last executing test programs: 2m34.569140653s ago: executing program 1 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = io_uring_setup(0x47, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x2, 0x8) listen(0xffffffffffffffff, 0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9c, 0x7}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m30.719910817s ago: executing program 1 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2m28.965789407s ago: executing program 1 (id=298): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m25.585229502s ago: executing program 1 (id=302): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 2m25.234269614s ago: executing program 1 (id=305): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m24.980295611s ago: executing program 1 (id=309): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m9.752700284s ago: executing program 32 (id=309): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m58.974509465s ago: executing program 5 (id=366): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket(0x15, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.310105216s ago: executing program 5 (id=371): modify_ldt$write2(0x11, &(0x7f0000000080)={0x200003, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x6, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e2c74d61a346d06d7cde9adea62b4f973ec0efc64fb72c3dafe092a81f9fc6dcd98c0e8013ac69765a4c4a48e641cdf954190a5f32346775e90aa8572db8140209476acc2784069260c352d0d7a54eabfa351812878a691ae4601000000cee491859a1857ba2d54ea6de5090c6a1ab1034f2de74a33a10a6e7459c82f87820545527fded64b567edb8a8ab5b6a78c257c21ab9589169d019cb76f789a31606263b9da99e65d0e17e686df3f58c83b06c45f2eb26f6cfa6ce40a9917354a3890ea0f0f8bbb845897a6e0659f4463284d0ba94671a907dfeb332c737efa86a75e4716991dc31969d8213ca4f0518741473361c42f93f34ab785008103843169c43f"]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x8000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) 1m50.847178794s ago: executing program 5 (id=379): r0 = syz_open_dev$radio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000280)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 1m50.386413834s ago: executing program 5 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x20040090) 1m49.81591468s ago: executing program 5 (id=387): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408780250000000000000109022700"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) lchown(&(0x7f0000000040)='./file0/file1\x00', 0xee01, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 1m49.190789098s ago: executing program 5 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0x29}) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/component_size\x00', 0x2, 0x40) 1m45.613633784s ago: executing program 33 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0x29}) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/component_size\x00', 0x2, 0x40) 1m30.034500502s ago: executing program 0 (id=431): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x6, [@struct={0x3, 0xa, 0x0, 0x4, 0x0, 0xff, [{0xf, 0x2, 0x5}, {0x4, 0x1, 0x5}, {0xb, 0x3, 0x2}, {0xe, 0x4, 0x9}, {0x6, 0x0, 0x7}, {0xc, 0x0, 0x8}, {0xd, 0x5, 0x4}, {0x4, 0x5, 0x9ad5}, {0xb, 0x4, 0x38a}, {0x3, 0x5}]}, @restrict={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x1ff}}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0xfffffff7, [{0x1, 0x1, 0xfffffffb}, {0x8, 0x4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, &(0x7f00000013c0)=""/111, 0x10a, 0x6f, 0x0, 0x3}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) process_vm_writev(r1, &(0x7f0000000e00)=[{0x0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {&(0x7f0000001180)=""/171, 0xab}], 0x6, 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x8000002, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0x8, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) tkill(r6, 0xb) 1m27.120717503s ago: executing program 0 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0x0102\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 1m24.954600018s ago: executing program 0 (id=437): setns(0xc9, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f00000022c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0000:00:1f.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1f.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='xhci_hcd\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.922252467s ago: executing program 0 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m23.561795545s ago: executing program 0 (id=440): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x2, 0x3, 0x3, 0x2, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0x5, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x77dde4e1}) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb5ed2c9e98fa70100180000000000000024000000240000000b000000000000000100008400000000000000000200000000000000090000000000008508000000006f002e30"], &(0x7f0000000080)=""/227, 0x47, 0xe3, 0x1}, 0x28) 1m17.364946143s ago: executing program 0 (id=454): userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$sndseq(0xffffff9c, 0x0, 0x8200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/153, 0x99) 1m0.536549198s ago: executing program 34 (id=454): userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$sndseq(0xffffff9c, 0x0, 0x8200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/153, 0x99) 31.566860498s ago: executing program 4 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 28.446943802s ago: executing program 4 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffdf}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 24.871186682s ago: executing program 4 (id=530): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 24.565642083s ago: executing program 4 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 24.198902708s ago: executing program 4 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 23.443414475s ago: executing program 4 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f294"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 22.834688652s ago: executing program 35 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f294"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 19.22687718s ago: executing program 3 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0x8', 0x3) 18.923053094s ago: executing program 3 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="a0", 0x1) 18.681682966s ago: executing program 3 (id=550): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/17, 0x11}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 15.67874401s ago: executing program 3 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 15.396396978s ago: executing program 3 (id=553): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) eventfd2(0x7, 0x0) io_submit(r0, 0x0, 0x0) 14.870144171s ago: executing program 3 (id=555): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0xf, 0x2d}, 0x0, 0x5}) 14.242531688s ago: executing program 36 (id=555): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0xf, 0x2d}, 0x0, 0x5}) 5.238572235s ago: executing program 2 (id=566): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='lzo-rle', 0x7) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)="001122334455", 0x6) close(r6) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') cachestat(r0, &(0x7f0000000240)={0x1, 0x6}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="f8ff0000ce000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 5.121003742s ago: executing program 2 (id=567): syz_clone(0x40820500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 1.839879752s ago: executing program 2 (id=568): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/17, 0x11}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 769.907542ms ago: executing program 2 (id=569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002780)=[{{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002740)=[{&(0x7f00000005c0)="c3", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r4, 0x4, 0x10001}, 0xc) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) chroot(0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x10000, 0x870, 0x1, 0x1, 0xd59f82, 0x1, 0x0, 0x19ef, 0x2a, 0x9, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r2) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) bind$unix(r8, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 328.00041ms ago: executing program 2 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 0s ago: executing program 2 (id=571): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) eventfd2(0x7, 0x0) io_submit(r0, 0x0, &(0x7f0000000800)) kernel console output (not intermixed with test programs): e [ 87.219505][ T5629] bridge_slave_1: entered allmulticast mode [ 87.227097][ T5629] bridge_slave_1: entered promiscuous mode [ 87.275064][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.282499][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.289721][ T5628] bridge_slave_0: entered allmulticast mode [ 87.297229][ T5628] bridge_slave_0: entered promiscuous mode [ 87.369616][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.376812][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.384048][ T5628] bridge_slave_1: entered allmulticast mode [ 87.391760][ T5628] bridge_slave_1: entered promiscuous mode [ 87.416514][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.483745][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.565187][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.572648][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.579881][ T5625] bridge_slave_0: entered allmulticast mode [ 87.587483][ T5625] bridge_slave_0: entered promiscuous mode [ 87.605832][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.650412][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.657737][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.664935][ T5625] bridge_slave_1: entered allmulticast mode [ 87.672589][ T5625] bridge_slave_1: entered promiscuous mode [ 87.694806][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.727862][ T5629] team0: Port device team_slave_0 added [ 87.800248][ T5629] team0: Port device team_slave_1 added [ 87.806042][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.813483][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.820916][ T5626] bridge_slave_0: entered allmulticast mode [ 87.828665][ T5626] bridge_slave_0: entered promiscuous mode [ 87.848762][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.855893][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.863232][ T5624] bridge_slave_0: entered allmulticast mode [ 87.870911][ T5624] bridge_slave_0: entered promiscuous mode [ 87.880811][ T5628] team0: Port device team_slave_0 added [ 87.919529][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.926765][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.934280][ T5626] bridge_slave_1: entered allmulticast mode [ 87.942565][ T5626] bridge_slave_1: entered promiscuous mode [ 87.952660][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.962065][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.969439][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.976583][ T5624] bridge_slave_1: entered allmulticast mode [ 87.984315][ T5624] bridge_slave_1: entered promiscuous mode [ 87.993160][ T5628] team0: Port device team_slave_1 added [ 87.999226][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.006365][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.013803][ T5627] bridge_slave_0: entered allmulticast mode [ 88.021711][ T5627] bridge_slave_0: entered promiscuous mode [ 88.059300][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.093490][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.100789][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.108004][ T5627] bridge_slave_1: entered allmulticast mode [ 88.115580][ T5627] bridge_slave_1: entered promiscuous mode [ 88.123756][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.130998][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.157209][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.230539][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.237854][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.263775][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.278254][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.303359][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.313133][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.320402][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.346662][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.383388][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394691][ T5625] team0: Port device team_slave_0 added [ 88.404311][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.414109][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.421245][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.447545][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.461628][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.474051][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.522103][ T5625] team0: Port device team_slave_1 added [ 88.586314][ T5626] team0: Port device team_slave_0 added [ 88.619137][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.626122][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.652092][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.665540][ T5624] team0: Port device team_slave_0 added [ 88.686047][ T5627] team0: Port device team_slave_0 added [ 88.693865][ T5626] team0: Port device team_slave_1 added [ 88.708905][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.715904][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.742160][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.755774][ T5624] team0: Port device team_slave_1 added [ 88.769205][ T5629] hsr_slave_0: entered promiscuous mode [ 88.775679][ T5629] hsr_slave_1: entered promiscuous mode [ 88.784387][ T5627] team0: Port device team_slave_1 added [ 88.837242][ T5643] Bluetooth: hci5: command tx timeout [ 88.842702][ T5640] Bluetooth: hci2: command tx timeout [ 88.893888][ T5628] hsr_slave_0: entered promiscuous mode [ 88.900872][ T5628] hsr_slave_1: entered promiscuous mode [ 88.907277][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 88.913068][ T5628] Cannot create hsr debugfs directory [ 88.919326][ T5640] Bluetooth: hci0: command tx timeout [ 88.919404][ T5643] Bluetooth: hci4: command tx timeout [ 88.924743][ T4941] Bluetooth: hci1: command tx timeout [ 88.931861][ T5643] Bluetooth: hci3: command tx timeout [ 88.942343][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.949627][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.975564][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.988264][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.995216][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.021320][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.045306][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.052380][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.078449][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.111441][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.118444][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.144573][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.184691][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.193832][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.220344][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.268408][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.275392][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.301618][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.369592][ T5625] hsr_slave_0: entered promiscuous mode [ 89.376147][ T5625] hsr_slave_1: entered promiscuous mode [ 89.382472][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 89.389303][ T5625] Cannot create hsr debugfs directory [ 89.514758][ T5626] hsr_slave_0: entered promiscuous mode [ 89.521595][ T5626] hsr_slave_1: entered promiscuous mode [ 89.528783][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 89.534633][ T5626] Cannot create hsr debugfs directory [ 89.547141][ T5624] hsr_slave_0: entered promiscuous mode [ 89.553551][ T5624] hsr_slave_1: entered promiscuous mode [ 89.559840][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 89.565581][ T5624] Cannot create hsr debugfs directory [ 89.691406][ T5627] hsr_slave_0: entered promiscuous mode [ 89.698022][ T5627] hsr_slave_1: entered promiscuous mode [ 89.704200][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 89.710017][ T5627] Cannot create hsr debugfs directory [ 90.213395][ T5629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.228392][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.260541][ T5629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.271940][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.280318][ T5629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.291615][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.329239][ T5629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.342569][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.404221][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.420106][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.433705][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.443873][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.451927][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.461932][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.469920][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.480459][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.585043][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.595884][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.604429][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.614997][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.624114][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.633761][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.651872][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.663345][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.776219][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.788446][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.796271][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.805774][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.814189][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.824291][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.841014][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.851535][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.918467][ T5643] Bluetooth: hci2: command tx timeout [ 90.919548][ T5640] Bluetooth: hci5: command tx timeout [ 90.947554][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.997128][ T5640] Bluetooth: hci3: command tx timeout [ 91.008761][ T5640] Bluetooth: hci0: command tx timeout [ 91.008786][ T5643] Bluetooth: hci1: command tx timeout [ 91.014175][ T4941] Bluetooth: hci4: command tx timeout [ 91.022969][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.036411][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.052132][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.064359][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.075276][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.098286][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.108497][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.118509][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.143018][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.153555][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.195743][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.203091][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.253203][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.262518][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.269645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.293545][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.303547][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.324050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.331181][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.341010][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.353963][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.362298][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.373187][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.381553][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.391455][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.416376][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.423488][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.489775][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.589388][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.643759][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.650933][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.683457][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.722705][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.729872][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.852254][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.898395][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.919976][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.927131][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.959614][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.966760][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.013168][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.062450][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.105099][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.112311][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.127967][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.152107][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.159262][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.240973][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.248171][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.292469][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.299673][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.548757][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.998479][ T4941] Bluetooth: hci2: command tx timeout [ 93.009438][ T4941] Bluetooth: hci5: command tx timeout [ 93.077639][ T5640] Bluetooth: hci0: command tx timeout [ 93.080390][ T5643] Bluetooth: hci3: command tx timeout [ 93.083457][ T5637] Bluetooth: hci1: command tx timeout [ 93.094499][ T4941] Bluetooth: hci4: command tx timeout [ 93.309681][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.557250][ T5629] veth0_vlan: entered promiscuous mode [ 93.584031][ T5628] veth0_vlan: entered promiscuous mode [ 93.596484][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.673727][ T5628] veth1_vlan: entered promiscuous mode [ 93.702933][ T5629] veth1_vlan: entered promiscuous mode [ 93.825060][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.932014][ T5629] veth0_macvtap: entered promiscuous mode [ 93.953612][ T5628] veth0_macvtap: entered promiscuous mode [ 93.974332][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.994770][ T5629] veth1_macvtap: entered promiscuous mode [ 94.012798][ T5628] veth1_macvtap: entered promiscuous mode [ 94.103840][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.116536][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.145420][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.162468][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.183038][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.201079][ T5626] veth0_vlan: entered promiscuous mode [ 94.292470][ T5626] veth1_vlan: entered promiscuous mode [ 94.316398][ T5624] veth0_vlan: entered promiscuous mode [ 94.388025][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.408054][ T5625] veth0_vlan: entered promiscuous mode [ 94.417357][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.426859][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.456474][ T5624] veth1_vlan: entered promiscuous mode [ 94.468933][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509628][ T5627] veth0_vlan: entered promiscuous mode [ 94.522701][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.528676][ T5625] veth1_vlan: entered promiscuous mode [ 94.531401][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.586339][ T5627] veth1_vlan: entered promiscuous mode [ 94.624427][ T5626] veth0_macvtap: entered promiscuous mode [ 94.639025][ T424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.655375][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.656577][ T424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.668128][ T5626] veth1_macvtap: entered promiscuous mode [ 94.676809][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.770947][ T5624] veth0_macvtap: entered promiscuous mode [ 94.794883][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.803797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.805019][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.820103][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.846368][ T5624] veth1_macvtap: entered promiscuous mode [ 94.876827][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.912476][ T5625] veth0_macvtap: entered promiscuous mode [ 94.947366][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.974573][ T5627] veth0_macvtap: entered promiscuous mode [ 95.011280][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.173404][ T5625] veth1_macvtap: entered promiscuous mode [ 95.234935][ T3306] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303385][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.409580][ T5627] veth1_macvtap: entered promiscuous mode [ 95.518843][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.664897][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820903][ T1108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.905841][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.927854][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.064896][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508492][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.717042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.737193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.362575][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.406105][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.532413][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.589269][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.611973][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.613683][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.679008][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.618989][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.687361][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.452007][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.472546][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.622691][ T1108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.682451][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.702538][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.250561][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.477762][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.639358][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.737363][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.753326][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.765036][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.317309][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.346136][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.420116][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.432597][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.196425][ T3360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.314254][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.322922][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.359310][ T3360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.520627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.966896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.068140][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442713][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 109.767936][ T30] audit: type=1800 audit(1785937865.250:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24" name="blocks" dev="configfs" ino=9180 res=0 errno=0 [ 109.873487][ T30] audit: type=1800 audit(1785937865.260:3): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24" name="dev" dev="configfs" ino=9181 res=0 errno=0 [ 111.204380][ T5955] 9p: Could not find request transport: fd0x0000000000000003 [ 113.037758][ T5977] overlayfs: failed to resolve './file1': -2 [ 119.969238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 120.743762][ T6048] loop0: detected capacity change from 0 to 128 [ 121.443002][ T6060] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6060] [ 124.152924][ T6081] loop1: detected capacity change from 0 to 128 [ 124.829331][ T6085] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6085] [ 125.303268][ T6084] loop5: detected capacity change from 0 to 128 [ 125.709207][ T6087] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6087] [ 128.131924][ T6102] tipc: Started in network mode [ 128.147192][ T6102] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.179440][ T6102] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 128.235155][ T6102] tipc: Enabled bearer , priority 10 [ 128.429342][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.699445][ T5776] tipc: Node number set to 1 [ 130.159309][ T5812] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 130.189151][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 130.265915][ T5812] usb 3-1: Product: syz [ 130.318341][ T5812] usb 3-1: SerialNumber: syz [ 130.802965][ T30] audit: type=1800 audit(1785937886.260:4): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.77" name="blocks" dev="configfs" ino=9717 res=0 errno=0 [ 130.825773][ T5812] usb 3-1: config 0 descriptor?? [ 130.850118][ T5812] usb 3-1: can't set config #0, error -71 [ 130.880685][ T30] audit: type=1800 audit(1785937886.260:5): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.77" name="dev" dev="configfs" ino=9718 res=0 errno=0 [ 130.915534][ T30] audit: type=1800 audit(1785937886.400:6): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="ipv4_address" dev="configfs" ino=9725 res=0 errno=0 [ 130.948658][ T5812] usb 3-1: USB disconnect, device number 2 [ 131.001030][ T30] audit: type=1800 audit(1785937886.430:7): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="ipv4_port" dev="configfs" ino=9726 res=0 errno=0 [ 131.197297][ T30] audit: type=1800 audit(1785937886.430:8): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="num" dev="configfs" ino=9727 res=0 errno=0 [ 131.407014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 132.069982][ T30] audit: type=1800 audit(1785937886.430:9): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="local" dev="configfs" ino=9728 res=0 errno=0 [ 132.240769][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.263037][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.586344][ T30] audit: type=1800 audit(1785937886.440:10): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="block_bytes" dev="configfs" ino=9730 res=0 errno=0 [ 132.806338][ T6138] jffs2: notice: (6138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.782762][ T6181] loop1: detected capacity change from 0 to 128 [ 136.103040][ T6183] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6183] [ 137.460338][ T30] audit: type=1800 audit(1785937892.820:11): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="num" dev="configfs" ino=10614 res=0 errno=0 [ 137.723222][ T30] audit: type=1800 audit(1785937892.890:12): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="blocks" dev="configfs" ino=10618 res=0 errno=0 [ 139.400998][ T30] audit: type=1800 audit(1785937893.110:13): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="dev" dev="configfs" ino=10619 res=0 errno=0 [ 140.886264][ T6224] Zero length message leads to an empty skb [ 141.127068][ T5769] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.524042][ T6236] jffs2: notice: (6236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.329154][ T5769] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 142.433810][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 142.471075][ T5769] usb 6-1: Product: syz [ 142.485683][ T5769] usb 6-1: SerialNumber: syz [ 142.515557][ T5769] usb 6-1: config 0 descriptor?? [ 142.792483][ T5769] hso 6-1:0.0: Can't find BULK endpoints [ 142.971794][ T5769] usb 6-1: USB disconnect, device number 2 [ 144.617642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.462528][ T6310] loop0: detected capacity change from 0 to 128 [ 148.240017][ T6316] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6316] [ 149.637051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.807008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.887339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 152.707267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.665846][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'. [ 154.857681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.787901][ T30] audit: type=1800 audit(1785937911.270:14): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.141" name="size" dev="configfs" ino=10821 res=0 errno=0 [ 155.829283][ T6338] null_blk: nullb1: using native zone append [ 155.865972][ T30] audit: type=1800 audit(1785937911.300:15): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.141" name="zoned" dev="configfs" ino=10822 res=0 errno=0 [ 157.071618][ T30] audit: type=1800 audit(1785937911.300:16): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.141" name="zone_size" dev="configfs" ino=10823 res=0 errno=0 [ 157.166687][ T30] audit: type=1800 audit(1785937911.310:17): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.141" name="power" dev="configfs" ino=10824 res=0 errno=0 [ 157.339069][ T6338] null_blk: disk nullb1 created [ 159.198240][ T6364] loop5: detected capacity change from 0 to 128 [ 159.547238][ T6366] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6366] [ 161.483547][ T6377] loop0: detected capacity change from 0 to 256 [ 164.401645][ T6394] jffs2: notice: (6394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.583026][ T6401] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 165.658523][ T6406] loop5: detected capacity change from 0 to 256 [ 165.684135][ T6406] vfat: Unknown parameter 'obj_user' [ 166.101527][ T6412] gadgetfs: bound to dummy_udc driver [ 167.423174][ T6419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.159'. [ 167.807084][ T6420] jffs2: notice: (6420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.813216][ T6423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.903126][ T6423] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 167.984619][ T6423] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.400892][ T6449] jffs2: notice: (6449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.364751][ T6460] netlink: 80 bytes leftover after parsing attributes in process `syz.5.173'. [ 171.495789][ T6463] loop1: detected capacity change from 0 to 256 [ 172.288287][ T6460] syz.5.173 uses obsolete (PF_INET,SOCK_PACKET) [ 172.626008][ T6469] loop4: detected capacity change from 0 to 16 [ 172.758420][ T6469] erofs (device loop4): mounted with root inode @ nid 36. [ 172.862335][ T6469] syz.4.176: attempt to access beyond end of device [ 172.862335][ T6469] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 172.915602][ T6474] loop1: detected capacity change from 0 to 128 [ 172.943681][ T6469] syz.4.176: attempt to access beyond end of device [ 172.943681][ T6469] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 173.020828][ T6469] syz.4.176: attempt to access beyond end of device [ 173.020828][ T6469] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 173.039476][ T6476] jffs2: notice: (6476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 173.103399][ T6469] erofs (device loop4): read error -5 @ 0 of nid 89 [ 173.133193][ T30] audit: type=1800 audit(1785937928.620:18): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.176" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 173.302930][ T6482] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6482] [ 173.336839][ T4941] Bluetooth: hci2: link tx timeout [ 173.343714][ T4941] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.971459][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 174.124954][ T6472] loop3: detected capacity change from 0 to 32768 [ 174.140175][ T6492] loop2: detected capacity change from 0 to 256 [ 174.163687][ T6472] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.175 (6472) [ 174.183361][ T6492] vfat: Unknown parameter 'obj_user' [ 174.810140][ T6505] gadgetfs: bound to dummy_udc driver [ 175.477303][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 175.623822][ T6472] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.692254][ T6515] loop4: detected capacity change from 0 to 256 [ 175.694148][ T6472] BTRFS info (device loop3): using crc32c checksum algorithm [ 175.780262][ T6472] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 176.098686][ T6472] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 176.512281][ T6472] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 176.650983][ T6472] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 176.744684][ T6472] BTRFS error (device loop3): open_ctree failed: -12 [ 176.762839][ T6525] loop5: detected capacity change from 0 to 256 [ 176.856697][ T6525] vfat: Unknown parameter 'obj_user' [ 177.142003][ T6525] gadgetfs: bound to dummy_udc driver [ 178.423559][ T6547] jffs2: notice: (6547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.465367][ T6549] loop1: detected capacity change from 0 to 128 [ 178.551733][ T6553] loop5: detected capacity change from 0 to 256 [ 178.662837][ T6553] vfat: Unknown parameter 'obj_user' [ 178.772373][ T6555] jffs2: notice: (6555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.026565][ T6559] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6559] [ 179.262713][ T6561] gadgetfs: bound to dummy_udc driver [ 180.715607][ T6577] loop1: detected capacity change from 0 to 128 [ 181.047161][ T6580] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6580] [ 182.950128][ T6593] netlink: 'syz.2.203': attribute type 5 has an invalid length. [ 182.993931][ T6593] netlink: 'syz.2.203': attribute type 6 has an invalid length. [ 183.041190][ T6593] netlink: 209572 bytes leftover after parsing attributes in process `syz.2.203'. [ 183.056376][ T6595] jffs2: notice: (6595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.436875][ T6604] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 184.806779][ T6615] loop4: detected capacity change from 0 to 128 [ 185.839879][ T6623] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5625] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6623] [ 187.318371][ T30] audit: type=1800 audit(1785937942.810:19): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.215" name="size" dev="configfs" ino=11471 res=0 errno=0 [ 187.360027][ T30] audit: type=1800 audit(1785937942.840:20): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.215" name="zone_size" dev="configfs" ino=11474 res=0 errno=0 [ 188.816759][ T30] audit: type=1800 audit(1785937942.840:21): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.215" name="power" dev="configfs" ino=11475 res=0 errno=0 [ 188.876911][ T6637] loop3: detected capacity change from 0 to 512 [ 188.968974][ T6637] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.217: inode has both inline data and extents flags [ 188.983001][ T6637] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.983674][ T6637] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.217: couldn't read orphan inode 15 (err -117) [ 188.993393][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 188.993485][ C0] EXT4-fs (loop3): initial error at time 1785937944: ext4_orphan_get:1399: inode 15 [ 188.993522][ C0] EXT4-fs (loop3): last error at time 1785937944: ext4_orphan_get:1399: inode 15 [ 189.031151][ T6637] loop3: lost filesystem error report for type 5 error -117 [ 189.061038][ T6637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.107511][ T6648] loop1: detected capacity change from 0 to 256 [ 189.131892][ T6648] vfat: Unknown parameter 'obj_user' [ 189.544141][ T6651] gadgetfs: bound to dummy_udc driver [ 190.386612][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.471562][ T6661] loop4: detected capacity change from 0 to 128 [ 190.922928][ T6667] NILFS (nullb0): couldn't find nilfs on the device [ 191.157217][ T6669] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5625] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6669] [ 191.606558][ T6672] jffs2: notice: (6672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.710622][ T6676] loop1: detected capacity change from 0 to 128 [ 192.086146][ T6684] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6684] [ 192.697428][ T30] audit: type=1800 audit(1785937948.190:22): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.230" name="addr_trsvcid" dev="configfs" ino=12382 res=0 errno=0 [ 192.793866][ T6686] overlayfs: missing 'workdir' [ 193.125828][ T30] audit: type=1800 audit(1785937948.530:23): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.236" name="zoned" dev="configfs" ino=12387 res=0 errno=0 [ 193.837507][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.845390][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.873831][ T30] audit: type=1800 audit(1785937948.530:24): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.236" name="zone_nr_conv" dev="configfs" ino=12388 res=0 errno=0 [ 193.894680][ T30] audit: type=1800 audit(1785937948.650:25): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.236" name="power" dev="configfs" ino=12389 res=0 errno=0 [ 194.064726][ T30] audit: type=1800 audit(1785937949.550:26): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="num" dev="configfs" ino=12402 res=0 errno=0 [ 194.170394][ T30] audit: type=1800 audit(1785937949.560:27): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="blocks" dev="configfs" ino=12403 res=0 errno=0 [ 194.459580][ T30] audit: type=1800 audit(1785937949.690:28): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="dev" dev="configfs" ino=12404 res=0 errno=0 [ 194.859030][ T6705] gadgetfs: bound to dummy_udc driver [ 194.974107][ T6698] block device autoloading is deprecated and will be removed. [ 196.772536][ T6724] nvmet: adding nsid 1 to subsystem testnqn [ 196.779562][ T6725] jffs2: notice: (6725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.782391][ T30] audit: type=1800 audit(1785937952.270:29): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="device_path" dev="configfs" ino=11649 res=0 errno=0 [ 196.817868][ T6724] nvmet: failed to open block device (null): (-22) [ 196.844039][ T6724] nvmet_tcp: malformed ip/port passed: : [ 196.877085][ T30] audit: type=1800 audit(1785937952.310:30): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="enable" dev="configfs" ino=11650 res=0 errno=0 [ 196.904696][ T30] audit: type=1800 audit(1785937952.320:31): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="addr_trtype" dev="configfs" ino=11651 res=0 errno=0 [ 197.150914][ T6730] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6730] [ 197.808347][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 197.808365][ T30] audit: type=1800 audit(1785937953.300:34): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="size" dev="configfs" ino=11664 res=0 errno=0 [ 198.093262][ T30] audit: type=1800 audit(1785937953.330:35): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="zoned" dev="configfs" ino=11665 res=0 errno=0 [ 198.244871][ T6737] gadgetfs: bound to dummy_udc driver [ 198.497362][ T5799] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.572897][ T30] audit: type=1800 audit(1785937953.330:36): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="zone_size" dev="configfs" ino=11666 res=0 errno=0 [ 198.701132][ T30] audit: type=1800 audit(1785937953.330:37): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="power" dev="configfs" ino=11667 res=0 errno=0 [ 198.733463][ T6733] gadgetfs: suspended from state 2 [ 198.936095][ T30] audit: type=1800 audit(1785937954.420:38): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="device_path" dev="configfs" ino=12516 res=0 errno=0 [ 198.987291][ T6741] nvmet: failed to open block device (null): (-22) [ 199.002697][ T30] audit: type=1800 audit(1785937954.470:39): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="enable" dev="configfs" ino=11688 res=0 errno=0 [ 199.064664][ T30] audit: type=1800 audit(1785937954.550:40): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="addr_trtype" dev="configfs" ino=12523 res=0 errno=0 [ 199.098950][ T6747] NILFS (nullb0): couldn't find nilfs on the device [ 199.674042][ T6741] nvmet_tcp: malformed ip/port passed: :4420 [ 199.963550][ T30] audit: type=1800 audit(1785937955.150:41): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="addr_adrfam" dev="configfs" ino=12524 res=0 errno=0 [ 200.051355][ T30] audit: type=1800 audit(1785937955.150:42): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="addr_trsvcid" dev="configfs" ino=12529 res=0 errno=0 [ 200.074238][ T30] audit: type=1800 audit(1785937955.470:43): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.252" name="size" dev="configfs" ino=12533 res=0 errno=0 [ 200.533661][ T6751] loop4: detected capacity change from 0 to 2048 [ 201.434317][ T6751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.332264][ T6762] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 203.349250][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 203.349267][ T30] audit: type=1800 audit(1785937958.820:47): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.255" name="num" dev="configfs" ino=12565 res=0 errno=0 [ 204.156218][ T30] audit: type=1800 audit(1785937959.620:48): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.255" name="blocks" dev="configfs" ino=12574 res=0 errno=0 [ 204.208260][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.239170][ T30] audit: type=1800 audit(1785937959.680:49): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.255" name="dev" dev="configfs" ino=12575 res=0 errno=0 [ 204.288529][ T6783] loop5: detected capacity change from 0 to 128 [ 205.159573][ T6791] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 205.651205][ T6796] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6796] [ 206.067009][ T4941] Bluetooth: hci5: link tx timeout [ 206.073360][ T4941] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 206.088660][ T4941] Bluetooth: hci5: link tx timeout [ 206.094172][ T4941] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 206.546069][ T6773] block device autoloading is deprecated and will be removed. [ 206.618457][ T30] audit: type=1800 audit(1785937962.110:50): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="device_path" dev="configfs" ino=11747 res=0 errno=0 [ 206.622842][ T6799] nvmet: failed to open block device (null): (-22) [ 207.480337][ T30] audit: type=1800 audit(1785937962.110:51): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="enable" dev="configfs" ino=11748 res=0 errno=0 [ 207.502128][ T30] audit: type=1800 audit(1785937962.210:52): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="addr_adrfam" dev="configfs" ino=11757 res=0 errno=0 [ 208.119351][ T4941] Bluetooth: hci5: command 0x0406 tx timeout [ 208.128240][ T30] audit: type=1800 audit(1785937963.610:53): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="addr_traddr" dev="configfs" ino=12634 res=0 errno=0 [ 208.159251][ T6799] nvmet_tcp: malformed ip/port passed: :4420 [ 208.209569][ T30] audit: type=1800 audit(1785937963.620:54): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="addr_trsvcid" dev="configfs" ino=12635 res=0 errno=0 [ 208.990784][ T6828] input: syz0 as /devices/virtual/input/input5 [ 209.452158][ T6832] comedi comedi3: pcl818: I/O base address or length out of range [ 210.279898][ T5647] Bluetooth: hci5: command 0x0406 tx timeout [ 210.740296][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 210.998425][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 211.004995][ T5647] Bluetooth: hci4: command 0x0406 tx timeout [ 211.006646][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 211.011497][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 211.042647][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 211.841964][ T5776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.924931][ T5776] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 211.991464][ T5776] usb 4-1: config 0 has no interface number 0 [ 212.040870][ T5776] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 212.110313][ T5776] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 212.138888][ T5776] usb 4-1: config 0 interface 88 has no altsetting 0 [ 212.164190][ T5776] usb 4-1: string descriptor 0 read error: -22 [ 212.171702][ T5776] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 212.204419][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 212.390759][ T5776] usb 4-1: config 0 descriptor?? [ 212.750925][ T5776] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 213.231910][ T30] audit: type=1800 audit(1785937968.700:55): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.277" name="buffered_io" dev="configfs" ino=11811 res=0 errno=0 [ 213.266081][ T5776] usb 4-1: USB disconnect, device number 2 [ 213.537477][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.887025][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 213.908641][ T24] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.940213][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.116603][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'. [ 214.589497][ T24] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 214.607430][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.638554][ T24] usb 2-1: config 0 descriptor?? [ 215.264467][ T5643] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 215.517132][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.286'. [ 215.526011][ T6892] netlink: 348 bytes leftover after parsing attributes in process `syz.5.286'. [ 215.535198][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.286'. [ 215.544168][ T6892] netlink: 348 bytes leftover after parsing attributes in process `syz.5.286'. [ 215.554011][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.286'. [ 216.622318][ T6891] kthread_run failed with err -4 [ 216.828561][ T5643] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 216.934270][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 217.075648][ T30] audit: type=1800 audit(1785937972.540:56): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.289" name="file0" dev="overlay" ino=266 res=0 errno=0 [ 218.011902][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 218.054826][ T24] usb 2-1: USB disconnect, device number 2 [ 218.173241][ T6913] random: crng reseeded on system resumption [ 218.301595][ T6916] Bluetooth: MGMT ver 1.23 [ 218.428258][ T6921] 9pnet_fd: Insufficient options for proto=fd [ 218.587652][ T30] audit: type=1326 audit(1785937974.070:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.620674][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 218.636879][ T30] audit: type=1326 audit(1785937974.080:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.741064][ T30] audit: type=1326 audit(1785937974.080:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.788968][ T30] audit: type=1326 audit(1785937974.080:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.814077][ T30] audit: type=1326 audit(1785937974.080:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.881489][ T30] audit: type=1326 audit(1785937974.080:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 218.947632][ T30] audit: type=1326 audit(1785937974.080:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 219.036061][ T30] audit: type=1326 audit(1785937974.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 219.218393][ T30] audit: type=1326 audit(1785937974.080:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 219.367923][ T30] audit: type=1326 audit(1785937974.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x7ffc0000 [ 221.823826][ T6949] gadgetfs: bound to dummy_udc driver [ 222.178016][ T5776] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 222.188957][ C0] gadgetfs: connected [ 222.195050][ T5776] gadgetfs: disconnected [ 222.355053][ C0] gadgetfs: connected [ 222.363604][ T5776] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 222.389369][ T6947] gadgetfs: suspended from state 3 [ 222.397777][ T5776] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 222.419274][ T6947] gadgetfs: disconnected [ 222.452517][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.488970][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 222.520959][ T5776] usb 1-1: can't set config #1, error -71 [ 222.545425][ T6960] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 222.562186][ T5776] usb 1-1: USB disconnect, device number 4 [ 224.562444][ T6976] mmap: syz.1.309 (6976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.206331][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.220812][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.238257][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.326475][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.356525][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.369447][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.622829][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.638532][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.651573][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 226.664796][ T6990] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 227.487408][ T7003] netlink: 'syz.5.316': attribute type 20 has an invalid length. [ 227.495367][ T7003] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.503540][ T7003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.512139][ T7003] IPv6: NLM_F_CREATE should be set when creating new route [ 230.255445][ T7045] Mass Storage Function, version: 2009/09/11 [ 230.261960][ T7045] LUN: removable file: (no medium) [ 230.297540][ T7045] LUN: removable file: (no medium) [ 232.182878][ T7055] input: syz1 as /devices/virtual/input/input7 [ 232.967101][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 232.997906][ T5755] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 233.169829][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 233.195834][ T5755] usb 6-1: unable to get BOS descriptor or descriptor too short [ 233.203911][ T5813] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 233.226316][ T5755] usb 6-1: not running at top speed; connect to a high speed hub [ 233.248084][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.261320][ T5755] usb 6-1: config 8 has an invalid interface number: 191 but max is 0 [ 233.284872][ T5755] usb 6-1: config 8 has no interface number 0 [ 233.291810][ T5813] usb 3-1: config 0 descriptor?? [ 233.314060][ T5755] usb 6-1: config 8 interface 191 has no altsetting 0 [ 233.349594][ T5755] usb 6-1: New USB device found, idVendor=04da, idProduct=3904, bcdDevice=12.d1 [ 233.373439][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.456519][ T5755] usb 6-1: Product: syz [ 233.479204][ T7088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.488382][ T7088] overlayfs: missing 'lowerdir' [ 233.522496][ T5755] usb 6-1: Manufacturer: syz [ 233.592453][ T5755] usb 6-1: SerialNumber: syz [ 233.738625][ T5813] as10x_usb: device has been detected [ 233.884776][ T5813] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 234.460678][ T5813] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 235.099370][ T5813] as10x_usb: error during firmware upload part1 [ 235.153866][ T5813] Registered device nBox DVB-T Dongle [ 235.356753][ T7094] sctp_transport_update_pmtu: 48 callbacks suppressed [ 235.356793][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.382535][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.397442][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.412987][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.443100][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.456837][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.471338][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.487272][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.502436][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.518371][ T7094] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.708767][ T5813] usb 3-1: USB disconnect, device number 3 [ 236.934091][ T7102] gadgetfs: bound to dummy_udc driver [ 236.942146][ T5755] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 236.975172][ T7104] program syz.4.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.053251][ T5755] usb 6-1: USB disconnect, device number 3 [ 237.227674][ T5813] Unregistered device nBox DVB-T Dongle [ 237.297762][ T7109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.339'. [ 237.450181][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 237.570172][ T5813] as10x_usb: device has been disconnected [ 237.580046][ T7104] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 238.175731][ T7137] ======================================================= [ 238.175731][ T7137] WARNING: The mand mount option has been deprecated and [ 238.175731][ T7137] and is ignored by this kernel. Remove the mand [ 238.175731][ T7137] option from the mount to silence this warning. [ 238.175731][ T7137] ======================================================= [ 238.277370][ T5769] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.821195][ T5769] usb 3-1: Using ep0 maxpacket: 8 [ 239.271970][ T5769] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.282171][ T5769] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.292090][ T5769] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 239.303874][ T5769] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 239.315301][ T5769] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 239.325596][ T5769] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.518362][ T5769] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.788401][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.311487][ T5633] IPVS: starting estimator thread 0... [ 240.614223][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.641996][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.647045][ T7169] IPVS: using max 26 ests per chain, 62400 per kthread [ 240.663917][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.680492][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.693916][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.722480][ T5769] usb 3-1: GET_CAPABILITIES returned 0 [ 240.728223][ T5769] usbtmc 3-1:16.0: can't read capabilities [ 240.944409][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.547570][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.556728][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.565849][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.574941][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.141571][ T7193] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 242.816160][ T5631] Bluetooth: hci6: command tx timeout [ 242.996895][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.006637][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.016756][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.057889][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.067571][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.077248][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.086357][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.095446][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.106993][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.117006][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.126750][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.512356][ T5783] usb 3-1: USB disconnect, device number 4 [ 244.847787][ T5631] Bluetooth: hci6: command tx timeout [ 244.968444][ T7214] process 'syz.3.356' launched './file2' with NULL argv: empty string added [ 246.170527][ T7229] smpboot: CPU 1 is now offline [ 246.857945][ T5631] Bluetooth: hci6: command tx timeout [ 248.917591][ T5631] Bluetooth: hci6: command tx timeout [ 249.115130][ T7251] netlink: 'syz.4.368': attribute type 2 has an invalid length. [ 249.287236][ T7254] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 249.305174][ T7251] netlink: 224 bytes leftover after parsing attributes in process `syz.4.368'. [ 251.729616][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.868506][ T7258] bond1: (slave geneve2): making interface the new active one [ 251.927152][ T5783] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 251.941372][ T7258] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 252.128522][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 252.191674][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 252.305763][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 252.415036][ T5783] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 252.485147][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.720704][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.991795][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.747107][ T5783] usb 6-1: Product: syz [ 256.404417][ T5783] usb 6-1: Manufacturer: syz [ 256.572049][ T7281] program syz.0.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.582550][ T7281] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 256.627976][ T5783] usb 6-1: SerialNumber: syz [ 256.783474][ T5783] usb 6-1: can't set config #1, error -71 [ 256.883210][ T5783] usb 6-1: USB disconnect, device number 4 [ 257.194241][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 257.501846][ T7308] gadgetfs: bound to dummy_udc driver [ 257.828420][ T5769] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.913013][ C0] gadgetfs: connected [ 257.933725][ T5769] gadgetfs: disconnected [ 258.119120][ T5629] select_fallback_rq: 60 callbacks suppressed [ 258.119135][ T5629] process 6769 (syz.5.254) no longer affine to cpu1 [ 258.574552][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.654748][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.702751][ T7173] bridge_slave_0: entered allmulticast mode [ 258.719333][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 258.778964][ T7173] bridge_slave_0: entered promiscuous mode [ 261.403825][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.596598][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.657680][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.713774][ T7173] bridge_slave_1: entered allmulticast mode [ 261.791795][ T7173] bridge_slave_1: entered promiscuous mode [ 261.921321][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.215997][ T7342] max out of range [ 262.257873][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.365410][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.636107][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.671076][ T7349] max out of range [ 262.826049][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.840875][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.849035][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.859972][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.871092][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.136175][ T7173] team0: Port device team_slave_0 added [ 263.312831][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.398461][ T5769] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.443605][ T7173] team0: Port device team_slave_1 added [ 263.579908][ T5769] usb 1-1: Using ep0 maxpacket: 8 [ 263.618610][ T5769] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.688588][ T5769] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.753245][ T5769] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.775902][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.813732][ T5769] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.843322][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.904450][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.974544][ T5769] usb 1-1: config 0 descriptor?? [ 264.054859][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.165551][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.230569][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.435960][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.482521][ T5769] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 264.546288][ T5769] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 264.598651][ T5769] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 264.670420][ T5769] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 264.715419][ T5769] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 264.776289][ T5769] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 264.998152][ T5643] Bluetooth: hci5: command tx timeout [ 265.165298][ T7173] hsr_slave_0: entered promiscuous mode [ 265.239589][ T7173] hsr_slave_1: entered promiscuous mode [ 265.293751][ T7173] debugfs: 'hsr0' already exists in 'hsr' [ 265.354258][ T7173] Cannot create hsr debugfs directory [ 265.554459][ T5769] usb 1-1: USB disconnect, device number 7 [ 265.783091][ T7381] nvme_fabrics: missing parameter 'host_traddr=%s' [ 267.077096][ T5643] Bluetooth: hci5: command tx timeout [ 269.158706][ T5643] Bluetooth: hci5: command tx timeout [ 269.377488][ T48] bridge_slave_1: left allmulticast mode [ 269.423263][ T48] bridge_slave_1: left promiscuous mode [ 269.469753][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.601538][ T48] bridge_slave_0: left allmulticast mode [ 269.670268][ T48] bridge_slave_0: left promiscuous mode [ 269.713915][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.803363][ T7397] max out of range [ 271.237144][ T5643] Bluetooth: hci5: command tx timeout [ 272.112227][ T7406] max out of range [ 272.439494][ T7411] 9pnet_virtio: no channels available for device syz [ 274.953121][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.991705][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.030810][ T48] bond0 (unregistering): Released all slaves [ 275.190331][ T7412] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 275.499583][ T48] tipc: Disabling bearer [ 275.580368][ T48] tipc: Left network mode [ 275.585991][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 276.140193][ T7434] jffs2: notice: (7434) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 276.831409][ T30] audit: type=1326 audit(1785938032.320:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.2.425" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d2419e0d9 code=0x0 [ 277.238991][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 277.280109][ T48] hsr_slave_0: left promiscuous mode [ 277.303588][ T7178] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 277.335930][ T48] hsr_slave_1: left promiscuous mode [ 277.366466][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.379909][ T7451] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 277.423175][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.432302][ T5799] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 277.471375][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 277.492506][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.512097][ T5783] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.570533][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.601053][ T5783] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.640645][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.686867][ T5783] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.740236][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.781956][ T48] veth1_macvtap: left promiscuous mode [ 278.034895][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.060455][ T48] veth0_macvtap: left promiscuous mode [ 279.087292][ T48] veth1_vlan: left promiscuous mode [ 280.085431][ T5799] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.162475][ T48] veth0_vlan: left promiscuous mode [ 280.179510][ T7471] ceph: No mds server is up or the cluster is laggy [ 280.188446][ T5633] libceph: connect (1)[c::]:6789 error -101 [ 280.286621][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.310325][ T5633] libceph: mon0 (1)[c::]:6789 connect error [ 280.396685][ T5783] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 280.555373][ T5799] usb 3-1: config 0 descriptor?? [ 280.588951][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.622989][ T5799] usb 3-1: can't set config #0, error -71 [ 280.681915][ T5783] usb 5-1: Product: syz [ 280.777276][ T5799] usb 3-1: USB disconnect, device number 5 [ 281.575002][ T5783] usb 5-1: can't set config #1, error -71 [ 283.237949][ T5783] usb 5-1: USB disconnect, device number 2 [ 283.534701][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 283.592112][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 283.649431][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 283.755560][ T7484] ceph: No mds server is up or the cluster is laggy [ 283.998748][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 284.031074][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 287.706846][ T48] team0 (unregistering): Port device team_slave_1 removed [ 287.843980][ T48] team0 (unregistering): Port device team_slave_0 removed [ 288.246824][ T7553] Bluetooth: MGMT ver 1.23 [ 288.853274][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 289.280330][ T7173] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.436663][ T30] audit: type=1326 audit(1785938044.920:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 289.463313][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.534191][ T7173] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.695708][ T30] audit: type=1326 audit(1785938044.920:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 289.734782][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.893632][ T7173] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.945525][ T30] audit: type=1326 audit(1785938044.920:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 290.046328][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.099248][ T7574] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.132236][ T7173] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 290.187280][ T7574] IPv6: Can't replace route, no match found [ 290.200739][ T30] audit: type=1326 audit(1785938044.920:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 290.242088][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.357470][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 290.363515][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 290.419567][ T30] audit: type=1326 audit(1785938044.960:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 290.609996][ T30] audit: type=1326 audit(1785938044.960:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 290.776368][ T48] IPVS: stop unused estimator thread 0... [ 290.789468][ T7583] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 290.822021][ T30] audit: type=1326 audit(1785938044.960:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 291.047815][ T30] audit: type=1326 audit(1785938044.960:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 291.181578][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.242303][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.271936][ T30] audit: type=1326 audit(1785938044.960:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 291.324100][ T7352] bridge_slave_0: entered allmulticast mode [ 291.375645][ T5643] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 291.385268][ T7352] bridge_slave_0: entered promiscuous mode [ 291.611308][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.635190][ T30] audit: type=1326 audit(1785938044.960:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be7b9e0d9 code=0x7ffc0000 [ 291.682661][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.740669][ T7352] bridge_slave_1: entered allmulticast mode [ 291.793573][ T7352] bridge_slave_1: entered promiscuous mode [ 292.214193][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.317418][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.718440][ T7352] team0: Port device team_slave_0 added [ 292.791835][ T7352] team0: Port device team_slave_1 added [ 292.853288][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 293.136807][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.192800][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.350091][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.422890][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.463614][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.609419][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.039452][ T7352] hsr_slave_0: entered promiscuous mode [ 294.086628][ T7352] hsr_slave_1: entered promiscuous mode [ 294.499058][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.587759][ T5783] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.808016][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 294.841732][ T5783] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 294.894049][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 294.932843][ T185] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 294.963733][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.996392][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 295.082732][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.125827][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.133014][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.161036][ T185] usb 5-1: Using ep0 maxpacket: 8 [ 295.190768][ T185] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 295.202509][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.242059][ T185] usb 5-1: config 0 has no interface number 0 [ 295.276475][ T185] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.297845][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 295.358825][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.365980][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.391065][ T185] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 295.409038][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 295.476521][ T185] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.519315][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 295.594597][ T5783] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 295.604724][ T185] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.664213][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 295.725924][ T185] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 295.786876][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 295.825605][ T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.892137][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.932608][ T185] usb 5-1: config 0 descriptor?? [ 296.003739][ T185] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 296.013938][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.123156][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.235210][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 296.407587][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 296.494479][ T5783] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 296.563113][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 296.666812][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 296.784471][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.853100][ T7352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 296.946865][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.081593][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.139395][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.205164][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 297.272716][ T5799] usb 5-1: USB disconnect, device number 3 [ 297.278787][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 297.338120][ T7352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 297.375565][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 297.459456][ T5783] usb 4-1: string descriptor 0 read error: -71 [ 297.514494][ T5783] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 297.591417][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.608738][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.671586][ T7352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.709168][ T5783] usb 4-1: can't set config #168, error -71 [ 297.781087][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.790099][ T5783] usb 4-1: USB disconnect, device number 3 [ 298.417408][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 298.560529][ T7352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.872778][ T5799] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 299.826248][ T7352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.526003][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.532301][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.532965][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.535324][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.536172][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.557049][ T5631] Bluetooth: hci7: command tx timeout [ 303.763242][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.469'. [ 304.225035][ T7676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 304.225082][ T7676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.225443][ T7676] vhci_hcd vhci_hcd.0: Device attached [ 304.255542][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.797106][ T185] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 305.565942][ T7685] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 305.637107][ T5631] Bluetooth: hci7: command tx timeout [ 306.737259][ T1170] vhci_hcd vhci_hcd.3: stop threads [ 306.737285][ T1170] vhci_hcd vhci_hcd.3: release socket [ 307.017015][ T1170] vhci_hcd vhci_hcd.3: disconnect device [ 307.354759][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.422768][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.422861][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.504232][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.504319][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.722912][ T5631] Bluetooth: hci7: command tx timeout [ 308.090010][ T5643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.091616][ T5643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.093935][ T5643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.095015][ T5643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.097546][ T5643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.420092][ T7705] bridge_slave_0: left allmulticast mode [ 308.420115][ T7705] bridge_slave_0: left promiscuous mode [ 308.420656][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.482982][ T7705] bridge_slave_1: left allmulticast mode [ 308.483006][ T7705] bridge_slave_1: left promiscuous mode [ 308.483179][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.524545][ T7705] bond0: (slave bond_slave_0): Releasing backup interface [ 308.582649][ T7705] bond0: (slave bond_slave_1): Releasing backup interface [ 308.671668][ T7705] team0: Port device team_slave_0 removed [ 308.723286][ T7705] team0: Port device team_slave_1 removed [ 308.724070][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.724089][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.731083][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.731102][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.738745][ T7705] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.810949][ T5643] Bluetooth: hci7: command tx timeout [ 310.188109][ T185] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 310.197419][ T5643] Bluetooth: hci6: command tx timeout [ 310.997526][ T48] bridge_slave_1: left allmulticast mode [ 311.046496][ T48] bridge_slave_1: left promiscuous mode [ 311.114431][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.220063][ T48] bridge_slave_0: left allmulticast mode [ 311.272391][ T48] bridge_slave_0: left promiscuous mode [ 311.313592][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.949612][ T185] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 312.277054][ T5643] Bluetooth: hci6: command tx timeout [ 313.355970][ T7753] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 313.524770][ T7753] overlayfs: missing 'lowerdir' [ 313.634749][ T185] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 313.669915][ T185] usb 3-1: config 0 has no interface number 0 [ 313.705275][ T185] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 313.768932][ T185] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.836260][ T185] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.894876][ T185] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 313.935701][ T185] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 313.980064][ T185] usb 3-1: Product: syz [ 314.004601][ T185] usb 3-1: SerialNumber: syz [ 314.060836][ T185] usb 3-1: config 0 descriptor?? [ 314.111744][ T185] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 314.135110][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.178407][ T185] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 314.196243][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.259942][ T48] bond0 (unregistering): Released all slaves [ 314.357105][ T5643] Bluetooth: hci6: command tx timeout [ 314.702328][ T48] hsr_slave_0: left promiscuous mode [ 314.710980][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.720043][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.727179][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.734289][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.741411][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.748562][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.755670][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.762780][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.770014][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.777213][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 314.806175][ T5783] usb 3-1: USB disconnect, device number 6 [ 314.812092][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 314.886227][ T48] hsr_slave_1: left promiscuous mode [ 314.961463][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.065199][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.439274][ T5643] Bluetooth: hci6: command tx timeout [ 316.450929][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.607087][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.643693][ T5783] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 319.054769][ T48] team0 (unregistering): Port device team_slave_1 removed [ 319.166581][ T48] team0 (unregistering): Port device team_slave_0 removed [ 319.897420][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 326.579994][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 326.580009][ T30] audit: type=1800 audit(1785938082.070:257): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="attr_allow_any_host" dev="configfs" ino=16939 res=0 errno=0 [ 326.924403][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.952301][ T30] audit: type=1800 audit(1785938082.100:258): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="enable" dev="configfs" ino=16940 res=0 errno=0 [ 327.054887][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.127112][ T7674] bridge_slave_0: entered allmulticast mode [ 327.222785][ T30] audit: type=1800 audit(1785938082.120:259): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="addr_trtype" dev="configfs" ino=16941 res=0 errno=0 [ 327.261197][ T7674] bridge_slave_0: entered promiscuous mode [ 327.289045][ T7838] jffs2: notice: (7838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.377877][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.452917][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 327.462624][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 327.471102][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 327.482298][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 327.500933][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 327.510571][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.565049][ T30] audit: type=1800 audit(1785938082.120:260): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="addr_traddr" dev="configfs" ino=16942 res=0 errno=0 [ 327.634348][ T7674] bridge_slave_1: entered allmulticast mode [ 327.733295][ T7674] bridge_slave_1: entered promiscuous mode [ 327.821268][ T30] audit: type=1800 audit(1785938082.130:261): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="addr_trsvcid" dev="configfs" ino=16943 res=0 errno=0 [ 327.941847][ T7838] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.063450][ T30] audit: type=1800 audit(1785938082.820:262): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.496" name="idProduct" dev="configfs" ino=16984 res=0 errno=0 [ 328.176614][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.382315][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.025971][ T7865] input: syz0 as /devices/virtual/input/input10 [ 329.563460][ T5631] Bluetooth: hci8: command tx timeout [ 329.651600][ T7880] No source specified [ 329.682026][ T7674] team0: Port device team_slave_0 added [ 329.768570][ T7674] team0: Port device team_slave_1 added [ 329.796168][ T7877] (NULL device *): [drm] Primary plane not found [ 331.637168][ T5631] Bluetooth: hci8: command tx timeout [ 332.664967][ T7894] gadgetfs: bound to dummy_udc driver [ 332.744155][ T6631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.951079][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.008365][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.142405][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.214982][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 333.276781][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.334392][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.514821][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.661564][ T6631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.718943][ T5631] Bluetooth: hci8: command tx timeout [ 333.765997][ T7901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.781561][ T7901] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 333.969511][ T7901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.048475][ T7901] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.126488][ T7901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.181249][ T7901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.283662][ T7901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.329606][ T7901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.474852][ T7901] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 334.510767][ T6631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.534667][ T7901] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 334.569811][ T5783] IPVS: starting estimator thread 0... [ 334.625886][ T7901] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 334.697610][ T7925] IPVS: using max 34 ests per chain, 81600 per kthread [ 334.764409][ T7901] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 334.820579][ T7901] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 334.929625][ T7901] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 334.990080][ T7901] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 335.030622][ T7901] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 335.066276][ T7674] hsr_slave_0: entered promiscuous mode [ 335.095945][ T7901] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 335.124380][ T7674] hsr_slave_1: entered promiscuous mode [ 335.183581][ T7674] debugfs: 'hsr0' already exists in 'hsr' [ 335.239862][ T7674] Cannot create hsr debugfs directory [ 335.317535][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 335.600101][ T6631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.854040][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.897303][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.948003][ T7710] bridge_slave_0: entered allmulticast mode [ 335.970556][ T7710] bridge_slave_0: entered promiscuous mode [ 336.172597][ T7951] gadgetfs: bound to dummy_udc driver [ 336.197709][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 336.216332][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.262934][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.357222][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 336.517108][ T5643] Bluetooth: hci7: command 0x0c1a tx timeout [ 336.527059][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 336.847693][ T5643] Bluetooth: hci6: command 0x0c1a tx timeout [ 336.997039][ T5643] Bluetooth: hci8: command 0x0c1a tx timeout [ 337.319791][ T5631] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 337.327799][ T5643] Bluetooth: hci0: command 0xfc11 tx timeout [ 337.400682][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 337.877448][ T7710] bridge_slave_1: entered allmulticast mode [ 338.277030][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 338.437545][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 338.451528][ C0] gadgetfs: connected [ 338.466514][ T10] gadgetfs: disconnected [ 338.507974][ T7710] bridge_slave_1: entered promiscuous mode [ 338.598413][ T5631] Bluetooth: hci7: command 0x0c1a tx timeout [ 338.919372][ T5631] Bluetooth: hci6: command 0x0c1a tx timeout [ 339.079024][ T5631] Bluetooth: hci8: command 0x0c1a tx timeout [ 339.270538][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.555513][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.051119][ T7995] nvme_fabrics: missing parameter 'transport=%s' [ 340.107045][ T7995] nvme_fabrics: missing parameter 'nqn=%s' [ 340.352717][ T7710] team0: Port device team_slave_0 added [ 340.406599][ T7710] team0: Port device team_slave_1 added [ 340.681901][ T5631] Bluetooth: hci7: command 0x0c1a tx timeout [ 341.001823][ T5631] Bluetooth: hci6: command 0x0c1a tx timeout [ 341.157459][ T5631] Bluetooth: hci8: command 0x0c1a tx timeout [ 343.262783][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.303991][ T8039] gadgetfs: bound to dummy_udc driver [ 343.311279][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.433657][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.699915][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.737826][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.864257][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.138039][ T6631] bridge_slave_1: left allmulticast mode [ 344.165867][ T6631] bridge_slave_1: left promiscuous mode [ 344.185536][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.231245][ T6631] bridge_slave_0: left allmulticast mode [ 344.261195][ T6631] bridge_slave_0: left promiscuous mode [ 344.291071][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.739638][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.776295][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.812359][ T6631] bond0 (unregistering): Released all slaves [ 344.854823][ T8053] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 345.451049][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.463115][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.473291][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.484986][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.498288][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.611897][ T7710] hsr_slave_0: entered promiscuous mode [ 345.651719][ T7710] hsr_slave_1: entered promiscuous mode [ 345.703789][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 345.746427][ T7710] Cannot create hsr debugfs directory [ 346.500431][ T8096] gadgetfs: bound to dummy_udc driver [ 346.700624][ T5643] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 346.860845][ T6631] hsr_slave_0: left promiscuous mode [ 346.913351][ T6631] hsr_slave_1: left promiscuous mode [ 346.939235][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.973591][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.016472][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.059623][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.126413][ T6631] veth1_macvtap: left promiscuous mode [ 347.144748][ T6631] veth0_macvtap: left promiscuous mode [ 347.172465][ T6631] veth1_vlan: left promiscuous mode [ 347.190818][ T6631] veth0_vlan: left promiscuous mode [ 347.347291][ T5783] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 347.523130][ T5783] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 347.551580][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 347.561621][ T5643] Bluetooth: hci0: command tx timeout [ 347.588763][ T5783] usb 4-1: Product: syz [ 347.603096][ T5783] usb 4-1: Manufacturer: syz [ 347.619265][ T5783] usb 4-1: SerialNumber: syz [ 347.643739][ T5783] usb 4-1: config 0 descriptor?? [ 347.781613][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 347.842493][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 347.880726][ T5783] usb 4-1: USB disconnect, device number 4 [ 348.572006][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.613981][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.656849][ T7843] bridge_slave_0: entered allmulticast mode [ 348.704301][ T7843] bridge_slave_0: entered promiscuous mode [ 348.764690][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.823420][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.871016][ T7843] bridge_slave_1: entered allmulticast mode [ 348.889241][ T30] audit: type=1800 audit(1785938104.380:263): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.549" name="buffered_io" dev="configfs" ino=17951 res=0 errno=0 [ 348.935539][ T7843] bridge_slave_1: entered promiscuous mode [ 349.330394][ T8139] binder: 8135:8139 ioctl c00c6211 0 returned -14 [ 349.637012][ T5643] Bluetooth: hci0: command tx timeout [ 350.024939][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.891322][ T5643] Bluetooth: hci0: command tx timeout [ 351.909653][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.140777][ T8150] gadgetfs: bound to dummy_udc driver [ 352.379599][ T5627] process 6619 (syz.3.212) no longer affine to cpu1 [ 352.379636][ T5627] process 6716 (syz.3.239) no longer affine to cpu1 [ 352.510291][ T7843] team0: Port device team_slave_0 added [ 352.544751][ T7843] team0: Port device team_slave_1 added [ 352.886198][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.939185][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.044761][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.240560][ T6631] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.315447][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.356703][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.435580][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.600076][ T6631] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.773343][ T7674] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.796467][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.809386][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.817646][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.826495][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.837777][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.876578][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.894870][ T7674] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.918151][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.961206][ T5631] Bluetooth: hci0: command tx timeout [ 353.967935][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 353.982847][ T6631] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.082758][ T7843] hsr_slave_0: entered promiscuous mode [ 354.091796][ T7843] hsr_slave_1: entered promiscuous mode [ 354.098581][ T7843] debugfs: 'hsr0' already exists in 'hsr' [ 354.104381][ T7843] Cannot create hsr debugfs directory [ 354.114636][ T7674] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.133579][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.146140][ T7674] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.154245][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 354.180370][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 354.203971][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.215633][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 354.269239][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.288026][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 354.309513][ T6631] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.331099][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 354.353347][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.379201][ T10] usb 3-1: Product: syz [ 354.401483][ T10] usb 3-1: Manufacturer: syz [ 354.413238][ T10] usb 3-1: SerialNumber: syz [ 354.446047][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 354.492923][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input12 [ 354.669694][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 354.696843][ T10] (id 0x00) [ 354.839117][ T10] rc_core: IR keymap rc-imon-pad not found [ 354.855301][ T10] Registered IR keymap rc-empty [ 354.886302][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 354.922586][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 354.996420][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 355.051317][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input13 [ 355.072892][ T7710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.136389][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.154132][ T10] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:7> initialized [ 355.181923][ T7710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 355.218242][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.471841][ T7710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.522349][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.656525][ T7710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.680063][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.878399][ T5631] Bluetooth: hci1: command tx timeout [ 356.398677][ T8206] imon:send_packet: task interrupted [ 356.423873][ T8206] imon:send_packet: packet tx failed (-512) [ 356.449052][ T8206] imon:vfd_write: send packet #3 failed [ 356.539148][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.553057][ T5776] usb 3-1: USB disconnect, device number 7 [ 356.575098][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.599140][ T8067] bridge_slave_0: entered allmulticast mode [ 356.625313][ T8067] bridge_slave_0: entered promiscuous mode [ 356.665356][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 356.699664][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.712546][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.722265][ T8067] bridge_slave_1: entered allmulticast mode [ 356.730640][ T8067] bridge_slave_1: entered promiscuous mode [ 356.912589][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.952563][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.089690][ T8067] team0: Port device team_slave_0 added [ 357.131452][ T8067] team0: Port device team_slave_1 added [ 357.333520][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.501249][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.957526][ T5631] Bluetooth: hci1: command tx timeout [ 358.287115][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.791235][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.895287][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.918443][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.039580][ T5631] Bluetooth: hci1: command tx timeout [ 360.046766][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.659247][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.673988][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.684514][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.694800][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.704874][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.903807][ T8067] hsr_slave_0: entered promiscuous mode [ 360.952084][ T8067] hsr_slave_1: entered promiscuous mode [ 361.003262][ T8067] debugfs: 'hsr0' already exists in 'hsr' [ 361.042148][ T8067] Cannot create hsr debugfs directory [ 361.073627][ T6631] bridge_slave_1: left allmulticast mode [ 361.120789][ T6631] bridge_slave_1: left promiscuous mode [ 361.156780][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.226069][ T6631] bridge_slave_0: left allmulticast mode [ 361.270730][ T6631] bridge_slave_0: left promiscuous mode [ 361.295051][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.376113][ T6631] bridge_slave_1: left allmulticast mode [ 361.406589][ T6631] bridge_slave_1: left promiscuous mode [ 361.444520][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.506455][ T6631] bridge_slave_0: left allmulticast mode [ 361.554808][ T6631] bridge_slave_0: left promiscuous mode [ 361.576035][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.132117][ T5643] Bluetooth: hci1: command tx timeout [ 362.145744][ T30] audit: type=1800 audit(1785938117.630:264): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.564" name="out_ports" dev="configfs" ino=19140 res=0 errno=0 [ 362.183275][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.213326][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.233759][ T30] audit: type=1800 audit(1785938117.660:265): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.564" name="in_ports" dev="configfs" ino=19139 res=0 errno=0 [ 362.271901][ T6631] bond0 (unregistering): Released all slaves [ 362.618319][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.643701][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.662741][ T6631] bond0 (unregistering): Released all slaves [ 362.757979][ T5643] Bluetooth: hci2: command tx timeout [ 362.833656][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 363.308500][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.333419][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.356539][ T8161] bridge_slave_0: entered allmulticast mode [ 363.377925][ T8161] bridge_slave_0: entered promiscuous mode [ 363.400380][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.475445][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.495717][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.510218][ T8161] bridge_slave_1: entered allmulticast mode [ 363.522299][ T8161] bridge_slave_1: entered promiscuous mode [ 363.761198][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.802917][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.905569][ T6631] hsr_slave_0: left promiscuous mode [ 363.924880][ T6631] hsr_slave_1: left promiscuous mode [ 363.939238][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.952263][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.976166][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.997691][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.014436][ T6631] hsr_slave_0: left promiscuous mode [ 364.031133][ T6631] hsr_slave_1: left promiscuous mode [ 364.042975][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.064497][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.120468][ T6631] veth1_macvtap: left promiscuous mode [ 364.138718][ T6631] veth0_macvtap: left promiscuous mode [ 364.148449][ T6631] veth1_vlan: left promiscuous mode [ 364.158180][ T6631] veth0_vlan: left promiscuous mode [ 364.837603][ T5643] Bluetooth: hci2: command tx timeout [ 364.891489][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 364.911052][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 365.230263][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 365.253792][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 365.484292][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11 [ 365.560322][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.668091][ T8161] team0: Port device team_slave_0 added [ 365.781730][ T8161] team0: Port device team_slave_1 added [ 366.001773][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.008932][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.048201][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.064373][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.092561][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.134823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.142004][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.212538][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.229138][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.261961][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.904589][ T8161] hsr_slave_0: entered promiscuous mode [ 366.917841][ T5643] Bluetooth: hci2: command tx timeout [ 366.945774][ T8161] hsr_slave_1: entered promiscuous mode [ 367.500956][ T8306] gadgetfs: bound to dummy_udc driver [ 367.521637][ T7843] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.583598][ T7843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.623951][ T7843] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 367.684630][ T5628] ================================================================== [ 367.692703][ T5628] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 367.700234][ T5628] Read of size 8 at addr ffff888052303858 by task syz-executor/5628 [ 367.708187][ T5628] [ 367.710496][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 367.710521][ T5628] Tainted: [L]=SOFTLOCKUP [ 367.710527][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 367.710538][ T5628] Call Trace: [ 367.710546][ T5628] [ 367.710553][ T5628] dump_stack_lvl+0xe8/0x150 [ 367.710585][ T5628] print_address_description+0x55/0x1e0 [ 367.710612][ T5628] ? __mutex_lock+0x154/0x1550 [ 367.710636][ T5628] print_report+0x58/0x70 [ 367.710660][ T5628] kasan_report+0x117/0x150 [ 367.710690][ T5628] ? __mutex_lock+0x154/0x1550 [ 367.710717][ T5628] __mutex_lock+0x154/0x1550 [ 367.710745][ T5628] ? seqcount_lockdep_reader_access+0xea/0x100 [ 367.710774][ T5628] ? ep_open+0x4e/0x270 [ 367.710793][ T5628] ? __pfx___mutex_lock+0x10/0x10 [ 367.710816][ T5628] ? apparmor_file_open+0x523/0x6c0 [ 367.710848][ T5628] ? __pfx_apparmor_file_open+0x10/0x10 [ 367.710875][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.710896][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.710919][ T5628] ep_open+0x4e/0x270 [ 367.710935][ T5628] ? do_dentry_open+0x807/0x1380 [ 367.710959][ T5628] ? __pfx_ep_open+0x10/0x10 [ 367.710977][ T5628] do_dentry_open+0x816/0x1380 [ 367.711008][ T5628] vfs_open+0x3b/0x340 [ 367.711030][ T5628] ? path_openat+0x2e2d/0x3830 [ 367.711049][ T5628] path_openat+0x2e44/0x3830 [ 367.711069][ T5628] ? kasan_save_track+0x3e/0x80 [ 367.711094][ T5628] ? do_sys_openat2+0xcc/0x200 [ 367.711118][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.711147][ T5628] do_file_open+0x23e/0x4a0 [ 367.711167][ T5628] ? __pfx_do_file_open+0x10/0x10 [ 367.711195][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.711216][ T5628] ? _raw_spin_unlock+0x28/0x50 [ 367.711235][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.711256][ T5628] ? alloc_fd+0x651/0x6c0 [ 367.711284][ T5628] do_sys_openat2+0x115/0x200 [ 367.711310][ T5628] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.711335][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.711358][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.711378][ T5628] ? kmem_cache_free+0x182/0x650 [ 367.711406][ T5628] __x64_sys_openat+0x138/0x170 [ 367.711432][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.711451][ T5628] do_syscall_64+0x174/0x580 [ 367.711474][ T5628] ? trace_irq_disable+0x3b/0x140 [ 367.711501][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.711519][ T5628] RIP: 0033:0x7f4d2415e90e [ 367.711535][ T5628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.711549][ T5628] RSP: 002b:00007ffcfb0a9718 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.711568][ T5628] RAX: ffffffffffffffda RBX: 000055556dad9500 RCX: 00007f4d2415e90e [ 367.711581][ T5628] RDX: 0000000000000000 RSI: 00007ffcfb0a9880 RDI: ffffffffffffff9c [ 367.711593][ T5628] RBP: 00007ffcfb0a9880 R08: 0000000000000000 R09: 0000000000000000 [ 367.711605][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfb0aa970 [ 367.711616][ T5628] R13: 00007f4d24234474 R14: 000055556dad94e8 R15: 0000000000000006 [ 367.711638][ T5628] [ 367.711644][ T5628] [ 368.019198][ T5628] Allocated by task 8306: [ 368.023498][ T5628] kasan_save_track+0x3e/0x80 [ 368.028163][ T5628] __kasan_kmalloc+0x93/0xb0 [ 368.032736][ T5628] __kmalloc_cache_noprof+0x32d/0x660 [ 368.038087][ T5628] gadgetfs_bind+0x277/0xad0 [ 368.042650][ T5628] gadget_bind_driver+0x2ca/0x9e0 [ 368.047656][ T5628] really_probe+0x254/0xae0 [ 368.052140][ T5628] __driver_probe_device+0x1e8/0x360 [ 368.057402][ T5628] driver_probe_device+0x4f/0x240 [ 368.062407][ T5628] __driver_attach+0x339/0x600 [ 368.067150][ T5628] bus_for_each_dev+0x23b/0x2c0 [ 368.071975][ T5628] bus_add_driver+0x345/0x670 [ 368.076627][ T5628] driver_register+0x23a/0x320 [ 368.081372][ T5628] usb_gadget_register_driver_owner+0xf9/0x270 [ 368.087507][ T5628] dev_config+0xe3c/0x12a0 [ 368.091896][ T5628] vfs_write+0x296/0xba0 [ 368.096110][ T5628] ksys_write+0x150/0x270 [ 368.100437][ T5628] do_syscall_64+0x174/0x580 [ 368.105022][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.110891][ T5628] [ 368.113185][ T5628] Freed by task 10: [ 368.116961][ T5628] kasan_save_track+0x3e/0x80 [ 368.121623][ T5628] kasan_save_free_info+0x40/0x50 [ 368.126627][ T5628] __kasan_slab_free+0x5c/0x80 [ 368.131376][ T5628] kfree+0x1c5/0x640 [ 368.135248][ T5628] destroy_ep_files+0x29f/0x330 [ 368.140071][ T5628] gadgetfs_unbind+0x109/0x2b0 [ 368.144808][ T5628] gadget_unbind_driver+0x1cb/0x410 [ 368.149988][ T5628] device_release_driver_internal+0x48b/0x880 [ 368.156036][ T5628] driver_detach+0x1f3/0x2d0 [ 368.160606][ T5628] bus_remove_driver+0x226/0x320 [ 368.165518][ T5628] usb_gadget_unregister_driver+0x4e/0x70 [ 368.171221][ T5628] dev_release+0x83/0x200 [ 368.175523][ T5628] __fput+0x418/0xa50 [ 368.179485][ T5628] delayed_fput+0x63/0xa0 [ 368.183796][ T5628] process_scheduled_works+0xa8e/0x14e0 [ 368.189317][ T5628] worker_thread+0xa47/0xfb0 [ 368.193897][ T5628] kthread+0x388/0x470 [ 368.197948][ T5628] ret_from_fork+0x514/0xb70 [ 368.202525][ T5628] ret_from_fork_asm+0x1a/0x30 [ 368.207263][ T5628] [ 368.209559][ T5628] The buggy address belongs to the object at ffff888052303800 [ 368.209559][ T5628] which belongs to the cache kmalloc-512 of size 512 [ 368.223582][ T5628] The buggy address is located 88 bytes inside of [ 368.223582][ T5628] freed 512-byte region [ffff888052303800, ffff888052303a00) [ 368.237263][ T5628] [ 368.239558][ T5628] The buggy address belongs to the physical page: [ 368.245937][ T5628] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52300 [ 368.254666][ T5628] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 368.263150][ T5628] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 368.270667][ T5628] page_type: f5(slab) [ 368.274624][ T5628] raw: 00fff00000000040 ffff88801b001c80 dead000000000100 dead000000000122 [ 368.283180][ T5628] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 368.291736][ T5628] head: 00fff00000000040 ffff88801b001c80 dead000000000100 dead000000000122 [ 368.300380][ T5628] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 368.309024][ T5628] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 368.317666][ T5628] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 368.326304][ T5628] page dumped because: kasan: bad access detected [ 368.332687][ T5628] page_owner tracks the page as allocated [ 368.338370][ T5628] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 92324533818, free_ts 23575095256 [ 368.359703][ T5628] post_alloc_hook+0x1f9/0x250 [ 368.364449][ T5628] get_page_from_freelist+0x21fa/0x2270 [ 368.369976][ T5628] __alloc_frozen_pages_noprof+0x18d/0x380 [ 368.375768][ T5628] allocate_slab+0x79/0x5e0 [ 368.380246][ T5628] refill_objects+0x2d5/0x350 [ 368.384897][ T5628] __pcs_replace_empty_main+0x2bf/0x6b0 [ 368.390417][ T5628] __kmalloc_noprof+0x485/0x720 [ 368.395246][ T5628] fib6_info_alloc+0x30/0xf0 [ 368.399815][ T5628] ip6_route_info_create+0x149/0x890 [ 368.405074][ T5628] addrconf_f6i_alloc+0x38b/0x630 [ 368.410072][ T5628] addrconf_permanent_addr+0x483/0xa20 [ 368.415503][ T5628] addrconf_notify+0x864/0x1050 [ 368.420325][ T5628] notifier_call_chain+0x1a5/0x3d0 [ 368.425419][ T5628] __dev_notify_flags+0x1aa/0x310 [ 368.430419][ T5628] netif_change_flags+0xde/0x1b0 [ 368.435332][ T5628] do_setlink+0xdd6/0x4670 [ 368.439728][ T5628] page last free pid 1 tgid 1 stack trace: [ 368.445501][ T5628] free_pages_prepare+0x960/0xa60 [ 368.450503][ T5628] __free_contig_range_common+0x174/0x340 [ 368.456197][ T5628] destroy_args+0x4e5/0x570 [ 368.460678][ T5628] debug_vm_pgtable+0x3f8/0x410 [ 368.465502][ T5628] do_one_initcall+0x250/0x870 [ 368.470250][ T5628] do_initcall_level+0x10a/0x1a0 [ 368.475163][ T5628] do_initcalls+0x59/0xa0 [ 368.479466][ T5628] kernel_init_freeable+0x29d/0x3e0 [ 368.484638][ T5628] kernel_init+0x1d/0x1d0 [ 368.488938][ T5628] ret_from_fork+0x514/0xb70 [ 368.493510][ T5628] ret_from_fork_asm+0x1a/0x30 [ 368.498251][ T5628] [ 368.500546][ T5628] Memory state around the buggy address: [ 368.506144][ T5628] ffff888052303700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.514176][ T5628] ffff888052303780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.522207][ T5628] >ffff888052303800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.530234][ T5628] ^ [ 368.537135][ T5628] ffff888052303880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.545171][ T5628] ffff888052303900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.553204][ T5628] ================================================================== [ 368.733481][ T7843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.999766][ T5631] Bluetooth: hci2: command tx timeout [ 369.005531][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.095509][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.193080][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.363566][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.386384][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12 [ 369.631836][ T7843] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.650417][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.669045][ T7843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.435596][ T6631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.699029][ T5628] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 370.706244][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 370.717249][ T5628] Tainted: [L]=SOFTLOCKUP [ 370.721543][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 370.731571][ T5628] Call Trace: [ 370.734826][ T5628] [ 370.737737][ T5628] vpanic+0x56c/0xa60 [ 370.741718][ T5628] ? __pfx_vpanic+0x10/0x10 [ 370.746209][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.751825][ T5628] panic+0xc5/0xd0 [ 370.755552][ T5628] ? __pfx_panic+0x10/0x10 [ 370.759971][ T5628] ? preempt_schedule_thunk+0x16/0x40 [ 370.765333][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.770944][ T5628] ? preempt_schedule_thunk+0x16/0x40 [ 370.776296][ T5628] ? __mutex_lock+0x154/0x1550 [ 370.781041][ T5628] check_panic_on_warn+0x89/0xb0 [ 370.785967][ T5628] ? __mutex_lock+0x154/0x1550 [ 370.790728][ T5628] end_report+0x73/0x170 [ 370.794958][ T5628] ? __mutex_lock+0x154/0x1550 [ 370.799706][ T5628] kasan_report+0x128/0x150 [ 370.804197][ T5628] ? __mutex_lock+0x154/0x1550 [ 370.808948][ T5628] __mutex_lock+0x154/0x1550 [ 370.813525][ T5628] ? seqcount_lockdep_reader_access+0xea/0x100 [ 370.819662][ T5628] ? ep_open+0x4e/0x270 [ 370.823796][ T5628] ? __pfx___mutex_lock+0x10/0x10 [ 370.828800][ T5628] ? apparmor_file_open+0x523/0x6c0 [ 370.833986][ T5628] ? __pfx_apparmor_file_open+0x10/0x10 [ 370.839517][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.845142][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.850756][ T5628] ep_open+0x4e/0x270 [ 370.854734][ T5628] ? do_dentry_open+0x807/0x1380 [ 370.859654][ T5628] ? __pfx_ep_open+0x10/0x10 [ 370.864218][ T5628] do_dentry_open+0x816/0x1380 [ 370.868988][ T5628] vfs_open+0x3b/0x340 [ 370.873044][ T5628] ? path_openat+0x2e2d/0x3830 [ 370.877783][ T5628] path_openat+0x2e44/0x3830 [ 370.882351][ T5628] ? kasan_save_track+0x3e/0x80 [ 370.887183][ T5628] ? do_sys_openat2+0xcc/0x200 [ 370.891928][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.897980][ T5628] do_file_open+0x23e/0x4a0 [ 370.902468][ T5628] ? __pfx_do_file_open+0x10/0x10 [ 370.907478][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.913088][ T5628] ? _raw_spin_unlock+0x28/0x50 [ 370.917915][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.923540][ T5628] ? alloc_fd+0x651/0x6c0 [ 370.927857][ T5628] do_sys_openat2+0x115/0x200 [ 370.932519][ T5628] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.937699][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.943310][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.948920][ T5628] ? kmem_cache_free+0x182/0x650 [ 370.953843][ T5628] __x64_sys_openat+0x138/0x170 [ 370.958677][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.964727][ T5628] do_syscall_64+0x174/0x580 [ 370.969305][ T5628] ? trace_irq_disable+0x3b/0x140 [ 370.974313][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.980184][ T5628] RIP: 0033:0x7f4d2415e90e [ 370.984575][ T5628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.004155][ T5628] RSP: 002b:00007ffcfb0a9718 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.012546][ T5628] RAX: ffffffffffffffda RBX: 000055556dad9500 RCX: 00007f4d2415e90e [ 371.020492][ T5628] RDX: 0000000000000000 RSI: 00007ffcfb0a9880 RDI: ffffffffffffff9c [ 371.028460][ T5628] RBP: 00007ffcfb0a9880 R08: 0000000000000000 R09: 0000000000000000 [ 371.036406][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfb0aa970 [ 371.044351][ T5628] R13: 00007f4d24234474 R14: 000055556dad94e8 R15: 0000000000000006 [ 371.052306][ T5628] [ 371.055341][ T5628] Kernel Offset: disabled [ 371.059638][ T5628] Rebooting in 86400 seconds..