last executing test programs: 9m7.059075534s ago: executing program 0 (id=1296): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB='5\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) fsopen(&(0x7f0000000500)='exfat\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x30, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 9m6.714346561s ago: executing program 0 (id=1299): socket$kcm(0x10, 0x2, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x1f}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r6, 0x101, 0x70bc2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 9m5.977515065s ago: executing program 0 (id=1302): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)}, 0x10) 8m51.073879673s ago: executing program 0 (id=1337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m47.388990385s ago: executing program 0 (id=1345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401000010000100fcffff0700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}}, 0x20000000) 8m47.090745891s ago: executing program 0 (id=1347): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)}, 0x10) 8m31.197068819s ago: executing program 32 (id=1347): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)}, 0x10) 6m38.068034909s ago: executing program 5 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000100000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) 6m37.659507697s ago: executing program 5 (id=1616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x20000) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000000c0)=']){%%)^&!+)\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0x0, 0x2000000, 0x5}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r9) 6m31.963488967s ago: executing program 5 (id=1625): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 6m31.355963259s ago: executing program 5 (id=1628): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/209, 0xd1}], 0x4}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000940), 0x0, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/166, 0xa6}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/84, 0x54}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000010c0)=""/60, 0x3c}], 0x4, &(0x7f0000001180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/117, 0x75}, {0x0}, {&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001680)=""/235, 0xeb}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001900)=""/116, 0x74}, {&(0x7f00000047c0)=""/144, 0x90}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/240, 0xf0}, {&(0x7f0000005980)=""/173, 0xad}], 0x5, &(0x7f0000005a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x7, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) 6m30.199869972s ago: executing program 5 (id=1631): syz_emit_ethernet(0x4a, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee6015c4807942ea7cdcd151bb2cd9894cc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec264000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) 6m29.044371084s ago: executing program 5 (id=1634): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001080)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x0, 0x331, 0x2000, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10012000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6m13.849264228s ago: executing program 33 (id=1634): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001080)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x0, 0x331, 0x2000, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10012000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 17.307009248s ago: executing program 2 (id=2812): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x80) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000001b40)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x1}, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r2, 0xffffd000) keyctl$read(0xb, 0x0, &(0x7f00000003c0)=""/66, 0x42) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) 16.015918053s ago: executing program 2 (id=2816): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x7a, 0x44, 0x40, 0xdba, 0x1000, 0x8099, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0xb9, 0x21}}]}}]}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) 12.440395701s ago: executing program 4 (id=2829): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x11, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 11.506065449s ago: executing program 2 (id=2831): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x3700, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) syz_open_dev$vbi(0x0, 0x1, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 10.203647494s ago: executing program 2 (id=2837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x9) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) 9.250127522s ago: executing program 2 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = dup3(r4, r3, 0x80000) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8044) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 9.145547264s ago: executing program 6 (id=2842): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x7a, 0x44, 0x40, 0xdba, 0x1000, 0x8099, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0xb9, 0x21}}]}}]}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) 7.239252941s ago: executing program 3 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 7.187879962s ago: executing program 2 (id=2846): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xe8, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb283acaa2a6a5bf5afdd0619ce173f1db717"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x80086601, 0xb98e17add24f8b10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.863981908s ago: executing program 3 (id=2848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.744667881s ago: executing program 3 (id=2849): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x3700, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) syz_open_dev$vbi(0x0, 0x1, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 6.023726065s ago: executing program 6 (id=2850): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) 5.863823587s ago: executing program 1 (id=2852): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/209, 0xd1}], 0x4}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/21, 0x15}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/166, 0xa6}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/84, 0x54}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000010c0)=""/60, 0x3c}], 0x4, &(0x7f0000001180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/117, 0x75}, {0x0}, {&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001680)=""/235, 0xeb}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001900)=""/116, 0x74}, {&(0x7f00000047c0)=""/144, 0x90}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/240, 0xf0}, {&(0x7f0000005980)=""/173, 0xad}], 0x5, &(0x7f0000005a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x7, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) 5.73077439s ago: executing program 6 (id=2853): socket$kcm(0x10, 0x2, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x1f}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r6, 0x101, 0x70bc2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) 5.493633894s ago: executing program 4 (id=2854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 4.749844529s ago: executing program 3 (id=2855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) 4.742831579s ago: executing program 1 (id=2856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2000, @empty}, 0x1c) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) 4.647104451s ago: executing program 4 (id=2857): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.646434201s ago: executing program 6 (id=2858): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114d00"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040), 0x3b) 4.559967162s ago: executing program 4 (id=2859): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x80) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000001b40)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x1}, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r2, 0xffffd000) keyctl$read(0xb, 0x0, &(0x7f00000003c0)=""/66, 0x42) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) 3.672396759s ago: executing program 6 (id=2860): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x7a, 0x44, 0x40, 0xdba, 0x1000, 0x8099, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0xb9, 0x21}}]}}]}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) 3.428249004s ago: executing program 4 (id=2861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r3) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 3.390957405s ago: executing program 1 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.277220007s ago: executing program 1 (id=2863): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x8) 3.211840148s ago: executing program 3 (id=2864): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x11, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(0x0, 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 3.074191361s ago: executing program 1 (id=2865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 2.614557369s ago: executing program 1 (id=2866): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/209, 0xd1}], 0x4}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/21, 0x15}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/166, 0xa6}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/84, 0x54}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000010c0)=""/60, 0x3c}], 0x4, &(0x7f0000001180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/117, 0x75}, {0x0}, {&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001680)=""/235, 0xeb}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001900)=""/116, 0x74}, {&(0x7f00000047c0)=""/144, 0x90}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/240, 0xf0}, {&(0x7f0000005980)=""/173, 0xad}], 0x5, &(0x7f0000005a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x7, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) 2.417016563s ago: executing program 4 (id=2867): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x3700, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 329.702873ms ago: executing program 6 (id=2868): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 0s ago: executing program 3 (id=2869): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = getpid() sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x94}, 0x44004) kernel console output (not intermixed with test programs): 0101, bcdDevice= 0.40 [ 508.934879][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.815334][ T4251] usb 5-1: Product: syz [ 509.853971][ T4251] usb 5-1: Manufacturer: syz [ 509.879184][ T4251] usb 5-1: SerialNumber: syz [ 509.949753][ T4251] usb 5-1: can't set config #1, error -71 [ 509.984486][ T4251] usb 5-1: USB disconnect, device number 3 [ 523.359482][ T2857] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 524.874870][ T2857] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 525.649626][ T2857] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 525.669073][ T2857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.683925][ T2857] usb 3-1: Product: syz [ 525.688338][ T2857] usb 3-1: Manufacturer: syz [ 525.693709][ T2857] usb 3-1: SerialNumber: syz [ 525.753997][ T2857] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 527.877700][ T2857] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 529.529167][ T8282] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 529.553723][ T2857] usb 3-1: USB disconnect, device number 3 [ 537.574299][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 537.583346][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.313955][ T8358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.721697][ T8396] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 544.644189][ T8439] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1188'. [ 550.830291][ T8493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 550.962142][ T8495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1201'. [ 556.026559][ T8546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1215'. [ 557.644785][ T8556] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 560.951627][ T8585] loop2: detected capacity change from 0 to 7 [ 561.084675][ T8585] Dev loop2: unable to read RDB block 7 [ 561.089865][ T8585] loop2: AHDI p1 p2 p3 [ 561.093288][ T8585] loop2: partition table partially beyond EOD, truncated [ 561.104815][ T8585] loop2: p1 start 1601398130 is beyond EOD, truncated [ 561.108833][ T8585] loop2: p2 start 1702059890 is beyond EOD, truncated [ 561.874940][ T8591] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1229'. [ 563.037180][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.043559][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.762338][ T8613] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 565.902364][ T8631] loop2: detected capacity change from 0 to 7 [ 566.103695][ T8631] Dev loop2: unable to read RDB block 7 [ 566.114983][ T8631] loop2: AHDI p1 p2 p3 [ 566.120901][ T8631] loop2: partition table partially beyond EOD, truncated [ 566.128369][ T8631] loop2: p1 start 1601398130 is beyond EOD, truncated [ 566.141200][ T8631] loop2: p2 start 1702059890 is beyond EOD, truncated [ 566.151831][ T3561] Dev loop2: unable to read RDB block 7 [ 566.186420][ T3561] loop2: AHDI p1 p2 p3 [ 566.209625][ T3561] loop2: partition table partially beyond EOD, truncated [ 566.218641][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 566.250825][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 566.349562][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 567.420487][ T4301] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 567.563049][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.572368][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.584376][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 567.669752][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.678680][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.702724][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 567.809544][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.822136][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.836363][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 567.939988][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 567.948941][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 567.969333][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.069454][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.079156][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.119356][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.239769][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.256471][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.298231][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.389631][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.404456][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.416193][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.509826][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 568.526500][ T4301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 568.545327][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.739449][ T4301] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 568.755483][ T4301] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 568.764868][ T4301] usb 3-1: Product: syz [ 568.769150][ T4301] usb 3-1: Manufacturer: syz [ 568.779387][ T4301] usb 3-1: SerialNumber: syz [ 568.800904][ T4301] usb 3-1: config 0 descriptor?? [ 568.874988][ T4301] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 569.066032][ T4301] usb 3-1: USB disconnect, device number 4 [ 569.166703][ T4301] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 570.465138][ T8668] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1247'. [ 574.310822][ T8691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 575.880557][ T8706] loop2: detected capacity change from 0 to 7 [ 575.974308][ T8706] Dev loop2: unable to read RDB block 7 [ 575.980479][ T8706] loop2: AHDI p1 p2 p3 [ 575.989262][ T8706] loop2: partition table partially beyond EOD, truncated [ 576.005518][ T8706] loop2: p1 start 1601398130 is beyond EOD, truncated [ 576.012896][ T8706] loop2: p2 start 1702059890 is beyond EOD, truncated [ 577.528706][ T8717] usb usb1: usbfs: process 8717 (syz.0.1266) did not claim interface 0 before use [ 577.695438][ T8709] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 582.605657][ T8747] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 583.717190][ T8756] loop2: detected capacity change from 0 to 7 [ 583.889162][ T8756] Dev loop2: unable to read RDB block 7 [ 583.896951][ T8756] loop2: AHDI p1 p2 p3 [ 583.904027][ T8756] loop2: partition table partially beyond EOD, truncated [ 583.919316][ T8756] loop2: p1 start 1601398130 is beyond EOD, truncated [ 583.926157][ T8756] loop2: p2 start 1702059890 is beyond EOD, truncated [ 584.493720][ T3561] Dev loop2: unable to read RDB block 7 [ 584.509057][ T3561] loop2: AHDI p1 p2 p3 [ 584.531292][ T3561] loop2: partition table partially beyond EOD, truncated [ 584.556203][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 585.405828][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 590.409000][ T8812] loop2: detected capacity change from 0 to 7 [ 591.244508][ T3561] Dev loop2: unable to read RDB block 7 [ 591.250304][ T3561] loop2: AHDI p1 p2 p3 [ 591.254812][ T3561] loop2: partition table partially beyond EOD, truncated [ 591.266381][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 591.274559][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 591.596938][ T3561] Dev loop2: unable to read RDB block 7 [ 591.602701][ T3561] loop2: AHDI p1 p2 p3 [ 591.606898][ T3561] loop2: partition table partially beyond EOD, truncated [ 592.493239][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 592.506124][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 592.895890][ T8828] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 592.921272][ T8812] Dev loop2: unable to read RDB block 7 [ 592.929800][ T8812] loop2: AHDI p1 p2 p3 [ 592.984503][ T8812] loop2: partition table partially beyond EOD, truncated [ 593.040657][ T8812] loop2: p1 start 1601398130 is beyond EOD, truncated [ 593.082541][ T8812] loop2: p2 start 1702059890 is beyond EOD, truncated [ 599.868120][ T8876] loop2: detected capacity change from 0 to 7 [ 599.878359][ T8876] Dev loop2: unable to read RDB block 7 [ 600.014012][ T8876] loop2: AHDI p1 p2 p3 [ 600.018949][ T8876] loop2: partition table partially beyond EOD, truncated [ 600.040082][ T8876] loop2: p1 start 1601398130 is beyond EOD, truncated [ 600.047120][ T8876] loop2: p2 start 1702059890 is beyond EOD, truncated [ 600.606880][ T8884] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 605.010366][ T8925] loop2: detected capacity change from 0 to 7 [ 605.030533][ T8231] Dev loop2: unable to read RDB block 7 [ 605.036147][ T8231] loop2: AHDI p1 p2 p3 [ 605.054419][ T8231] loop2: partition table partially beyond EOD, truncated [ 605.114226][ T8231] loop2: p1 start 1601398130 is beyond EOD, truncated [ 605.195644][ T8231] loop2: p2 start 1702059890 is beyond EOD, truncated [ 605.663671][ T8925] Dev loop2: unable to read RDB block 7 [ 605.731540][ T8925] loop2: AHDI p1 p2 p3 [ 605.956557][ T8925] loop2: partition table partially beyond EOD, truncated [ 606.030751][ T8925] loop2: p1 start 1601398130 is beyond EOD, truncated [ 606.037747][ T8925] loop2: p2 start 1702059890 is beyond EOD, truncated [ 610.674111][ T8974] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 610.853058][ T150] block nbd2: Attempted send on invalid socket [ 610.860307][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 610.873072][ T8959] SQUASHFS error: Failed to read block 0x0: -5 [ 610.879493][ T8959] unable to read squashfs_super_block [ 615.723900][ T9023] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 624.231503][ T9074] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 624.262340][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.268749][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.835142][ T263] block nbd4: Attempted send on invalid socket [ 625.841376][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 625.897164][ T9090] SQUASHFS error: Failed to read block 0x0: -5 [ 625.903603][ T9090] unable to read squashfs_super_block [ 628.625689][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 629.661402][ T4223] Bluetooth: hci5: command 0x0409 tx timeout [ 631.954649][ T4223] Bluetooth: hci5: command 0x041b tx timeout [ 633.358899][ T263] block nbd3: Attempted send on invalid socket [ 633.779536][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 634.079478][ T9145] SQUASHFS error: Failed to read block 0x0: -5 [ 634.375736][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 634.724246][ T9145] unable to read squashfs_super_block [ 636.776721][ T4223] Bluetooth: hci5: command 0x0419 tx timeout [ 637.270134][ T4334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.446183][ T9174] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 637.502047][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 637.519738][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.527646][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.632587][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.648391][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.898730][ T9102] device bridge_slave_0 entered promiscuous mode [ 639.294466][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.303544][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.330725][ T9102] device bridge_slave_1 entered promiscuous mode [ 639.944134][ T4334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.005955][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.069231][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.402587][ T4334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.783963][ T4334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.821187][ T9102] team0: Port device team_slave_0 added [ 642.829052][ T9102] team0: Port device team_slave_1 added [ 642.900993][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.908166][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.955134][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.005564][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.016128][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.049776][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.269204][ T9102] device hsr_slave_0 entered promiscuous mode [ 643.286750][ T9102] device hsr_slave_1 entered promiscuous mode [ 643.294823][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.302893][ T9102] Cannot create hsr debugfs directory [ 646.459196][ T150] block nbd1: Attempted send on invalid socket [ 646.465627][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 646.477272][ T9208] SQUASHFS error: Failed to read block 0x0: -5 [ 646.483564][ T9208] unable to read squashfs_super_block [ 647.813736][ T9102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.230126][ T9102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.404810][ T9102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.426728][ T9102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.719002][ T9266] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 651.350904][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.469373][ T4334] device hsr_slave_0 left promiscuous mode [ 651.545110][ T4334] device hsr_slave_1 left promiscuous mode [ 651.558606][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.575861][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.587653][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.615175][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.725017][ T4334] device bridge_slave_1 left promiscuous mode [ 651.776337][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.814787][ T4334] device bridge_slave_0 left promiscuous mode [ 651.829513][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.856501][ T4334] device veth1_macvtap left promiscuous mode [ 651.863542][ T4334] device veth0_macvtap left promiscuous mode [ 651.871163][ T4334] device veth1_vlan left promiscuous mode [ 651.877204][ T4334] device veth0_vlan left promiscuous mode [ 652.198907][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 652.224083][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 652.249646][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.267842][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.352152][ T4334] bond0 (unregistering): Released all slaves [ 652.459591][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.467853][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.477706][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.496997][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.506677][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.517537][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.524701][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.534421][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.550582][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.560019][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.568673][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.575864][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.613736][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.640689][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.696939][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.709186][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.720880][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.733262][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.742495][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.751586][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.760553][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.769153][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.779369][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.803273][ T9102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.047333][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.067317][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.076189][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 653.360119][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.375453][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 653.397947][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 653.412971][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 653.431092][ T9102] device veth0_vlan entered promiscuous mode [ 653.438091][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 653.453120][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 653.486262][ T9102] device veth1_vlan entered promiscuous mode [ 653.499098][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 653.534649][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.560255][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.590242][ T9102] device veth0_macvtap entered promiscuous mode [ 653.601509][ T9102] device veth1_macvtap entered promiscuous mode [ 653.630808][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.642233][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.653170][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.664628][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.674985][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.685980][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.698097][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.710460][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.722171][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.749546][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 653.757917][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 653.778148][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 653.788615][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.806408][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.818986][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.829593][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.841655][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.851611][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.862390][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.872678][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.884177][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.895796][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.906661][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.924513][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.940307][ T9102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.958143][ T9102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.968288][ T9102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.983186][ T9102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.105179][ T9063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.126802][ T9063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.153531][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 654.178575][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.200782][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.229544][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.134634][ T9341] input: syz1 as /devices/virtual/input/input6 [ 657.270621][ T263] block nbd5: Attempted send on invalid socket [ 657.276986][ T263] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 657.289982][ T9363] SQUASHFS error: Failed to read block 0x0: -5 [ 657.298853][ T9363] unable to read squashfs_super_block [ 663.445781][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1443'. [ 666.088123][ T9434] input: syz1 as /devices/virtual/input/input7 [ 669.911447][ T9452] netlink: 'syz.5.1455': attribute type 10 has an invalid length. [ 669.973177][ T9452] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 670.112495][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 670.152040][ T9452] syz.5.1455 (9452) used greatest stack depth: 20832 bytes left [ 671.738852][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 672.119397][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 672.133588][ T23] usb 4-1: can't read configurations, error -71 [ 673.585236][ T9506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 675.791857][ T9521] input: syz1 as /devices/virtual/input/input8 [ 680.313154][ T9553] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 680.429467][ T9553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 683.319923][ T4223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 683.919396][ T4223] usb 2-1: Using ep0 maxpacket: 16 [ 684.569953][ T4223] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 684.829418][ T4223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.576735][ T4223] usb 2-1: Product: syz [ 685.583837][ T4223] usb 2-1: Manufacturer: syz [ 685.588479][ T4223] usb 2-1: SerialNumber: syz [ 685.604226][ T4223] r8152-cfgselector 2-1: config 0 descriptor?? [ 685.760581][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.767002][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.344004][ T9586] input: syz1 as /devices/virtual/input/input9 [ 686.359511][ T4223] r8152-cfgselector 2-1: Unknown version 0x0000 [ 686.399706][ T4223] r8152-cfgselector 2-1: Unknown version 0x0000 [ 686.406345][ T4223] r8152-cfgselector 2-1: bad CDC descriptors [ 686.459602][ T4223] r8152-cfgselector 2-1: Unknown version 0x0000 [ 686.599957][ T9605] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 687.468997][ T4223] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 687.684832][ T9619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 690.549371][ T9656] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 691.072331][ T9656] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 694.303570][ T9681] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 694.481229][ T9688] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 698.894283][ T9743] fuse: Bad value for 'fd' [ 699.068911][ T9747] program syz.1.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.665270][ T9763] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 710.834259][ T9843] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 727.496831][T10005] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 729.984736][T10032] 9pnet: Insufficient options for proto=fd [ 732.352044][T10049] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 733.919399][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 734.329431][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.439536][ T4230] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 735.448470][ T4230] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 735.460569][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.469920][ T4230] usb 5-1: Product: syz [ 735.474246][ T4230] usb 5-1: Manufacturer: syz [ 735.478856][ T4230] usb 5-1: SerialNumber: syz [ 736.224266][ T4230] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 737.550360][ T4230] usb 5-1: device descriptor read/all, error -71 [ 738.275047][T10114] 9pnet: Insufficient options for proto=fd [ 738.965781][ T4230] usb 5-1: USB disconnect, device number 4 [ 741.704969][T10158] 9pnet: Insufficient options for proto=fd [ 743.670543][T10177] ======================================================= [ 743.670543][T10177] WARNING: The mand mount option has been deprecated and [ 743.670543][T10177] and is ignored by this kernel. Remove the mand [ 743.670543][T10177] option from the mount to silence this warning. [ 743.670543][T10177] ======================================================= [ 747.186557][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.203690][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.232462][T10223] 9pnet: Insufficient options for proto=fd [ 753.964227][T10287] 9pnet: Insufficient options for proto=fd [ 754.714145][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 757.331814][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 757.634223][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 758.034144][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 762.059464][ T4251] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 762.377903][T10358] 9pnet: Insufficient options for proto=fd [ 762.385029][ T4251] usb 4-1: device descriptor read/64, error -71 [ 762.679353][ T4251] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 763.239444][ T4251] usb 4-1: device descriptor read/64, error -71 [ 763.428503][ T4251] usb usb4-port1: attempt power cycle [ 769.792979][T10425] 9pnet: Insufficient options for proto=fd [ 770.521265][ T4230] Bluetooth: hci0: command 0x0409 tx timeout [ 772.256070][T10410] chnl_net:caif_netlink_parms(): no params data found [ 772.579300][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 772.752704][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.760300][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.589805][T10410] device bridge_slave_0 entered promiscuous mode [ 773.730374][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.970083][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.020344][T10410] device bridge_slave_1 entered promiscuous mode [ 774.950779][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 775.672860][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.766197][T10484] 9pnet: Insufficient options for proto=fd [ 776.979326][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 777.561446][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.711946][T10410] team0: Port device team_slave_0 added [ 777.778109][T10410] team0: Port device team_slave_1 added [ 777.885312][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.903230][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.937203][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.958458][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.966079][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.992652][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.101095][T10410] device hsr_slave_0 entered promiscuous mode [ 778.125089][T10410] device hsr_slave_1 entered promiscuous mode [ 778.141092][T10410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.149090][T10410] Cannot create hsr debugfs directory [ 778.533576][T10410] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 778.557889][T10410] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 778.606131][T10410] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 778.631227][T10410] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.913597][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.952002][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.962920][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.986634][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.025164][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.048529][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.065627][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.072781][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.102473][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 779.119079][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.134739][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.146337][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.153490][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.166719][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 779.201297][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 779.221754][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.242415][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.256953][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.275535][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.299149][T10410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 779.310448][T10410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.332557][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.346358][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 779.362966][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.377586][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 779.391982][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 779.414441][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.418554][T10526] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1690'. [ 781.536085][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.554138][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.627662][T10410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.402327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 782.427311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 782.498245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 782.520942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 782.547462][T10410] device veth0_vlan entered promiscuous mode [ 782.558759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 782.572881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.594530][T10410] device veth1_vlan entered promiscuous mode [ 782.686059][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 782.750275][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 783.286140][T10410] device veth0_macvtap entered promiscuous mode [ 783.355363][T10410] device veth1_macvtap entered promiscuous mode [ 783.483050][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.519270][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.596136][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.613098][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.926651][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.879704][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.893933][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.081482][T10557] 9pnet: Insufficient options for proto=fd [ 786.796863][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.806853][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.818046][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.830738][T10410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.839718][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 786.849799][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 786.941388][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 786.984323][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 787.122171][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.134369][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.730122][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.732997][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.808114][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.839394][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.873690][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.918896][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.970003][T10410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.982933][T10410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.044405][T10410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.069703][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 789.120086][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 789.398272][T10410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.589385][T10410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.426872][T10410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.530499][T10410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.246766][ T8967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.246825][ T8967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.248800][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 791.306410][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.306480][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.308941][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 792.242311][ T4334] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.344851][ T4334] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.396335][ T4334] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.399148][T10603] mmap: syz.2.1708 (10603) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 792.596488][ T4334] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.837159][T10607] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 794.341515][T10617] 9pnet: Insufficient options for proto=fd [ 799.388418][ T4334] device hsr_slave_0 left promiscuous mode [ 799.445829][ T4334] device hsr_slave_1 left promiscuous mode [ 800.812867][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.111409][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.238297][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.272757][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.505530][ T4334] device bridge_slave_1 left promiscuous mode [ 801.522179][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.596219][ T4334] device bridge_slave_0 left promiscuous mode [ 801.614025][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.700223][ T4334] device veth1_macvtap left promiscuous mode [ 801.726313][ T4334] device veth0_macvtap left promiscuous mode [ 801.748361][ T4334] device veth1_vlan left promiscuous mode [ 801.889108][ T4334] device veth0_vlan left promiscuous mode [ 802.725510][T10677] 9pnet: Insufficient options for proto=fd [ 803.649241][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 803.706511][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 803.745966][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.772956][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.974127][ T4334] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 804.036232][ T4334] bond0 (unregistering): Released all slaves [ 809.123197][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.129611][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.602221][T10735] overlayfs: failed to resolve './file1': -2 [ 815.111335][T10787] loop2: detected capacity change from 0 to 7 [ 815.383066][T10787] Dev loop2: unable to read RDB block 7 [ 815.772124][T10787] loop2: unable to read partition table [ 815.778034][T10787] loop2: partition table beyond EOD, truncated [ 815.785331][T10787] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 823.180175][T10865] 9pnet: Insufficient options for proto=fd [ 827.790380][T10915] 9pnet: Insufficient options for proto=fd [ 831.054080][T10950] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 831.928119][T10960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 831.968717][T10957] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 832.038022][T10957] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 832.114955][T10957] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 832.156229][T10965] overlayfs: failed to resolve './file1': -2 [ 834.421686][T10983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.429425][T10983] IPv6: NLM_F_CREATE should be set when creating new route [ 834.436816][T10983] IPv6: NLM_F_CREATE should be set when creating new route [ 834.444247][T10983] IPv6: NLM_F_CREATE should be set when creating new route [ 834.780216][T10986] 9pnet: Insufficient options for proto=fd [ 836.692410][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 836.989280][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 837.109700][ T21] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 837.186369][ T21] usb 3-1: config 0 has no interface number 0 [ 837.294442][ T21] usb 3-1: config 0 interface 89 has no altsetting 0 [ 837.589414][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 837.626803][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.667121][ T21] usb 3-1: Product: syz [ 837.699259][ T21] usb 3-1: Manufacturer: syz [ 837.728759][ T21] usb 3-1: SerialNumber: syz [ 837.785547][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1794'. [ 837.855116][ T21] usb 3-1: config 0 descriptor?? [ 837.951841][ T21] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 837.993782][ T21] em28xx 3-1:0.89: Video interface 89 found: bulk [ 839.359495][ T21] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 840.419519][ T21] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 840.428272][ T21] em28xx 3-1:0.89: board has no eeprom [ 840.595093][T11067] 9pnet: Insufficient options for proto=fd [ 840.609442][ T21] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 840.644291][ T21] em28xx 3-1:0.89: analog set to bulk mode. [ 840.820421][ T4230] em28xx 3-1:0.89: Registering V4L2 extension [ 843.013353][ T21] usb 3-1: USB disconnect, device number 5 [ 843.078830][ T21] em28xx 3-1:0.89: Disconnecting em28xx [ 843.085776][ T4230] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 843.124551][ T4230] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 843.203068][ T4230] em28xx 3-1:0.89: No AC97 audio processor [ 843.785533][ T4230] usb 3-1: Decoder not found [ 843.959911][ T4230] em28xx 3-1:0.89: failed to create media graph [ 844.005505][ T4230] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 844.066355][ T4230] em28xx 3-1:0.89: Registering snapshot button... [ 844.119867][ T4230] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input10 [ 844.161182][ T4230] em28xx 3-1:0.89: Remote control support is not available for this card. [ 844.170922][ T21] em28xx 3-1:0.89: Closing input extension [ 844.180060][ T21] em28xx 3-1:0.89: Deregistering snapshot button [ 844.362050][ T21] em28xx 3-1:0.89: Freeing device [ 844.536545][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1805'. [ 846.290842][T11118] 9pnet: Insufficient options for proto=fd [ 848.128225][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'. [ 849.697078][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1817'. [ 852.251802][T11193] 9pnet: Insufficient options for proto=fd [ 852.947941][T11201] netlink: 'syz.6.1829': attribute type 1 has an invalid length. [ 853.132532][T11201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.283232][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1832'. [ 857.464206][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 857.733129][T11273] 9pnet: Insufficient options for proto=fd [ 857.749488][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 858.322574][ T21] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 858.476292][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.670035][ T21] usb 7-1: config 0 has no interface number 0 [ 858.676190][ T21] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 858.859322][ T21] usb 7-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.970306][ T21] usb 7-1: string descriptor 0 read error: -71 [ 858.985275][ T21] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 858.996843][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.354485][ T21] usb 7-1: config 0 descriptor?? [ 859.669362][ T21] usb 7-1: can't set config #0, error -71 [ 859.861560][ T21] usb 7-1: USB disconnect, device number 2 [ 864.520143][T11329] 9pnet: Insufficient options for proto=fd [ 870.021843][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.028375][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.852702][T11393] 9pnet: Insufficient options for proto=fd [ 876.593786][T11445] netlink: 'syz.4.1883': attribute type 4 has an invalid length. [ 876.801208][T11446] 9pnet: Insufficient options for proto=fd [ 878.842121][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 882.545268][T11511] 9pnet: Insufficient options for proto=fd [ 891.921296][T11625] kthread_run failed with err -4 [ 892.881530][ T4223] Bluetooth: hci0: command 0x0406 tx timeout [ 894.104700][T11646] 9pnet: Insufficient options for proto=fd [ 894.274279][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 894.310994][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 894.340382][T11651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 894.396328][T11651] device bridge_slave_0 left promiscuous mode [ 894.559393][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.559957][T11651] device bridge_slave_1 left promiscuous mode [ 895.655335][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.717251][T11651] bond0: (slave bond_slave_0): Releasing backup interface [ 896.061283][T11651] bond0: (slave bond_slave_1): Releasing backup interface [ 896.271753][T11651] team0: Port device team_slave_0 removed [ 896.523499][ T5164] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 896.746853][T11651] team0: Port device team_slave_1 removed [ 896.780345][T11651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.805072][T11651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.838287][T11651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.864485][T11651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.897664][T11653] team0: Mode changed to "loadbalance" [ 896.920059][T11657] netlink: 'syz.6.1928': attribute type 10 has an invalid length. [ 896.955572][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.990178][T11657] team0: Port device bond0 added [ 897.419280][ T5164] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 897.428378][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.990790][ T5164] usb 2-1: Product: syz [ 897.995705][ T5164] usb 2-1: Manufacturer: syz [ 898.003324][ T5164] usb 2-1: SerialNumber: syz [ 898.351596][ T5164] usb 2-1: config 0 descriptor?? [ 899.308855][T11702] 9pnet: Insufficient options for proto=fd [ 900.736398][T11716] 9pnet_virtio: no channels available for device syz [ 901.063202][T10014] usb 2-1: USB disconnect, device number 3 [ 901.136019][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.530185][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 902.539458][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 902.570754][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 902.788456][T11741] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 902.803482][T11741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 904.705890][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.812164][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.920486][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.928985][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.970211][T11741] virt_wifi0 speed is unknown, defaulting to 1000 [ 906.589030][T11777] syz.4.1958 (11777) used greatest stack depth: 17352 bytes left [ 906.989258][ T1111] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 907.550446][ T1111] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 907.588995][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.625041][ T1111] usb 5-1: Product: syz [ 907.643056][ T1111] usb 5-1: Manufacturer: syz [ 907.771442][ T1111] usb 5-1: SerialNumber: syz [ 907.779360][ T1111] usb 5-1: config 0 descriptor?? [ 912.416156][ T4299] usb 5-1: USB disconnect, device number 5 [ 915.719366][ T4299] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 916.390328][ T4299] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 916.487678][ T4299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.775506][ T4299] usb 7-1: Product: syz [ 916.795820][ T4299] usb 7-1: Manufacturer: syz [ 916.811067][ T4299] usb 7-1: SerialNumber: syz [ 917.059728][ T4299] usb 7-1: config 0 descriptor?? [ 920.370869][ T1108] usb 7-1: USB disconnect, device number 3 [ 921.298553][T11959] netlink: 'syz.6.2010': attribute type 4 has an invalid length. [ 921.597455][T11961] device syzkaller0 entered promiscuous mode [ 926.132387][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 927.159397][ T1111] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 927.904353][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.914953][ T1111] usb 3-1: Product: syz [ 927.919452][ T1111] usb 3-1: Manufacturer: syz [ 927.924091][ T1111] usb 3-1: SerialNumber: syz [ 927.933650][ T1111] usb 3-1: config 0 descriptor?? [ 929.927268][T12089] device syzkaller0 entered promiscuous mode [ 930.780233][ T1108] usb 3-1: USB disconnect, device number 6 [ 930.799574][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.806750][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.907587][T12095] device bridge_slave_1 left promiscuous mode [ 931.134806][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.328651][T12095] device bridge_slave_0 left promiscuous mode [ 931.411332][T12095] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.463580][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.471098][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.611127][T12107] tap0: tun_chr_ioctl cmd 2147767521 [ 933.519353][ T4252] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 933.823859][T12171] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.109456][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 934.119609][ T4252] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 934.128678][ T4252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.149219][ T4252] usb 4-1: Product: syz [ 934.153424][ T4252] usb 4-1: Manufacturer: syz [ 934.158040][ T4252] usb 4-1: SerialNumber: syz [ 934.177523][ T4252] usb 4-1: config 0 descriptor?? [ 934.389457][T10014] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 934.569480][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 935.580697][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.591867][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.607518][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 935.711152][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 935.729567][T10014] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 935.738286][T10014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.749877][ T21] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 935.793720][ T21] usb 2-1: Manufacturer: syz [ 935.827553][ T21] usb 2-1: config 0 descriptor?? [ 935.829725][T10014] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 935.849822][T10014] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 935.858159][T10014] usb 3-1: Manufacturer: syz [ 935.868001][T10014] usb 3-1: config 0 descriptor?? [ 935.927213][T12208] fuse: Bad value for 'fd' [ 935.999432][T10014] rc_core: IR keymap rc-hauppauge not found [ 936.006053][T10014] Registered IR keymap rc-empty [ 936.028920][T10014] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 936.041824][T10014] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 936.117037][ T4299] usb 3-1: USB disconnect, device number 7 [ 936.334186][ T21] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 936.358373][ T21] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 936.478859][T12216] tipc: Started in network mode [ 936.490309][T12216] tipc: Node identity 16b187cbbb6a, cluster identity 4711 [ 936.497885][ T21] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 936.505894][T12216] tipc: Enabled bearer , priority 0 [ 936.599569][T12211] tipc: Resetting bearer [ 936.605839][ T4299] usb 4-1: USB disconnect, device number 7 [ 936.782663][T12211] tipc: Disabling bearer [ 936.879350][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 936.908378][ T4230] usb 2-1: USB disconnect, device number 4 [ 937.132817][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 937.249529][ T21] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 937.264760][ T21] usb 7-1: config 179 has no interface number 0 [ 937.277144][ T21] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 937.298210][ T21] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 937.337119][ T21] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 937.349439][ T21] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 937.361937][ T21] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 937.381738][ T21] usb 7-1: config 179 interface 65 has no altsetting 0 [ 937.394598][ T21] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 937.405631][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.503554][ T21] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input12 [ 937.518052][T12245] 9pnet_virtio: no channels available for device syz [ 937.533556][ T4397] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 937.879480][ T4223] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 938.908006][T12271] 9pnet_virtio: no channels available for device syz [ 938.959522][ T4223] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 938.982082][ T4223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.995716][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 939.005680][ T4223] usb 2-1: Product: syz [ 939.025604][ T4223] usb 2-1: Manufacturer: syz [ 939.039284][ T4223] usb 2-1: SerialNumber: syz [ 939.046275][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 939.072190][ T4223] usb 2-1: config 0 descriptor?? [ 940.540615][ T21] usb 7-1: USB disconnect, device number 4 [ 940.549502][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 940.835306][ T21] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 941.333881][ T4223] usb 2-1: USB disconnect, device number 5 [ 942.920595][T12351] binder_alloc: 12350: pid 12350 spamming oneway? 2 buffers allocated for a total size of 5144 [ 942.999952][T12356] tipc: Started in network mode [ 943.004898][T12356] tipc: Node identity fab7cb96ad6b, cluster identity 4711 [ 943.052317][T12356] tipc: Enabled bearer , priority 0 [ 943.148242][T12357] device syzkaller0 entered promiscuous mode [ 943.243748][T10014] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 943.254388][T12355] tipc: Resetting bearer [ 943.407379][T12355] tipc: Disabling bearer [ 943.459592][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 943.487540][T12367] bond0: (slave dummy0): Releasing backup interface [ 943.512799][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 943.541196][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 943.610469][T12367] device bridge_slave_0 left promiscuous mode [ 943.622267][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.643347][T12367] device bridge_slave_1 left promiscuous mode [ 943.750141][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.920027][T10014] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 943.965547][T10014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.044670][T10014] usb 4-1: Product: syz [ 944.086917][T10014] usb 4-1: Manufacturer: syz [ 944.120421][T10014] usb 4-1: SerialNumber: syz [ 944.195542][T12367] bond0: (slave bond_slave_0): Releasing backup interface [ 944.237086][T10014] usb 4-1: config 0 descriptor?? [ 944.337036][T12367] bond0: (slave bond_slave_1): Releasing backup interface [ 944.471328][T12367] team0: Port device team_slave_0 removed [ 944.530049][T12367] team0: Port device team_slave_1 removed [ 944.536658][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.597254][T12367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.622658][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.639348][T12367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.663862][T12361] netlink: 'syz.2.2142': attribute type 10 has an invalid length. [ 944.700556][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.833964][T12361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 944.855120][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 946.259968][ T5218] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 946.795481][ T1108] usb 4-1: USB disconnect, device number 8 [ 948.380629][T12413] kthread_run failed with err -4 [ 948.735693][T12423] binder: 12418:12423 unknown command 1074553620 [ 948.742807][T12423] binder: 12418:12423 ioctl c0306201 200000000640 returned -22 [ 948.883662][T12431] overlayfs: missing 'lowerdir' [ 954.319290][ T4299] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 955.469370][ T4299] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 955.478005][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.599541][ T4299] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 955.608788][ T4299] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 955.642060][ T4299] usb 7-1: Manufacturer: syz [ 955.656226][ T4299] usb 7-1: config 0 descriptor?? [ 955.786656][T10014] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 956.329395][T10014] usb 3-1: Using ep0 maxpacket: 8 [ 956.409260][ T4299] rc_core: IR keymap rc-hauppauge not found [ 956.479675][T10014] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.588074][T10014] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.676778][T10014] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 956.792581][T10014] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.933601][T10014] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.997517][T10014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.288653][ T4299] Registered IR keymap rc-empty [ 957.294366][ T4299] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 957.320463][ T4299] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 957.359557][T10014] usb 3-1: GET_CAPABILITIES returned 0 [ 957.366020][T10014] usbtmc 3-1:16.0: can't read capabilities [ 957.390077][ T4299] usb 7-1: USB disconnect, device number 5 [ 957.569575][T10014] usb 3-1: USB disconnect, device number 8 [ 957.799431][T12558] batman_adv: batadv0: Adding interface: dummy0 [ 957.805826][T12558] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.831139][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.908661][T12558] batman_adv: batadv0: Interface activated: dummy0 [ 957.988052][T12560] batadv0: mtu less than device minimum [ 958.011432][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.024570][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.037122][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.049818][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.062449][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.075028][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.087647][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.100327][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 958.113004][T12560] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 959.427765][T12580] Bluetooth: hci5: Frame reassembly failed (-84) [ 959.438895][ T4384] Bluetooth: hci5: Frame reassembly failed (-84) [ 961.139086][T12605] 9pnet: Insufficient options for proto=fd [ 961.145982][T10014] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 961.459387][ T5218] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 962.279355][T10014] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 962.321849][T10014] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 962.357473][T12617] overlayfs: missing 'lowerdir' [ 962.366895][T10014] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 962.433570][T10014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.509815][T12598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 964.446460][T10014] usb 5-1: USB disconnect, device number 6 [ 965.134988][T12637] binder: 12634:12637 unknown command 0 [ 965.163446][T12637] binder: 12634:12637 ioctl c0306201 200000000080 returned -22 [ 966.087767][T12654] 9pnet: Insufficient options for proto=fd [ 966.099599][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 966.479427][ T1108] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 966.524215][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.730345][ T1108] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 966.963162][ T1108] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 967.081037][ T1108] usb 2-1: Manufacturer: syz [ 967.235413][ T1108] usb 2-1: config 0 descriptor?? [ 967.449462][ T1108] rc_core: IR keymap rc-hauppauge not found [ 967.455796][ T1108] Registered IR keymap rc-empty [ 967.470140][ T1108] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 967.482506][ T1108] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 967.529543][ T1108] usb 2-1: USB disconnect, device number 6 [ 968.379616][T12669] batman_adv: batadv0: Adding interface: dummy0 [ 968.390117][T12669] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.418492][T12669] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 968.437441][T12673] batman_adv: batadv0: Adding interface: dummy0 [ 968.448726][T12673] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.497887][T12673] batman_adv: batadv0: Interface activated: dummy0 [ 968.520950][T12675] net_ratelimit: 10 callbacks suppressed [ 968.520981][T12675] batadv0: mtu less than device minimum [ 968.602416][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.615158][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.627823][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.640474][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.653265][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.665851][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.678467][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.691110][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.703706][T12675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 969.961766][T12695] overlayfs: missing 'lowerdir' [ 971.210055][T12715] binder: BINDER_SET_CONTEXT_MGR already set [ 971.216566][T12715] binder: 12714:12715 ioctl 4018620d 200000004a80 returned -16 [ 973.562099][T12738] comedi comedi0: No channels found! [ 974.425410][T12755] netlink: 'syz.3.2263': attribute type 4 has an invalid length. [ 974.564118][T12745] crypto_alloc_aead failed rc=-4 [ 974.679324][T10014] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 975.767612][T12786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 975.844128][T10014] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 975.862680][T10014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 975.875813][T10014] usb 7-1: Product: syz [ 975.880856][T10014] usb 7-1: Manufacturer: syz [ 975.885485][T10014] usb 7-1: SerialNumber: syz [ 976.041357][T10014] usb 7-1: config 0 descriptor?? [ 976.794486][T10014] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 976.810124][T10014] dvb-usb: bulk message failed: -22 (2/0) [ 976.819509][T12786] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 976.864261][T10014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.991123][T10014] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 976.999817][T10014] usb 7-1: media controller created [ 977.037788][T10014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.119287][T10014] cxusb: set interface failed [ 977.124155][T10014] dvb-usb: bulk message failed: -22 (1/0) [ 977.234083][T10014] DVB: Unable to find symbol mt352_attach() [ 977.260905][T10014] dvb-usb: bulk message failed: -22 (5/0) [ 977.297085][T10014] zl10353_read_register: readreg error (reg=127, ret==-121) [ 977.316454][T12801] input: syz1 as /devices/virtual/input/input15 [ 977.336536][T10014] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 977.579525][T10014] rc_core: IR keymap rc-dvico-mce not found [ 977.589196][T10014] Registered IR keymap rc-empty [ 977.623094][T10014] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 977.679416][T10014] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input16 [ 977.695309][T12813] syz.6.2278 uses obsolete (PF_INET,SOCK_PACKET) [ 977.739358][T10014] dvb-usb: schedule remote query interval to 100 msecs. [ 977.761614][T10014] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 977.859510][T10014] usb 7-1: USB disconnect, device number 6 [ 978.035753][T10014] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 978.681607][T12834] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 978.697161][T12834] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 979.067861][T12854] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 979.086223][T12854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 979.120316][T12854] bond0: (slave dummy0): Releasing backup interface [ 979.160465][T12854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 979.191038][T12854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 979.221479][T12854] device bridge_slave_0 left promiscuous mode [ 979.249657][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.272667][T12854] device bridge_slave_1 left promiscuous mode [ 979.294292][T12854] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.330572][T10014] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 979.535454][T12854] bond0: (slave bond_slave_0): Releasing backup interface [ 979.583028][T12854] bond0: (slave bond_slave_1): Releasing backup interface [ 979.677378][T12854] team0: Port device team_slave_0 removed [ 979.711390][T12854] team0: Port device team_slave_1 removed [ 979.718918][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.728619][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.741043][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.748544][T12854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.794075][T10014] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 979.838782][T10014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.929280][ T4299] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 980.007560][T10014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.017913][T10014] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 980.338689][T10014] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 980.349498][ T4299] usb 7-1: Using ep0 maxpacket: 8 [ 980.364459][T10014] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 980.386448][T10014] usb 3-1: Manufacturer: syz [ 980.426749][T10014] usb 3-1: config 0 descriptor?? [ 980.589338][ T4299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.606418][ T4299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 980.616700][ T4299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 980.634934][ T4299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 980.647242][ T4299] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 980.766711][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.980794][ T4299] hub 7-1:1.0: bad descriptor, ignoring hub [ 980.986771][ T4299] hub: probe of 7-1:1.0 failed with error -5 [ 980.997534][ T4299] cdc_wdm 7-1:1.0: skipping garbage [ 981.003115][ T4299] cdc_wdm 7-1:1.0: skipping garbage [ 981.020200][ T4299] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 981.026275][ T4299] cdc_wdm 7-1:1.0: Unknown control protocol [ 981.067606][T12902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 981.138556][T12902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 981.185738][T10014] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 981.249721][T10014] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 981.282310][T12906] udc-core: couldn't find an available UDC or it's busy [ 981.323213][T12906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 981.407780][T10014] appleir 0003:05AC:8243.0002: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 981.618146][T12910] capability: warning: `syz.4.2304' uses 32-bit capabilities (legacy support in use) [ 981.821370][ T1108] usb 7-1: USB disconnect, device number 7 [ 982.817048][T10014] usb 3-1: USB disconnect, device number 9 [ 983.033933][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2315'. [ 983.405399][T12949] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 983.442130][T12949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 983.491777][T12949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 983.542265][T12949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 984.150579][T12978] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 984.326940][T12978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 985.540501][ T5218] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 985.919978][T13011] 9pnet_virtio: no channels available for device syz [ 986.307972][T13029] 9pnet_virtio: no channels available for device syz [ 987.417405][T13045] sp0: Synchronizing with TNC [ 988.327359][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 988.516673][T13058] bridge0: port 1(bond1) entered blocking state [ 988.528094][T13058] bridge0: port 1(bond1) entered disabled state [ 988.536362][T13058] device bond1 entered promiscuous mode [ 988.573901][T13062] bridge0: port 2(geneve2) entered blocking state [ 988.721075][T13062] bridge0: port 2(geneve2) entered disabled state [ 988.774000][T13062] device geneve2 entered promiscuous mode [ 988.925983][T13085] team0: Device gtp0 is of different type [ 988.999436][ T4223] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 989.279571][ T4223] usb 7-1: Using ep0 maxpacket: 32 [ 989.439321][ T4223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.483396][ T4223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.576653][ T4223] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 989.732793][ T4223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.880797][ T4223] usb 7-1: config 0 descriptor?? [ 989.927637][T13102] input: syz1 as /devices/virtual/input/input17 [ 989.986395][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.002678][T13103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.011299][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.019810][T13103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.370896][ T4223] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 990.545320][T13125] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 990.591712][T13125] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 990.655069][ T4223] usb 7-1: USB disconnect, device number 8 [ 992.465138][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 992.901951][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.908763][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.101377][ T4223] Bluetooth: hci0: command 0x0405 tx timeout [ 993.107295][T13153] team0: Port device bond0 removed [ 993.171776][T13153] batman_adv: batadv0: Interface deactivated: dummy0 [ 993.233267][T13153] batman_adv: batadv0: Removing interface: dummy0 [ 993.370480][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 993.410438][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.418115][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.486354][T13172] input: syz1 as /devices/virtual/input/input18 [ 993.694697][T13179] sp0: Synchronizing with TNC [ 993.899373][T10014] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 993.996435][T13185] input: syz0 as /devices/virtual/input/input19 [ 994.149281][T10014] usb 3-1: Using ep0 maxpacket: 32 [ 994.269388][T10014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.288820][T10014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.304417][T10014] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 994.314041][T10014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.338278][T10014] usb 3-1: config 0 descriptor?? [ 995.007861][T10014] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 995.237336][T10014] usb 3-1: USB disconnect, device number 10 [ 995.362282][T13201] 9pnet_virtio: no channels available for device syz [ 996.204080][T13211] fuse: Bad value for 'fd' [ 996.548769][T13213] sp0: Synchronizing with TNC [ 996.657171][T13219] input: syz0 as /devices/virtual/input/input20 [ 997.219324][ T4299] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 997.439293][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 997.779546][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 997.860711][ T4299] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 997.880418][ T4299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.888461][ T4299] usb 7-1: Product: syz [ 997.906341][ T4299] usb 7-1: Manufacturer: syz [ 997.912919][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.937087][ T4299] usb 7-1: SerialNumber: syz [ 997.945951][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.960231][ T4299] usb 7-1: config 0 descriptor?? [ 997.972521][ T1108] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 997.995721][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.025470][ T1108] usb 4-1: config 0 descriptor?? [ 998.051999][T13252] sp0: Synchronizing with TNC [ 998.390406][T13256] virt_wifi0 speed is unknown, defaulting to 1000 [ 999.168982][ T1108] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 999.583432][T10014] usb 4-1: USB disconnect, device number 9 [ 1000.218946][ T1111] usb 7-1: USB disconnect, device number 9 [ 1001.335990][T13298] sp0: Synchronizing with TNC [ 1001.468116][T13297] [U] è [ 1001.763317][T13313] loop6: detected capacity change from 0 to 524288000 [ 1001.879768][T13313] loop_set_status: loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) has still dirty pages (nrpages=1) [ 1001.987459][T13326] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1002.209337][ T5164] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1002.489486][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 1002.559316][T10014] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1002.619556][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.637158][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.659592][ T5164] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1002.669333][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.697901][ T5164] usb 2-1: config 0 descriptor?? [ 1003.736676][ T5164] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1003.899399][T10014] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1003.913352][T10014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.938990][T10014] usb 3-1: Product: syz [ 1003.953815][T10014] usb 3-1: Manufacturer: syz [ 1003.969297][T10014] usb 3-1: SerialNumber: syz [ 1004.004719][T10014] usb 3-1: config 0 descriptor?? [ 1004.035390][ T1111] usb 2-1: USB disconnect, device number 7 [ 1004.111511][T13364] fido_id[13364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1005.451665][ T8967] Bluetooth: hci5: Frame reassembly failed (-84) [ 1005.522281][ T263] block nbd3: Attempted send on invalid socket [ 1005.528570][ T263] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.585062][ T263] block nbd3: Attempted send on invalid socket [ 1005.593757][ T263] blk_update_request: I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.623500][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1005.720079][ T263] block nbd3: Attempted send on invalid socket [ 1005.726512][ T263] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.743282][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1005.797878][ T263] block nbd3: Attempted send on invalid socket [ 1005.805710][ T263] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.824914][ T263] block nbd3: Attempted send on invalid socket [ 1005.832458][ T263] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.850367][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1005.894956][ T263] block nbd3: Attempted send on invalid socket [ 1005.901951][ T263] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.917795][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1005.935464][ T150] block nbd3: Attempted send on invalid socket [ 1005.941768][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.957052][ T150] block nbd3: Attempted send on invalid socket [ 1005.963395][ T150] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.974774][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1005.999788][ T150] block nbd3: Attempted send on invalid socket [ 1006.006038][ T150] blk_update_request: I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1006.017348][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1006.040762][ T150] block nbd3: Attempted send on invalid socket [ 1006.048406][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1006.074749][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1006.147675][T13379] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1006.173098][T13395] overlayfs: missing 'lowerdir' [ 1006.190467][T13379] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1006.298311][ T4299] usb 3-1: USB disconnect, device number 11 [ 1007.507348][ T1108] Bluetooth: hci5: command 0xfc11 tx timeout [ 1007.539222][ T5218] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1008.659683][T10014] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1009.180346][T10014] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1009.290498][T10014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.298571][T10014] usb 2-1: Product: syz [ 1009.354398][T10014] usb 2-1: Manufacturer: syz [ 1009.383927][T10014] usb 2-1: SerialNumber: syz [ 1009.450256][T10014] usb 2-1: config 0 descriptor?? [ 1011.678668][T13477] loop2: detected capacity change from 0 to 7 [ 1011.708418][ T8231] Dev loop2: unable to read RDB block 7 [ 1011.720632][ T8231] loop2: AHDI p1 p2 p3 [ 1011.746500][ T8231] loop2: partition table partially beyond EOD, truncated [ 1011.792260][ T8231] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1011.827358][ T8231] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1011.879301][ T4252] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1011.957584][T13477] Dev loop2: unable to read RDB block 7 [ 1011.976771][T13477] loop2: AHDI p1 p2 p3 [ 1011.986614][T13477] loop2: partition table partially beyond EOD, truncated [ 1011.994432][T13477] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1012.001576][T13477] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1012.249916][ T4252] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1012.265782][T13495] 9pnet: Insufficient options for proto=fd [ 1012.335952][ T4252] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.575105][ T4252] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1012.727698][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.979802][ T1111] usb 2-1: USB disconnect, device number 8 [ 1013.269339][ T4252] usb 5-1: usb_control_msg returned -32 [ 1013.276427][ T4252] usbtmc 5-1:16.0: can't read capabilities [ 1014.898440][ T1108] usb 5-1: USB disconnect, device number 7 [ 1014.996062][T13530] overlayfs: missing 'lowerdir' [ 1017.355484][T13549] 9pnet: Insufficient options for proto=fd [ 1017.382628][ C1] vcan0: j1939_tp_txtimer: 0xffff88806141b400: tx aborted with unknown reason: -2 [ 1017.893910][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806141b400: abort rx timeout. Force session deactivation [ 1018.029326][ T5164] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1018.729472][ T5164] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1019.262261][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.270803][ T5164] usb 3-1: Product: syz [ 1019.275424][ T5164] usb 3-1: Manufacturer: syz [ 1019.280855][ T5164] usb 3-1: SerialNumber: syz [ 1019.299952][ T5164] usb 3-1: config 0 descriptor?? [ 1020.588798][ T5164] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1021.549435][ T1108] usb 3-1: USB disconnect, device number 12 [ 1021.629575][ T5164] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1021.651318][ T5164] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1021.883790][T13611] kthread_run failed with err -4 [ 1022.136246][ T5164] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1022.145404][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.169541][T13576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1022.274099][T13616] 9pnet: Insufficient options for proto=fd [ 1022.469224][ T1108] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1022.583721][ T5164] usb 5-1: USB disconnect, device number 8 [ 1023.337011][T11731] udevd[11731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.369558][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 149, setting to 64 [ 1023.749323][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1024.265902][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.274585][ T1108] usb 3-1: Product: syz [ 1024.278892][ T1108] usb 3-1: Manufacturer: syz [ 1024.283883][ T1108] usb 3-1: SerialNumber: syz [ 1024.294814][ T1108] usb 3-1: config 0 descriptor?? [ 1024.390888][T13636] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1024.482135][T13644] block device autoloading is deprecated and will be removed. [ 1025.741139][T13657] overlayfs: missing 'lowerdir' [ 1026.070853][ T4252] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1027.620258][ T4252] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1027.719481][T13681] 9pnet: Insufficient options for proto=fd [ 1028.077054][ T4252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.478276][T13684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1028.641447][ T4252] usb 7-1: Product: syz [ 1028.645666][ T4252] usb 7-1: Manufacturer: syz [ 1028.650404][ T4252] usb 7-1: SerialNumber: syz [ 1028.661416][ T4252] usb 7-1: config 0 descriptor?? [ 1028.795666][ T1108] usb 7-1: USB disconnect, device number 10 [ 1028.817450][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1028.862848][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1029.899397][T13607] usb 3-1: 0:0: usb_set_interface failed (-110) [ 1030.089301][ T4252] usb 3-1: USB disconnect, device number 13 [ 1031.565405][T13731] 9pnet: Insufficient options for proto=fd [ 1033.798122][T13754] overlayfs: missing 'workdir' [ 1033.950778][ T4252] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1035.295802][ T4252] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1035.308094][ T4252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.317192][ T4252] usb 3-1: Product: syz [ 1035.321490][ T4252] usb 3-1: Manufacturer: syz [ 1035.326113][ T4252] usb 3-1: SerialNumber: syz [ 1035.478610][ T4252] usb 3-1: config 0 descriptor?? [ 1035.499275][ T4252] usb 3-1: can't set config #0, error -71 [ 1035.518948][ T4252] usb 3-1: USB disconnect, device number 14 [ 1035.671320][T13777] 9pnet: Insufficient options for proto=fd [ 1038.503581][T13797] virt_wifi0 speed is unknown, defaulting to 1000 [ 1040.599666][ T4223] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1040.788244][T13830] 9pnet: Insufficient options for proto=fd [ 1041.409370][ T4223] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1041.418649][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.541096][ T4223] usb 5-1: Product: syz [ 1041.545341][ T4223] usb 5-1: Manufacturer: syz [ 1041.550012][ T4223] usb 5-1: SerialNumber: syz [ 1041.568208][ T4223] usb 5-1: config 0 descriptor?? [ 1041.720547][ T4223] usb 5-1: USB disconnect, device number 9 [ 1042.663621][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.758294][T13845] overlayfs: missing 'workdir' [ 1045.201633][T13880] 9pnet: Insufficient options for proto=fd [ 1045.949344][ T5164] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1047.513041][ T5164] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1047.558877][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.848205][ T5164] usb 3-1: Product: syz [ 1047.872557][ T5164] usb 3-1: Manufacturer: syz [ 1047.896497][ T5164] usb 3-1: SerialNumber: syz [ 1048.021452][ T5164] usb 3-1: config 0 descriptor?? [ 1048.050371][ T5164] usb 3-1: can't set config #0, error -71 [ 1048.100885][ T5164] usb 3-1: USB disconnect, device number 15 [ 1049.952486][T13930] 9pnet: Insufficient options for proto=fd [ 1051.480063][ T4223] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1052.374755][ T4223] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1052.412552][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.944298][ T4223] usb 4-1: Product: syz [ 1052.948524][ T4223] usb 4-1: Manufacturer: syz [ 1052.953587][ T4223] usb 4-1: SerialNumber: syz [ 1052.960495][ T4223] usb 4-1: config 0 descriptor?? [ 1054.351713][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.358190][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.675457][T13975] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1055.088298][ T5164] usb 4-1: USB disconnect, device number 10 [ 1055.139888][T13975] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1055.385316][T13981] 9pnet: Insufficient options for proto=fd [ 1057.605083][T13997] device syzkaller0 entered promiscuous mode [ 1058.265010][T14003] virt_wifi0 speed is unknown, defaulting to 1000 [ 1058.423782][ T4397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.737771][T14029] 9pnet: Insufficient options for proto=fd [ 1059.457560][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 1059.479941][ T4397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.539432][ T4223] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1060.098776][ T4397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.272626][T14044] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1060.902145][ T4397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.999848][ T4223] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1061.673750][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 1061.735106][ T4223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.743674][ T4223] usb 7-1: Product: syz [ 1061.769170][ T4223] usb 7-1: Manufacturer: syz [ 1061.773903][ T4223] usb 7-1: SerialNumber: syz [ 1061.780643][ T4223] usb 7-1: config 0 descriptor?? [ 1061.819448][ T4223] usb 7-1: can't set config #0, error -71 [ 1061.829685][ T4223] usb 7-1: USB disconnect, device number 11 [ 1062.798180][T14003] chnl_net:caif_netlink_parms(): no params data found [ 1063.472692][T14087] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1063.869554][ T5164] Bluetooth: hci5: command 0x040f tx timeout [ 1064.331179][T14097] 9pnet: Insufficient options for proto=fd [ 1065.255496][T14106] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1066.020780][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 1066.256375][T14003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.272797][T14003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.299242][T14003] device bridge_slave_0 entered promiscuous mode [ 1066.309176][ T5164] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1066.334145][T14106] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1066.346039][T14003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.684945][T14003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.722170][T14003] device bridge_slave_1 entered promiscuous mode [ 1066.864769][T14003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.887031][T14003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.919768][ T5164] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1066.943730][ T5164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.976359][ T5164] usb 7-1: Product: syz [ 1067.020047][ T5164] usb 7-1: Manufacturer: syz [ 1067.032489][ T5164] usb 7-1: SerialNumber: syz [ 1067.537453][ T5164] usb 7-1: config 0 descriptor?? [ 1069.054473][T14003] team0: Port device team_slave_0 added [ 1069.215063][T14003] team0: Port device team_slave_1 added [ 1069.426630][T14144] 9pnet: Insufficient options for proto=fd [ 1069.977005][ T4223] usb 7-1: USB disconnect, device number 12 [ 1070.186224][T14003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.209233][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.300992][T14003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.331207][T14003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.338194][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.468002][T14003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.484346][T14161] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1070.737552][T14003] device hsr_slave_0 entered promiscuous mode [ 1070.750194][T14003] device hsr_slave_1 entered promiscuous mode [ 1070.769191][T14003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.776866][T14003] Cannot create hsr debugfs directory [ 1071.828381][ T4397] device hsr_slave_0 left promiscuous mode [ 1071.898248][T14179] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1071.916979][ T4397] device hsr_slave_1 left promiscuous mode [ 1072.085660][ T4397] device veth1_macvtap left promiscuous mode [ 1072.099344][ T4397] device veth0_macvtap left promiscuous mode [ 1072.109564][ T4397] device veth1_vlan left promiscuous mode [ 1072.121365][ T4397] device veth0_vlan left promiscuous mode [ 1073.361086][ T4397] bond0 (unregistering): Released all slaves [ 1073.534450][T14205] 9pnet: Insufficient options for proto=fd [ 1074.209264][T10014] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1074.375809][T14210] net_ratelimit: 10 callbacks suppressed [ 1074.375826][T14210] sock: sock_set_timeout: `syz.6.2665' (pid 14210) tries to set negative timeout [ 1076.079494][T10014] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1076.195167][T10014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.330467][T14237] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1076.582140][T10014] usb 3-1: Product: syz [ 1076.586858][T10014] usb 3-1: Manufacturer: syz [ 1076.591924][T10014] usb 3-1: SerialNumber: syz [ 1076.599049][T10014] usb 3-1: config 0 descriptor?? [ 1076.875647][ T21] usb 3-1: USB disconnect, device number 16 [ 1077.289016][T14260] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1078.110707][T14260] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1078.304992][T14261] 9pnet: Insufficient options for proto=fd [ 1079.408832][T14003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1079.454638][T14003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1079.647560][T14003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.424203][T14003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.671574][ T5164] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1080.847955][T14003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.909411][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.985895][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.011728][T14003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.190133][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.243567][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.252870][ T5164] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1081.270019][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.277218][ T8967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.291423][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.316532][ T5164] usb 5-1: Product: syz [ 1081.332504][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.348140][ T5164] usb 5-1: Manufacturer: syz [ 1081.361066][ T5164] usb 5-1: SerialNumber: syz [ 1081.380583][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1081.391480][ T5164] usb 5-1: config 0 descriptor?? [ 1081.405816][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.438855][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.446209][ T8967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.490543][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.507857][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.856775][T14320] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1082.442871][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1082.640083][T14327] 9pnet: Insufficient options for proto=fd [ 1083.317031][ T5164] usb 5-1: USB disconnect, device number 10 [ 1083.373135][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1083.550969][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1084.309424][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1084.318119][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1084.408969][T14003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1084.451985][T14003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1084.525474][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1084.681139][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1084.760194][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1084.864302][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1084.889990][T14351] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1085.334474][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1086.241773][T14363] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1086.570198][T14363] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1086.746736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1086.772710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1086.827412][T14003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.885465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.895257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.965556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1086.982448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1087.022656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1087.060084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1087.096228][T14003] device veth0_vlan entered promiscuous mode [ 1087.131652][T14003] device veth1_vlan entered promiscuous mode [ 1087.202177][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1087.218305][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1087.235766][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1087.253232][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1087.271936][T14003] device veth0_macvtap entered promiscuous mode [ 1087.295989][T14003] device veth1_macvtap entered promiscuous mode [ 1087.351257][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.392496][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.426248][T14003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.464363][ T1108] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1087.484838][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1087.519670][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1087.579983][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1087.610735][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1087.631482][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.665385][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.156845][T14003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.264162][ T1108] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1088.305780][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.319671][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1088.350508][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1088.389208][ T1108] usb 3-1: Product: syz [ 1088.407010][T14003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.426424][ T1108] usb 3-1: Manufacturer: syz [ 1088.469181][T14003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.469187][ T1108] usb 3-1: SerialNumber: syz [ 1088.487241][T14003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.496431][T14003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.510357][ T1108] usb 3-1: config 0 descriptor?? [ 1088.801883][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.457072][ T4721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.465975][ T4721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.480549][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.640585][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.698082][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1090.681482][T14441] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1092.590893][T10014] usb 3-1: USB disconnect, device number 17 [ 1092.709763][T14442] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1093.977040][T14467] 9pnet: Insufficient options for proto=fd [ 1096.119265][ T1108] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1096.158453][T14497] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1096.959500][ T1108] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1096.986678][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.995779][T14497] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1097.080551][ T1108] usb 7-1: Product: syz [ 1097.142982][ T1108] usb 7-1: Manufacturer: syz [ 1097.147642][ T1108] usb 7-1: SerialNumber: syz [ 1097.363764][ T1108] usb 7-1: config 0 descriptor?? [ 1097.399414][T14501] 9pnet: Insufficient options for proto=fd [ 1098.273418][ T1108] usb 7-1: USB disconnect, device number 13 [ 1100.542834][T14553] 9pnet: Insufficient options for proto=fd [ 1101.294043][T14559] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1102.310960][T14567] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1103.159832][T14567] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1103.316293][T14572] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1103.519275][ T1111] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1104.100350][ T1111] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1104.127285][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.286438][ T1111] usb 2-1: Product: syz [ 1104.331700][ T1111] usb 2-1: Manufacturer: syz [ 1104.371214][ T1111] usb 2-1: SerialNumber: syz [ 1104.449999][ T1111] usb 2-1: config 0 descriptor?? [ 1105.587636][ T1111] usb 2-1: USB disconnect, device number 9 [ 1106.724036][T14626] 9pnet: Insufficient options for proto=fd [ 1106.911148][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.252717][T14638] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1107.410328][T14638] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1110.152361][ T5164] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1110.572201][T14671] 9pnet: Insufficient options for proto=fd [ 1111.221647][T14678] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1111.769745][ T5164] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1111.968417][ T5164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.989203][ T5164] usb 7-1: Product: syz [ 1111.993421][ T5164] usb 7-1: Manufacturer: syz [ 1111.998249][ T5164] usb 7-1: SerialNumber: syz [ 1112.029457][ T5164] usb 7-1: config 0 descriptor?? [ 1112.089970][T14678] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1112.271342][ T4223] usb 7-1: USB disconnect, device number 14 [ 1112.541350][T14695] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1114.864144][T14725] 9pnet: Insufficient options for proto=fd [ 1115.618670][T14740] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1115.820355][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.841790][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.850435][T14740] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1116.289357][ T4223] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1117.789937][ T4223] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1118.249367][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.257735][ T4223] usb 4-1: Product: syz [ 1118.262336][ T4223] usb 4-1: Manufacturer: syz [ 1118.266974][ T4223] usb 4-1: SerialNumber: syz [ 1118.273916][ T4223] usb 4-1: config 0 descriptor?? [ 1118.461766][T14775] 9pnet: Insufficient options for proto=fd [ 1119.187443][T14410] usb 4-1: USB disconnect, device number 11 [ 1119.618953][T14789] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1120.463664][T14789] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1121.067773][T14809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1122.339279][T14830] 9pnet: Insufficient options for proto=fd [ 1123.029640][T11734] udevd[11734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.451314][T14848] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1123.896425][ T5164] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1124.489930][ T5164] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1124.584877][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.799277][ T5164] usb 3-1: Product: syz [ 1124.803496][ T5164] usb 3-1: Manufacturer: syz [ 1124.827461][ T5164] usb 3-1: SerialNumber: syz [ 1124.838156][ T5164] usb 3-1: config 0 descriptor?? [ 1125.681482][ T4223] usb 3-1: USB disconnect, device number 18 [ 1126.997803][T14889] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1127.098084][T14890] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1127.235309][T14890] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1127.428012][T14892] 9pnet: Insufficient options for proto=fd [ 1128.235086][T14905] cgroup: fork rejected by pids controller in /syz2 [ 1129.969177][ T5164] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1130.569635][ T5164] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1130.989190][ T5164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.997228][ T5164] usb 7-1: Product: syz [ 1131.063317][ T5164] usb 7-1: Manufacturer: syz [ 1131.067966][ T5164] usb 7-1: SerialNumber: syz [ 1131.141091][ T5164] usb 7-1: config 0 descriptor?? [ 1131.148367][ T4334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.268420][ T4334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.374405][ T4334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.455128][ T4334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.671215][T10340] usb 7-1: USB disconnect, device number 15 [ 1131.734486][T14936] 9pnet: Insufficient options for proto=fd [ 1132.631498][T14948] virt_wifi0 speed is unknown, defaulting to 1000 [ 1134.531792][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 1134.922839][T14948] chnl_net:caif_netlink_parms(): no params data found [ 1135.389577][T14988] 9pnet: Insufficient options for proto=fd [ 1135.438736][T14948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.446595][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.458813][T14948] device bridge_slave_0 entered promiscuous mode [ 1135.469790][ T4223] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1135.479993][T14948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.489943][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.519922][T14948] device bridge_slave_1 entered promiscuous mode [ 1135.607500][T14948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.646843][T14948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.740263][T14948] team0: Port device team_slave_0 added [ 1135.752656][T14948] team0: Port device team_slave_1 added [ 1135.782697][ T4334] bond0: (slave wlan1): Releasing backup interface [ 1135.796620][ T4334] bond0: Destroying bond [ 1135.808026][ T4334] bond0 (unregistering): Released all slaves [ 1135.936513][T14948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.970222][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.004604][T14948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.016924][ T4223] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1136.032629][ T4223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.042295][ T4223] usb 7-1: Product: syz [ 1136.046490][ T4223] usb 7-1: Manufacturer: syz [ 1136.053676][ T4223] usb 7-1: SerialNumber: syz [ 1136.076091][ T4223] usb 7-1: config 0 descriptor?? [ 1136.089699][T14948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.135676][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.215550][T14948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.305831][T14948] device hsr_slave_0 entered promiscuous mode [ 1136.325178][T14948] device hsr_slave_1 entered promiscuous mode [ 1136.338210][T14948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.352054][T14948] Cannot create hsr debugfs directory [ 1136.385954][ T4334] device hsr_slave_0 left promiscuous mode [ 1136.413072][ T4334] device hsr_slave_1 left promiscuous mode [ 1136.429698][ T4334] batman_adv: batadv0: Removing interface: dummy0 [ 1136.449642][ T4334] device veth1_macvtap left promiscuous mode [ 1136.456278][ T4334] device veth0_macvtap left promiscuous mode [ 1136.469235][ T4334] device veth1_vlan left promiscuous mode [ 1136.475053][ T4334] device veth0_vlan left promiscuous mode [ 1136.579493][ T4223] Bluetooth: hci1: command 0x041b tx timeout [ 1137.623966][T14948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1137.638903][T14948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.650115][T14948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.660678][T14948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1137.757115][T14948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.780154][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1137.795877][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1137.807619][T14948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.819703][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1137.828728][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1137.844408][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.851654][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.865722][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1137.889255][ T1111] usb 7-1: USB disconnect, device number 16 [ 1137.900118][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1137.950246][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1137.970572][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.977668][ T8967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.999270][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.014534][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1138.043239][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.064583][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1138.086030][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1138.113368][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.130052][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1138.149289][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1138.160055][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.182460][T14948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.210004][T14948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1138.230611][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1138.243424][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.380161][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1138.387688][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1138.400615][T14948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.427581][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1138.442219][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1138.476077][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1138.486231][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1138.497004][T14948] device veth0_vlan entered promiscuous mode [ 1138.505018][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1138.514082][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1138.528621][T14948] device veth1_vlan entered promiscuous mode [ 1138.553331][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1138.563953][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.576571][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.588992][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.604895][T14948] device veth0_macvtap entered promiscuous mode [ 1138.618329][T14948] device veth1_macvtap entered promiscuous mode [ 1138.635110][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.647186][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.658282][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.659352][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 1138.668882][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.687533][T14948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.705557][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.720219][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.734040][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.751449][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.766715][T14948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.775735][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1138.788381][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1138.799414][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.808739][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.818085][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.827451][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.847177][T14948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.856431][T14948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.865691][T14948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.874715][T14948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.966634][ T383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.977616][ T383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.008683][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.012506][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1139.025813][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.041624][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1140.739671][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 1177.221971][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.228308][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.429568][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 1238.661242][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.667585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1256.099269][ T5164] Bluetooth: hci1: command 0x0406 tx timeout [ 1294.339332][ T27] INFO: task udevd:7934 blocked for more than 143 seconds. [ 1294.346662][ T27] Not tainted syzkaller #0 [ 1294.354242][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1294.363992][ T27] task:udevd state:D stack:25888 pid: 7934 ppid: 3561 flags:0x00004002 [ 1294.373390][ T27] Call Trace: [ 1294.376691][ T27] [ 1294.379766][ T27] __schedule+0x11bb/0x4390 [ 1294.384352][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1294.390447][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.396483][ T27] ? lock_chain_count+0x20/0x20 [ 1294.401497][ T27] schedule+0x11b/0x1e0 [ 1294.405689][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1294.410748][ T27] ? __percpu_down_read+0x100/0x100 [ 1294.415975][ T27] ? percpu_up_write+0x90/0x90 [ 1294.420867][ T27] __percpu_down_read+0xc9/0x100 [ 1294.425859][ T27] exit_signals+0x3e5/0x510 [ 1294.430518][ T27] do_exit+0x256/0x20a0 [ 1294.434704][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1294.439829][ T27] ? put_task_struct+0x80/0x80 [ 1294.444625][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.450908][ T27] ? lock_chain_count+0x20/0x20 [ 1294.456433][ T27] do_group_exit+0x12e/0x300 [ 1294.461251][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1294.466316][ T27] do_syscall_64+0x4c/0xa0 [ 1294.471015][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.475726][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.480813][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1294.486753][ T27] RIP: 0033:0x7f05f62346c5 [ 1294.491480][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1294.500057][ T27] RAX: ffffffffffffffda RBX: 000055d1625174a0 RCX: 00007f05f62346c5 [ 1294.508072][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1294.516204][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1294.524224][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.532316][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1294.540374][ T27] [ 1294.543444][ T27] INFO: task udevd:7977 blocked for more than 143 seconds. [ 1294.550704][ T27] Not tainted syzkaller #0 [ 1294.556363][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1294.565126][ T27] task:udevd state:D stack:26432 pid: 7977 ppid: 3561 flags:0x00004002 [ 1294.574403][ T27] Call Trace: [ 1294.577684][ T27] [ 1294.583353][ T27] __schedule+0x11bb/0x4390 [ 1294.587922][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1294.593883][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.600047][ T27] ? lock_chain_count+0x20/0x20 [ 1294.604937][ T27] schedule+0x11b/0x1e0 [ 1294.609176][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1294.614184][ T27] ? __percpu_down_read+0x100/0x100 [ 1294.619449][ T27] ? percpu_up_write+0x90/0x90 [ 1294.624256][ T27] __percpu_down_read+0xc9/0x100 [ 1294.629291][ T27] exit_signals+0x3e5/0x510 [ 1294.633820][ T27] do_exit+0x256/0x20a0 [ 1294.637983][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1294.643068][ T27] ? put_task_struct+0x80/0x80 [ 1294.647858][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.653990][ T27] ? lock_chain_count+0x20/0x20 [ 1294.659683][ T27] do_group_exit+0x12e/0x300 [ 1294.664341][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1294.669618][ T27] do_syscall_64+0x4c/0xa0 [ 1294.674068][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.678865][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.683612][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1294.691334][ T27] RIP: 0033:0x7f05f62346c5 [ 1294.695764][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1294.704251][ T27] RAX: ffffffffffffffda RBX: 000055d16250bfa0 RCX: 00007f05f62346c5 [ 1294.712344][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1294.720378][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1294.728365][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.736484][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1294.744905][ T27] [ 1294.748179][ T27] INFO: task udevd:8231 blocked for more than 143 seconds. [ 1294.755450][ T27] Not tainted syzkaller #0 [ 1294.761202][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1294.770017][ T27] task:udevd state:D stack:25056 pid: 8231 ppid: 3561 flags:0x00004002 [ 1294.779543][ T27] Call Trace: [ 1294.782878][ T27] [ 1294.785834][ T27] __schedule+0x11bb/0x4390 [ 1294.790445][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1294.796362][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.804143][ T27] ? lock_chain_count+0x20/0x20 [ 1294.809120][ T27] schedule+0x11b/0x1e0 [ 1294.813302][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1294.818367][ T27] ? __percpu_down_read+0x100/0x100 [ 1294.823961][ T27] ? percpu_up_write+0x90/0x90 [ 1294.828769][ T27] __percpu_down_read+0xc9/0x100 [ 1294.833949][ T27] exit_signals+0x3e5/0x510 [ 1294.838483][ T27] do_exit+0x256/0x20a0 [ 1294.842717][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1294.847769][ T27] ? put_task_struct+0x80/0x80 [ 1294.852607][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1294.858641][ T27] ? lock_chain_count+0x20/0x20 [ 1294.864324][ T27] do_group_exit+0x12e/0x300 [ 1294.869039][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1294.874114][ T27] do_syscall_64+0x4c/0xa0 [ 1294.878533][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.883291][ T27] ? clear_bhb_loop+0x30/0x80 [ 1294.887990][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1294.893936][ T27] RIP: 0033:0x7f05f62346c5 [ 1294.898459][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1294.906941][ T27] RAX: ffffffffffffffda RBX: 000055d16251bf80 RCX: 00007f05f62346c5 [ 1294.916935][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1294.925114][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1294.933357][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.941427][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1294.949454][ T27] [ 1294.952498][ T27] INFO: task udevd:9463 blocked for more than 143 seconds. [ 1294.959794][ T27] Not tainted syzkaller #0 [ 1294.964741][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1294.974103][ T27] task:udevd state:D stack:23296 pid: 9463 ppid: 3561 flags:0x00004002 [ 1294.983524][ T27] Call Trace: [ 1294.986833][ T27] [ 1294.989979][ T27] __schedule+0x11bb/0x4390 [ 1294.994548][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1295.000538][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.006669][ T27] ? lock_chain_count+0x20/0x20 [ 1295.011607][ T27] schedule+0x11b/0x1e0 [ 1295.015806][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1295.021136][ T27] ? __percpu_down_read+0x100/0x100 [ 1295.026393][ T27] ? percpu_up_write+0x90/0x90 [ 1295.032012][ T27] __percpu_down_read+0xc9/0x100 [ 1295.036991][ T27] exit_signals+0x3e5/0x510 [ 1295.041567][ T27] do_exit+0x256/0x20a0 [ 1295.045750][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1295.050876][ T27] ? put_task_struct+0x80/0x80 [ 1295.055671][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.061731][ T27] ? lock_chain_count+0x20/0x20 [ 1295.066609][ T27] do_group_exit+0x12e/0x300 [ 1295.072056][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1295.077117][ T27] do_syscall_64+0x4c/0xa0 [ 1295.081604][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.086300][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.091042][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.096953][ T27] RIP: 0033:0x7f05f62346c5 [ 1295.101436][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1295.109910][ T27] RAX: ffffffffffffffda RBX: 000055d1624f7fb0 RCX: 00007f05f62346c5 [ 1295.117898][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1295.125980][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1295.134161][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.142293][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1295.150567][ T27] [ 1295.153695][ T27] INFO: task udevd:11731 blocked for more than 144 seconds. [ 1295.161236][ T27] Not tainted syzkaller #0 [ 1295.166209][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1295.175366][ T27] task:udevd state:D stack:25800 pid:11731 ppid: 3561 flags:0x00004002 [ 1295.184720][ T27] Call Trace: [ 1295.188023][ T27] [ 1295.191072][ T27] __schedule+0x11bb/0x4390 [ 1295.195623][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1295.201638][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.207645][ T27] ? lock_chain_count+0x20/0x20 [ 1295.212604][ T27] schedule+0x11b/0x1e0 [ 1295.217117][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1295.222434][ T27] ? __percpu_down_read+0x100/0x100 [ 1295.227677][ T27] ? percpu_up_write+0x90/0x90 [ 1295.232850][ T27] __percpu_down_read+0xc9/0x100 [ 1295.237822][ T27] exit_signals+0x3e5/0x510 [ 1295.242392][ T27] do_exit+0x256/0x20a0 [ 1295.246590][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1295.251727][ T27] ? put_task_struct+0x80/0x80 [ 1295.256519][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.262598][ T27] ? lock_chain_count+0x20/0x20 [ 1295.267471][ T27] do_group_exit+0x12e/0x300 [ 1295.272122][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1295.277328][ T27] do_syscall_64+0x4c/0xa0 [ 1295.281886][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.286584][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.291352][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.297263][ T27] RIP: 0033:0x7f05f62346c5 [ 1295.301763][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1295.310463][ T27] RAX: ffffffffffffffda RBX: 000055d162519f30 RCX: 00007f05f62346c5 [ 1295.318489][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1295.326545][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1295.335890][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.343944][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1295.351991][ T27] [ 1295.355055][ T27] INFO: task udevd:11733 blocked for more than 144 seconds. [ 1295.362589][ T27] Not tainted syzkaller #0 [ 1295.367542][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1295.376591][ T27] task:udevd state:D stack:26336 pid:11733 ppid: 3561 flags:0x00004002 [ 1295.385954][ T27] Call Trace: [ 1295.389308][ T27] [ 1295.392273][ T27] __schedule+0x11bb/0x4390 [ 1295.396824][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1295.402809][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.408825][ T27] ? lock_chain_count+0x20/0x20 [ 1295.413742][ T27] schedule+0x11b/0x1e0 [ 1295.418081][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1295.423129][ T27] ? __percpu_down_read+0x100/0x100 [ 1295.428388][ T27] ? percpu_up_write+0x90/0x90 [ 1295.433264][ T27] __percpu_down_read+0xc9/0x100 [ 1295.438276][ T27] exit_signals+0x3e5/0x510 [ 1295.443240][ T27] do_exit+0x256/0x20a0 [ 1295.447446][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1295.452992][ T27] ? put_task_struct+0x80/0x80 [ 1295.457802][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.463847][ T27] ? lock_chain_count+0x20/0x20 [ 1295.468858][ T27] do_group_exit+0x12e/0x300 [ 1295.473555][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1295.478821][ T27] do_syscall_64+0x4c/0xa0 [ 1295.483408][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.488547][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.493408][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.499393][ T27] RIP: 0033:0x7f05f62346c5 [ 1295.503835][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1295.512325][ T27] RAX: ffffffffffffffda RBX: 000055d162524080 RCX: 00007f05f62346c5 [ 1295.520425][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1295.528425][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1295.536474][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.544552][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1295.553623][ T27] [ 1295.556706][ T27] INFO: task udevd:11734 blocked for more than 144 seconds. [ 1295.564468][ T27] Not tainted syzkaller #0 [ 1295.570071][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1295.578771][ T27] task:udevd state:D stack:26048 pid:11734 ppid: 3561 flags:0x00004002 [ 1295.588333][ T27] Call Trace: [ 1295.591732][ T27] [ 1295.594710][ T27] __schedule+0x11bb/0x4390 [ 1295.599328][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1295.605253][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.611326][ T27] ? lock_chain_count+0x20/0x20 [ 1295.616219][ T27] schedule+0x11b/0x1e0 [ 1295.620619][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 1295.625606][ T27] ? __percpu_down_read+0x100/0x100 [ 1295.630907][ T27] ? percpu_up_write+0x90/0x90 [ 1295.635824][ T27] __percpu_down_read+0xc9/0x100 [ 1295.640886][ T27] exit_signals+0x3e5/0x510 [ 1295.645421][ T27] do_exit+0x256/0x20a0 [ 1295.649641][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 1295.654732][ T27] ? put_task_struct+0x80/0x80 [ 1295.660573][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.666598][ T27] ? lock_chain_count+0x20/0x20 [ 1295.672396][ T27] do_group_exit+0x12e/0x300 [ 1295.677084][ T27] __x64_sys_exit_group+0x3b/0x40 [ 1295.682729][ T27] do_syscall_64+0x4c/0xa0 [ 1295.687185][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.692943][ T27] ? clear_bhb_loop+0x30/0x80 [ 1295.697652][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.703618][ T27] RIP: 0033:0x7f05f62346c5 [ 1295.708054][ T27] RSP: 002b:00007fffabfc5938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1295.716522][ T27] RAX: ffffffffffffffda RBX: 000055d1624fec60 RCX: 00007f05f62346c5 [ 1295.724574][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1295.732634][ T27] RBP: 000055d1624f7910 R08: 0000000000000000 R09: 0000000000000000 [ 1295.740656][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.748632][ T27] R13: 00007fffabfc5980 R14: 0000000000000000 R15: 0000000000000000 [ 1295.756690][ T27] [ 1295.759822][ T27] INFO: task syz-executor:14948 blocked for more than 144 seconds. [ 1295.767725][ T27] Not tainted syzkaller #0 [ 1295.773632][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1295.782711][ T27] task:syz-executor state:D stack:18720 pid:14948 ppid: 14929 flags:0x00004000 [ 1295.792725][ T27] Call Trace: [ 1295.796048][ T27] [ 1295.799414][ T27] __schedule+0x11bb/0x4390 [ 1295.803968][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1295.810240][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1295.816256][ T27] ? lock_chain_count+0x20/0x20 [ 1295.821150][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 1295.826201][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1295.831659][ T27] schedule+0x11b/0x1e0 [ 1295.835841][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 1295.841642][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 1295.846969][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 1295.852339][ T27] ? __rwlock_init+0x140/0x140 [ 1295.857202][ T27] mpol_rebind_mm+0x33/0x2c0 [ 1295.861887][ T27] ? _raw_spin_unlock+0x24/0x40 [ 1295.866767][ T27] cpuset_attach+0x330/0x5f0 [ 1295.871449][ T27] ? cpuset_cancel_attach+0x290/0x290 [ 1295.876847][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1295.882345][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.888504][ T27] cgroup_migrate_execute+0x7eb/0x1010 [ 1295.894157][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.900177][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1295.905415][ T27] cgroup_attach_task+0x562/0x7e0 [ 1295.911634][ T27] ? cgroup_migrate_execute+0x1010/0x1010 [ 1295.917431][ T27] ? get_task_cred+0x2b6/0x330 [ 1295.922606][ T27] __cgroup1_procs_write+0x2e5/0x3f0 [ 1295.927932][ T27] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 1295.934261][ T27] ? cgroup_pidlist_stop+0xf0/0xf0 [ 1295.939545][ T27] cgroup_file_write+0x2f7/0x630 [ 1295.944508][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1295.950269][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1295.955490][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1295.960729][ T27] kernfs_fop_write_iter+0x379/0x4c0 [ 1295.966046][ T27] vfs_write+0x712/0xd00 [ 1295.970492][ T27] ? file_end_write+0x250/0x250 [ 1295.975461][ T27] ? __context_tracking_exit+0x4c/0x80 [ 1295.981070][ T27] ? __fdget_pos+0x2c6/0x370 [ 1295.985708][ T27] ksys_write+0x14d/0x250 [ 1295.990786][ T27] ? __ia32_sys_read+0x80/0x80 [ 1295.995590][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1296.000928][ T27] do_syscall_64+0x4c/0xa0 [ 1296.005369][ T27] ? clear_bhb_loop+0x30/0x80 [ 1296.010875][ T27] ? clear_bhb_loop+0x30/0x80 [ 1296.015587][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1296.021857][ T27] RIP: 0033:0x7f9572ce597f [ 1296.026337][ T27] RSP: 002b:00007ffff3cfc7f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1296.039742][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9572ce597f [ 1296.047812][ T27] RDX: 0000000000000001 RSI: 00007ffff3cfc840 RDI: 0000000000000003 [ 1296.056209][ T27] RBP: 00007ffff3cfcdb0 R08: 0000000000000000 R09: 00007ffff3cfc647 [ 1296.064309][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1296.072439][ T27] R13: 00007ffff3cfc840 R14: 00007ffff3cfcd70 R15: 00007ffff3cfcdb0 [ 1296.080514][ T27] [ 1296.083581][ T27] [ 1296.083581][ T27] Showing all locks held in the system: [ 1296.091451][ T27] 1 lock held by khungtaskd/27: [ 1296.096441][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1296.106115][ T27] 1 lock held by kworker/dying/154: [ 1296.111669][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.122393][ T27] 4 locks held by kworker/1:2/1108: [ 1296.127614][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1296.138708][ T27] #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 1296.150341][ T27] #2: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1296.159837][ T27] #3: ffffffff96369900 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x65/0x480 [ 1296.170296][ T27] 2 locks held by getty/3944: [ 1296.174987][ T27] #0: ffff88814cbf8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1296.185079][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 1296.196287][ T27] 1 lock held by syz-executor/4178: [ 1296.201711][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.211935][ T27] 2 locks held by syz-executor/4189: [ 1296.217243][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 1296.226475][ T27] #1: ffff888079c44e28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 1296.235873][ T27] 2 locks held by syz-executor/4194: [ 1296.241482][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 1296.250665][ T27] #1: ffff888079c45c28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 1296.261198][ T27] 1 lock held by kworker/dying/4251: [ 1296.266515][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.276440][ T27] 1 lock held by kworker/dying/4259: [ 1296.281832][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.291763][ T27] 1 lock held by kworker/dying/6666: [ 1296.297247][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.307226][ T27] 1 lock held by udevd/7934: [ 1296.311949][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.322128][ T27] 1 lock held by udevd/7977: [ 1296.326743][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.336993][ T27] 1 lock held by udevd/8231: [ 1296.342464][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.352676][ T27] 3 locks held by kworker/u4:12/8967: [ 1296.358077][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1296.368096][ T27] #1: ffff8880b9027888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x495/0x810 [ 1296.379657][ T27] #2: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1296.389149][ T27] 1 lock held by kworker/dying/9063: [ 1296.394482][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.404612][ T27] 1 lock held by kworker/dying/9200: [ 1296.410045][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.420363][ T27] 1 lock held by udevd/9463: [ 1296.424978][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.435180][ T27] 2 locks held by syz-executor/10410: [ 1296.441559][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 1296.451109][ T27] #1: ffff88801eb26328 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 1296.460613][ T27] 1 lock held by udevd/11731: [ 1296.465328][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.475346][ T27] 1 lock held by udevd/11733: [ 1296.480185][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.490144][ T27] 1 lock held by udevd/11734: [ 1296.494841][ T27] #0: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 1296.505036][ T27] 2 locks held by syz-executor/14003: [ 1296.510621][ T27] #0: ffffffff8c1a66f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 1296.519782][ T27] #1: ffff88802aac7128 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 1296.528800][ T27] 7 locks held by syz-executor/14948: [ 1296.534280][ T27] #0: ffff8880747f2460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 1296.544353][ T27] #1: ffff8880609a0888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 1296.554187][ T27] #2: ffffffff8c141f08 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xee/0x230 [ 1296.564442][ T27] #3: ffffffff8bfbadd0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x17c/0x580 [ 1296.575109][ T27] #4: ffffffff8c1420f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x192/0x580 [ 1296.586583][ T27] #5: ffffffff8c14f948 (cpuset_mutex){+.+.}-{3:3}, at: cpuset_attach+0xac/0x5f0 [ 1296.595862][ T27] #6: ffff88807e870f28 (&mm->mmap_lock){++++}-{3:3}, at: mpol_rebind_mm+0x33/0x2c0 [ 1296.605604][ T27] 1 lock held by rm/15003: [ 1296.610174][ T27] #0: ffff88801eb21628 (&mm->mmap_lock){++++}-{3:3}, at: setup_arg_pages+0x2db/0xa20 [ 1296.619893][ T27] [ 1296.622238][ T27] ============================================= [ 1296.622238][ T27] [ 1296.630772][ T27] NMI backtrace for cpu 1 [ 1296.635114][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1296.642316][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.652387][ T27] Call Trace: [ 1296.655709][ T27] [ 1296.658632][ T27] dump_stack_lvl+0x168/0x230 [ 1296.663315][ T27] ? show_regs_print_info+0x20/0x20 [ 1296.668516][ T27] ? load_image+0x3b0/0x3b0 [ 1296.673024][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 1296.678243][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 1296.683177][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1296.689341][ T27] ? _printk+0xcc/0x110 [ 1296.693515][ T27] ? load_image+0x3b0/0x3b0 [ 1296.698023][ T27] ? load_image+0x3b0/0x3b0 [ 1296.702532][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1296.708626][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1296.714713][ T27] watchdog+0xe0f/0xe50 [ 1296.719003][ T27] kthread+0x436/0x520 [ 1296.723098][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1296.728129][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1296.732715][ T27] ret_from_fork+0x1f/0x30 [ 1296.737149][ T27] [ 1296.740654][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1296.745907][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 1296.747180][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1296.762022][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1296.769215][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.779463][ T27] Call Trace: [ 1296.782758][ T27] [ 1296.785687][ T27] dump_stack_lvl+0x168/0x230 [ 1296.790386][ T27] ? show_regs_print_info+0x20/0x20 [ 1296.795593][ T27] ? load_image+0x3b0/0x3b0 [ 1296.800110][ T27] panic+0x2c9/0x7f0 [ 1296.804021][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1296.809666][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1296.814188][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1296.820462][ T27] watchdog+0xe4e/0xe50 [ 1296.824645][ T27] kthread+0x436/0x520 [ 1296.828716][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1296.833745][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1296.838337][ T27] ret_from_fork+0x1f/0x30 [ 1296.842767][ T27] [ 1296.846081][ T27] Kernel Offset: disabled [ 1296.850421][ T27] Rebooting in 86400 seconds..