconnect, device number 3 [ 608.154410][ T981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 608.210261][ T981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 608.247896][T10086] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 608.284424][ T981] quatech2 3-1:0.51: device disconnected [ 608.288654][ T9962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.507769][ T9962] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.073589][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.080894][ T8610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.167031][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.174284][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.999206][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.944906][ T9962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.262145][T10148] overlayfs: failed to clone upperpath [ 617.088604][ T9962] veth0_vlan: entered promiscuous mode [ 617.247636][ T9962] veth1_vlan: entered promiscuous mode [ 617.980973][T10160] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.987234][ T9962] veth0_macvtap: entered promiscuous mode [ 618.024559][T10160] FAT-fs (loop3): unable to read boot sector [ 618.194213][ T9962] veth1_macvtap: entered promiscuous mode [ 618.205697][T10165] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 618.224646][ T9962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.739160][T10170] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 618.745779][ T9962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.793717][ T73] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.818566][ T73] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.835719][ T73] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.990696][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.731576][T10177] kthread_run failed with err -4 [ 620.016867][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.025005][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.505579][T10185] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 622.516227][T10185] XFS (loop3): SB validate failed with error -5. [ 622.917342][ T8610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.321902][ T8610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.315950][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.322365][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.016553][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1072'. [ 625.244427][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe609 [ 625.279658][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xffd600003800 [ 625.499713][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xffd600003800 [ 625.522437][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xffd600003800 [ 626.504727][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0xffd600003800 [ 626.519084][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xffd600003800 [ 626.587436][T10207] kvm: kvm [10205]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x3800 [ 626.703099][T10239] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 627.844500][T10244] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 627.854804][T10244] XFS (loop5): SB validate failed with error -5. [ 634.640645][T10296] tipc: Enabled bearer , priority 0 [ 634.689752][T10296] syzkaller0: entered promiscuous mode [ 634.719324][T10296] syzkaller0: entered allmulticast mode [ 636.436329][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 636.446047][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 636.658273][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 636.667459][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 636.719170][T10307] syz_tun: entered allmulticast mode [ 637.486564][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.309766][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.329428][T10307] syz_tun: left allmulticast mode [ 638.335953][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.365366][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.465805][T10295] tipc: Resetting bearer [ 638.665740][T10295] tipc: Disabling bearer [ 643.963649][T10364] tipc: Started in network mode [ 644.055534][T10364] tipc: Node identity 92a15f3fa486, cluster identity 4711 [ 644.172936][T10364] tipc: Enabled bearer , priority 0 [ 644.276205][T10370] syzkaller0: entered promiscuous mode [ 644.289556][T10370] syzkaller0: entered allmulticast mode [ 644.319125][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 644.328105][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 644.368552][T10364] tipc: Resetting bearer [ 644.380744][T10374] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 644.389033][T10374] cramfs: wrong magic [ 644.945994][T10363] tipc: Resetting bearer [ 645.035898][T10363] tipc: Disabling bearer [ 645.211350][T10382] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 645.314839][T10386] EXT4-fs: Ignoring removed nobh option [ 645.346155][T10386] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 645.375314][T10386] EXT4-fs (loop5): unable to read superblock [ 648.827800][T10417] netlink: 'syz.4.1124': attribute type 3 has an invalid length. [ 648.840573][T10417] syz_tun: entered allmulticast mode [ 648.848893][T10416] syz_tun: left allmulticast mode [ 652.803994][T10439] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 653.009526][T10439] EXT4-fs (loop2): unable to read superblock [ 653.889190][T10436] ntfs3(loop5): try to read out of volume at offset 0x0 [ 657.857376][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1136'. [ 660.905942][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 660.978326][T10497] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 662.130288][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 666.115986][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 666.221271][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 672.295811][T10562] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 673.695208][T10562] veth0_vlan: left promiscuous mode [ 673.703142][T10562] veth0_vlan: entered promiscuous mode [ 674.007415][T10562] team0: Device veth0_vlan failed to register rx_handler [ 674.023195][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 674.715221][T10566] tipc: Enabling of bearer rejected, failed to enable media [ 676.718459][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 677.007529][T10602] NILFS (loop5): device size too small [ 677.450296][T10608] exfat: Deprecated parameter 'utf8' [ 677.504864][T10608] exfat: Deprecated parameter 'utf8' [ 677.525153][T10608] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.536468][T10608] exFAT-fs (loop5): unable to read boot sector [ 677.543111][T10608] exFAT-fs (loop5): failed to read boot sector [ 677.549986][T10608] exFAT-fs (loop5): failed to recognize exfat type [ 680.314288][T10628] tipc: Enabling of bearer rejected, failed to enable media [ 683.024681][T10650] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 683.684428][T10650] EXT4-fs (loop2): unable to read superblock [ 685.469627][T10662] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 685.478968][T10662] hfs: can't find a HFS filesystem on dev loop3 [ 685.740966][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.747408][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.094798][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 688.331431][T10685] tipc: Enabled bearer , priority 0 [ 688.391433][T10685] syzkaller0: entered promiscuous mode [ 688.556947][T10685] syzkaller0: entered allmulticast mode [ 688.585952][T10685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 688.609606][T10685] tipc: Resetting bearer [ 688.777353][T10685] tipc: Resetting bearer [ 688.878445][T10685] tipc: Disabling bearer [ 693.873017][T10727] fuse: Unknown parameter '0x0000000000000007' [ 695.578622][T10738] netlink: 'syz.2.1203': attribute type 10 has an invalid length. [ 696.328427][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.150214][T10738] batadv0: entered promiscuous mode [ 697.158107][T10738] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 697.533710][T10746] o2cb: This node has not been configured. [ 697.539885][T10746] o2cb: Cluster check failed. Fix errors before retrying. [ 697.547604][T10746] (syz.0.1209,10746,0):user_dlm_register:674 ERROR: status = -22 [ 697.555435][T10746] (syz.0.1209,10746,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 699.642109][ T30] audit: type=1326 audit(1758225560.114:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.0.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x0 [ 702.504685][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'. [ 703.039056][T10780] team0: Mode changed to "loadbalance" [ 703.251256][T10780] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 703.305196][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 703.488123][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.522477][T10780] team0: Device bond0 failed to register rx_handler [ 705.271414][T10784] tipc: Disabling bearer [ 705.303390][T10791] bridge0: entered promiscuous mode [ 705.309021][T10791] macvlan5: entered promiscuous mode [ 705.569371][T10801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.958894][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 705.965336][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 705.999940][T10803] ceph: No mds server is up or the cluster is laggy [ 707.409748][T10823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.417420][T10823] IPv6: NLM_F_CREATE should be set when creating new route [ 710.788378][T10856] netlink: 'syz.0.1233': attribute type 5 has an invalid length. [ 711.598584][T10858] ip6tnl1: entered promiscuous mode [ 711.603865][T10858] ip6tnl1: entered allmulticast mode [ 711.915375][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 712.326478][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 712.335078][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 712.364850][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 712.384818][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 713.567058][T10873] lo speed is unknown, defaulting to 1000 [ 713.572911][T10873] lo speed is unknown, defaulting to 1000 [ 713.584005][T10873] lo speed is unknown, defaulting to 1000 [ 714.135824][T10873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 714.174823][T10873] lo speed is unknown, defaulting to 1000 [ 714.184461][T10873] lo speed is unknown, defaulting to 1000 [ 714.192848][T10873] lo speed is unknown, defaulting to 1000 [ 714.201409][T10873] lo speed is unknown, defaulting to 1000 [ 714.209910][T10873] lo speed is unknown, defaulting to 1000 [ 714.219613][T10873] lo speed is unknown, defaulting to 1000 [ 714.228910][T10873] lo speed is unknown, defaulting to 1000 [ 714.457391][ T9641] Bluetooth: hci6: command tx timeout [ 714.528565][T10883] program syz.3.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.937906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.965794][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.974269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.030689][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.685522][ T5866] Bluetooth: hci6: command tx timeout [ 716.846497][T10860] chnl_net:caif_netlink_parms(): no params data found [ 717.014257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.565506][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.595999][T10908] netlink: 'syz.4.1246': attribute type 5 has an invalid length. [ 717.979401][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.054352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.288026][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.295822][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.303421][T10860] bridge_slave_0: entered allmulticast mode [ 718.548407][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 718.721505][ T9641] Bluetooth: hci6: command tx timeout [ 718.736696][T10860] bridge_slave_0: entered promiscuous mode [ 718.753857][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.755297][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.772711][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.808235][T10860] bridge_slave_1: entered allmulticast mode [ 719.058229][T10860] bridge_slave_1: entered promiscuous mode [ 719.094046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.474829][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 719.841534][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.041779][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.134015][ C1] net_ratelimit: 1 callbacks suppressed [ 720.134036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.774899][ T9641] Bluetooth: hci6: command tx timeout [ 720.888644][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.080329][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.863137][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.894830][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.948612][T10860] team0: Port device team_slave_0 added [ 721.973505][T10860] team0: Port device team_slave_1 added [ 722.944098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.991025][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.225525][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.260576][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.821946][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.836664][T10962] netlink: 'syz.2.1261': attribute type 5 has an invalid length. [ 723.847992][T10960] netem: incorrect gi model size [ 723.853450][T10960] netem: change failed [ 723.860910][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.872784][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.900244][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.973811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.145526][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.153715][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.300759][ T30] audit: type=1326 audit(2000000024.291:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.037222][ T30] audit: type=1326 audit(2000000024.291:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.074145][ T30] audit: type=1326 audit(2000000024.301:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fed18d510 code=0x7ffc0000 [ 725.501297][ T30] audit: type=1326 audit(2000000024.311:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fed18d510 code=0x7ffc0000 [ 725.755788][ T24] net_ratelimit: 1 callbacks suppressed [ 725.755809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.796388][ T30] audit: type=1326 audit(2000000024.311:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.820258][ T30] audit: type=1326 audit(2000000024.311:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.844315][ T30] audit: type=1326 audit(2000000024.331:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.874559][ T5866] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 725.874859][T10860] hsr_slave_0: entered promiscuous mode [ 725.893879][ T30] audit: type=1326 audit(2000000024.331:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.928613][ T30] audit: type=1326 audit(2000000024.331:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10967 comm="syz.0.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fed18eba9 code=0x7ffc0000 [ 725.952537][T10860] hsr_slave_1: entered promiscuous mode [ 725.959131][T10860] debugfs: 'hsr0' already exists in 'hsr' [ 725.965399][T10860] Cannot create hsr debugfs directory [ 726.053808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.932348][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.093697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.173922][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.182763][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.192119][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.202903][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.133892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.212769][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.828832][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fc83c00: rx timeout, send abort [ 728.939588][T11001] ceph: No mds server is up or the cluster is laggy [ 728.951111][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 729.338520][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fc83c00: abort rx timeout. Force session deactivation [ 729.350941][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 729.444315][T10860] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 729.674457][T10860] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 729.905333][ T5866] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 729.907259][T10860] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 729.914357][ T5866] Bluetooth: hci1: Injecting HCI hardware error event [ 729.967162][ T9641] Bluetooth: hci1: hardware error 0x00 [ 730.241099][T10860] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.338892][T11014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 730.786351][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 732.208525][ T5876] net_ratelimit: 5 callbacks suppressed [ 732.208545][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.293728][ T9641] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 732.543927][T11035] netlink: 'syz.4.1280': attribute type 5 has an invalid length. [ 732.791279][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.855282][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.911316][T10860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.921985][T10860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.989537][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.996787][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.017979][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 733.048882][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.056104][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.101837][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.334162][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.732894][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.143490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.482456][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.173192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.493953][T11038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.922418][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.213339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.724110][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.020338][T11075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.253008][ C0] net_ratelimit: 1 callbacks suppressed [ 737.253029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.815629][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.292984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.858565][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.867217][ T31] INFO: task syz.1.978:9829 blocked for more than 144 seconds. [ 738.892906][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 739.005616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 739.012968][ T30] audit: type=1326 audit(2000000039.032:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.3.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a1858eba9 code=0x0 [ 739.043092][ T31] task:syz.1.978 state:D stack:23640 pid:9829 tgid:9823 ppid:5869 task_flags:0x400140 flags:0x00080003 [ 739.135600][ T31] Call Trace: [ 739.138940][ T31] [ 739.165307][ T31] __schedule+0x1798/0x4cc0 [ 739.190517][ T31] ? __lock_acquire+0xab9/0xd20 [ 739.352913][ T31] ? __pfx___schedule+0x10/0x10 [ 739.372999][ T31] ? schedule+0x91/0x360 [ 739.443845][ T31] schedule+0x165/0x360 [ 739.464646][ T31] schedule_timeout+0x9a/0x270 [ 739.477744][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 739.494101][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.503375][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.718610][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.739766][ T31] ? wait_for_completion+0x267/0x5d0 [ 739.782987][ T31] wait_for_completion+0x2bf/0x5d0 [ 739.788193][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 739.802879][ T31] ? up_write+0x1c4/0x420 [ 739.807252][ T31] ? remove_client_context+0xc0/0x1e0 [ 739.812628][ T31] disable_device+0x1c6/0x320 [ 739.820375][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.853732][ T31] ? __pfx_disable_device+0x10/0x10 [ 739.859031][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 739.865091][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 739.871059][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 739.882989][ T31] nldev_dellink+0x2d1/0x320 [ 739.887614][ T31] ? __lock_acquire+0xab9/0xd20 [ 739.892478][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 739.913084][ T31] ? apparmor_capable+0x137/0x1b0 [ 739.916181][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.920036][ T31] ? bpf_lsm_capable+0x9/0x20 [ 739.933259][ T31] ? security_capable+0x7e/0x2e0 [ 739.948164][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 739.953600][ T31] rdma_nl_rcv+0x6ae/0x980 [ 739.958059][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 739.974117][ T31] ? __lock_acquire+0xab9/0xd20 [ 739.979010][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.993734][ T31] netlink_unicast+0x82f/0x9e0 [ 739.998562][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 740.023055][ T31] ? netlink_sendmsg+0x642/0xb30 [ 740.029543][ T31] ? skb_put+0x11b/0x210 [ 740.034275][ T31] netlink_sendmsg+0x805/0xb30 [ 740.039063][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.056733][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 740.061726][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.067468][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.083387][ T31] __sock_sendmsg+0x21c/0x270 [ 740.095991][ T31] ____sys_sendmsg+0x505/0x830 [ 740.127720][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.143020][ T31] ? import_iovec+0x74/0xa0 [ 740.147588][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 740.152273][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.158029][ T31] ? __fget_files+0x2a/0x420 [ 740.162634][ T31] ? __fget_files+0x3a0/0x420 [ 740.167693][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 740.172682][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.193112][ T31] ? do_syscall_64+0xbe/0xfa0 [ 740.197820][ T31] do_syscall_64+0xfa/0xfa0 [ 740.202332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.208011][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.214497][ T31] ? clear_bhb_loop+0x60/0xb0 [ 740.219215][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.242917][ T31] RIP: 0033:0x7f6269d8eba9 [ 740.252908][ T31] RSP: 002b:00007f6267fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.261350][ T31] RAX: ffffffffffffffda RBX: 00007f6269fd6180 RCX: 00007f6269d8eba9 [ 740.269811][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 740.278099][ T31] RBP: 00007f6269e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 740.286350][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.312944][ T31] R13: 00007f6269fd6218 R14: 00007f6269fd6180 R15: 00007ffe750d4048 [ 740.323137][ T31] [ 740.326230][ T31] [ 740.326230][ T31] Showing all locks held in the system: [ 740.335505][ T31] 2 locks held by rcu_exp_gp_kthr/18: [ 740.340931][ T31] #0: ffffffff8ead5800 (fill_pool_map-wait-type-override){+.+.}-{4:4}, at: debug_object_assert_init+0x288/0x380 [ 740.354212][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 740.363438][ T31] 1 lock held by khungtaskd/31: [ 740.368290][ T31] #0: ffffffff8e33d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 740.378746][ T31] 3 locks held by kworker/u8:2/36: [ 740.393955][ T31] #0: ffff88813ff09148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 740.463105][ T31] #1: ffffc90000ac7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 740.513014][ T31] #2: ffffffff8f7470c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 740.522073][ T31] 2 locks held by getty/5623: [ 740.532988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.583928][ T31] #0: ffff88814d49e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 740.622878][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 740.672926][ T31] 1 lock held by syz-executor/5861: [ 740.678209][ T31] #0: ffffffff8f7470c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 740.722961][ T31] 3 locks held by kworker/u8:13/6079: [ 740.728370][ T31] #0: ffff88814d0f3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 740.773166][ T31] #1: ffffc9000b0b7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 740.796733][ T31] #2: ffffffff8f7470c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 740.873092][ T31] 4 locks held by kworker/u8:14/6082: [ 740.878529][ T31] #0: ffff88801aea6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 740.909514][ T31] #1: ffffc9000b0c7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 740.924723][ T31] #2: ffffffff8f73a230 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x810 [ 740.936086][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.947242][ T31] #3: ffff88807b3a8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 740.958901][ T31] 2 locks held by syz.1.978/9829: [ 740.964050][ T31] #0: ffffffff9a0a5bd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 740.981269][ T31] #1: ffff88807b3a8700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 740.993017][ T31] 2 locks held by syz.5.1206/10731: [ 740.999930][ T31] #0: ffffffff8f73a230 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 741.012496][ T31] #1: ffff88807b3a8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 741.024141][ T31] 3 locks held by syz-executor/10860: [ 741.029539][ T31] #0: ffff888046fb4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 741.040202][ T31] #1: ffff888046fb40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 741.051053][ T31] #2: ffffffff8f8abf08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 741.061281][ T31] 1 lock held by syz.3.1292/11095: [ 741.066449][ T31] #0: ffffffff8e342df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 741.077471][ T31] 4 locks held by syz.4.1293/11094: [ 741.082688][ T31] #0: ffff8880328e4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 741.092669][ T31] #1: ffff8880328e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 741.102789][ T31] #2: ffffffff8f8abf08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 741.113193][ T31] #3: ffff8880280dcb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 741.122585][ T31] 1 lock held by syz.0.1294/11096: [ 741.127770][ T31] #0: ffffffff8f7470c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.147498][ T31] [ 741.149893][ T31] ============================================= [ 741.149893][ T31] [ 741.206797][ T31] NMI backtrace for cpu 1 [ 741.206823][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 741.206847][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.206860][ T31] Call Trace: [ 741.206868][ T31] [ 741.206878][ T31] dump_stack_lvl+0x189/0x250 [ 741.206913][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.206949][ T31] ? __pfx__printk+0x10/0x10 [ 741.206993][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 741.207026][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 741.207057][ T31] ? __pfx__printk+0x10/0x10 [ 741.207091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 741.207122][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 741.207152][ T31] watchdog+0xf60/0xfa0 [ 741.207182][ T31] ? watchdog+0x1e2/0xfa0 [ 741.207210][ T31] kthread+0x711/0x8a0 [ 741.207234][ T31] ? __pfx_watchdog+0x10/0x10 [ 741.207259][ T31] ? __pfx_kthread+0x10/0x10 [ 741.207279][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.207307][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.207322][ T31] ? __pfx_kthread+0x10/0x10 [ 741.207344][ T31] ret_from_fork+0x4bc/0x870 [ 741.207372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 741.207404][ T31] ? __switch_to_asm+0x39/0x70 [ 741.207428][ T31] ? __switch_to_asm+0x33/0x70 [ 741.207451][ T31] ? __pfx_kthread+0x10/0x10 [ 741.207472][ T31] ret_from_fork_asm+0x1a/0x30 [ 741.207511][ T31] [ 741.207519][ T31] Sending NMI from CPU 1 to CPUs 0: [ 741.356209][ C0] NMI backtrace for cpu 0 [ 741.356239][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 741.356260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.356272][ C0] RIP: 0010:stack_trace_consume_entry+0xe4/0x280 [ 741.356300][ C0] Code: 00 49 89 d9 4c 8b 04 24 4c 89 e2 4c 89 ff 48 8b 74 24 08 48 8b 1f 45 8d 79 01 0f b6 44 15 00 84 c0 0f 85 3a 01 00 00 45 89 38 <4e> 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1a 4c 89 ff 48 89 [ 741.356315][ C0] RSP: 0018:ffffc90000146738 EFLAGS: 00000246 [ 741.356332][ C0] RAX: 0000000000000000 RBX: ffffc900001468d0 RCX: dece7d244ff3fd00 [ 741.356345][ C0] RDX: dffffc0000000000 RSI: ffffffff8af5de33 RDI: ffffc90000146840 [ 741.356358][ C0] RBP: 1ffff92000028d0a R08: ffffc90000146850 R09: 0000000000000009 [ 741.356371][ C0] R10: ffffc900001467d8 R11: ffffffff81ac5640 R12: 0000000000000000 [ 741.356383][ C0] R13: 1ffff92000028d09 R14: ffffc90000146848 R15: 000000000000000a [ 741.356395][ C0] FS: 0000000000000000(0000) GS:ffff8881259dd000(0000) knlGS:0000000000000000 [ 741.356410][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.356422][ C0] CR2: 000020000012d030 CR3: 000000007c5e0000 CR4: 00000000003526f0 [ 741.356437][ C0] Call Trace: [ 741.356444][ C0] [ 741.356450][ C0] ? ieee80211_scan_rx+0x593/0xa20 [ 741.356479][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 741.356499][ C0] arch_stack_walk+0x110/0x150 [ 741.356519][ C0] ? ieee80211_scan_rx+0x593/0xa20 [ 741.356546][ C0] stack_trace_save+0x9c/0xe0 [ 741.356564][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 741.356585][ C0] ? unwind_next_frame+0xa5/0x2390 [ 741.356600][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 741.356620][ C0] kasan_save_track+0x3e/0x80 [ 741.356646][ C0] ? kasan_save_track+0x3e/0x80 [ 741.356678][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 741.356694][ C0] ? __kmalloc_noprof+0x411/0x7f0 [ 741.356719][ C0] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 741.356737][ C0] ? ieee80211_inform_bss+0x10c/0x10a0 [ 741.356761][ C0] ? cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 741.356788][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b30 [ 741.356814][ C0] ? cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 741.356842][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 741.356890][ C0] ? ieee80211_rx_list+0x201c/0x2a90 [ 741.356921][ C0] __kasan_kmalloc+0x93/0xb0 [ 741.356937][ C0] __kmalloc_noprof+0x411/0x7f0 [ 741.356963][ C0] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 741.356984][ C0] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 741.357007][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 741.357034][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.357051][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 741.357077][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 741.357109][ C0] ? kvfree_call_rcu+0x3e9/0x4c0 [ 741.357124][ C0] ? cfg80211_update_known_bss+0x9bd/0x1590 [ 741.357155][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 741.357175][ C0] ? cmp_bss+0x8b3/0xe80 [ 741.357203][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 741.357229][ C0] ? __cfg80211_bss_update+0x101a/0x2120 [ 741.357257][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 741.357280][ C0] ? do_raw_spin_lock+0x121/0x290 [ 741.357303][ C0] ? __kmalloc_noprof+0x432/0x7f0 [ 741.357330][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 741.357355][ C0] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 741.357388][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 741.357426][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.357442][ C0] ? queue_work_on+0x1ed/0x270 [ 741.357458][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 741.357485][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 741.357514][ C0] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 741.357541][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 741.357567][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.357583][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 741.357608][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 741.357638][ C0] ? ieee80211_rx_handlers+0xb6f3/0xb760 [ 741.357671][ C0] ? ieee80211_rx_handlers+0xb6f3/0xb760 [ 741.357699][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 741.357739][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 741.357780][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 741.357808][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 741.357839][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 741.357867][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 741.357896][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 741.357932][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 741.357958][ C0] ieee80211_scan_rx+0x593/0xa20 [ 741.357988][ C0] ieee80211_rx_list+0x201c/0x2a90 [ 741.358023][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 741.358057][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 741.358084][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 741.358117][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 741.358143][ C0] ieee80211_rx_napi+0x1a8/0x3d0 [ 741.358171][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 741.358202][ C0] ? skb_dequeue+0x10e/0x150 [ 741.358230][ C0] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 741.358258][ C0] tasklet_action_common+0x36c/0x580 [ 741.358278][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 741.358300][ C0] ? workqueue_softirq_action+0xd4/0x150 [ 741.358319][ C0] handle_softirqs+0x286/0x870 [ 741.358347][ C0] ? run_ksoftirqd+0x9b/0x100 [ 741.358366][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 741.358394][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 741.358422][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 741.358447][ C0] run_ksoftirqd+0x9b/0x100 [ 741.358463][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 741.358484][ C0] smpboot_thread_fn+0x542/0xa60 [ 741.358511][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 741.358542][ C0] kthread+0x711/0x8a0 [ 741.358563][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 741.358589][ C0] ? __pfx_kthread+0x10/0x10 [ 741.358609][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.358634][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.358650][ C0] ? __pfx_kthread+0x10/0x10 [ 741.358680][ C0] ret_from_fork+0x4bc/0x870 [ 741.358706][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 741.358735][ C0] ? __switch_to_asm+0x39/0x70 [ 741.358758][ C0] ? __switch_to_asm+0x33/0x70 [ 741.358781][ C0] ? __pfx_kthread+0x10/0x10 [ 741.358801][ C0] ret_from_fork_asm+0x1a/0x30 [ 741.358834][ C0] [ 741.572984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.001818][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 742.008730][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.017886][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 742.027952][ T31] Call Trace: [ 742.031243][ T31] [ 742.034184][ T31] dump_stack_lvl+0x99/0x250 [ 742.038791][ T31] ? __asan_memcpy+0x40/0x70 [ 742.043396][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.048602][ T31] ? __pfx__printk+0x10/0x10 [ 742.053233][ T31] vpanic+0x237/0x6d0 [ 742.057249][ T31] ? __pfx_vpanic+0x10/0x10 [ 742.061783][ T31] ? preempt_schedule_common+0x83/0xd0 [ 742.067271][ T31] panic+0xb9/0xc0 [ 742.071006][ T31] ? __pfx_panic+0x10/0x10 [ 742.075438][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 742.080828][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 742.087016][ T31] watchdog+0xf9f/0xfa0 [ 742.091196][ T31] ? watchdog+0x1e2/0xfa0 [ 742.095546][ T31] kthread+0x711/0x8a0 [ 742.099624][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.104325][ T31] ? __pfx_kthread+0x10/0x10 [ 742.108929][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.114142][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.119369][ T31] ? __pfx_kthread+0x10/0x10 [ 742.123967][ T31] ret_from_fork+0x4bc/0x870 [ 742.128572][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 742.133723][ T31] ? __switch_to_asm+0x39/0x70 [ 742.138501][ T31] ? __switch_to_asm+0x33/0x70 [ 742.143275][ T31] ? __pfx_kthread+0x10/0x10 [ 742.147876][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.152669][ T31] [ 742.156032][ T31] Kernel Offset: disabled [ 742.160390][ T31] Rebooting in 86400 seconds..