last executing test programs: 6.092638792s ago: executing program 2 (id=241): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5.502055204s ago: executing program 1 (id=244): ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) 4.481417254s ago: executing program 2 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x3, 0xc9, "3f0ff8625acb6740"}}}}, 0xf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x40, r4, 0x801, 0x48e, 0x2000000, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x40}}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x244002) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x5}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x2008c014) 3.145509292s ago: executing program 2 (id=248): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000a8f000/0x3000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) 3.095333827s ago: executing program 0 (id=249): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 2.758639256s ago: executing program 0 (id=250): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x0, 0x2ffff, 0x100, 0xd2f, 0x2, 0x1, 0x0, 0x10001, 0x4, 0x101, 0x2, 0x2, 0x0, 0x0, 0x0}) 2.665401124s ago: executing program 3 (id=251): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) 2.584474432s ago: executing program 0 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmdt(0x0) 2.571521623s ago: executing program 2 (id=253): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f00000001c0)={0x1407, 0x3, 0x1}, 0x14, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 2.49755775s ago: executing program 3 (id=254): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) 765.859293ms ago: executing program 0 (id=255): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 730.454556ms ago: executing program 1 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) 680.93152ms ago: executing program 3 (id=257): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 670.919561ms ago: executing program 2 (id=258): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) unshare(0x6020400) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 472.347538ms ago: executing program 1 (id=259): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000040)=0xbc) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0xd}, &(0x7f0000000100)=0x8) 401.410185ms ago: executing program 0 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000100), 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 390.650036ms ago: executing program 2 (id=261): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 371.619288ms ago: executing program 3 (id=262): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r1, 0xffffe000) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 277.487206ms ago: executing program 1 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0x0, 0x14c}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100"], 0x20}}, 0x0) 256.241527ms ago: executing program 0 (id=264): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r1, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 224.44011ms ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 101.456921ms ago: executing program 1 (id=266): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 74.620334ms ago: executing program 1 (id=267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0xc080) 0s ago: executing program 3 (id=268): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x6, 0x0, 0x6, 0x0, 0x2006, 0x0, 0x290, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x104}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x3b00, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 63.458902][ T5753] cgroup: Unknown subsys name 'net' [ 63.609835][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.988377][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.329955][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.340264][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.344683][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.348752][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.356815][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.361772][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.374379][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.381003][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.383203][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.390513][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.397814][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.411061][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.414806][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.419282][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.434670][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.441866][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.443434][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.459640][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.463027][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.475359][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.482838][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.492172][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.500606][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.512374][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.934930][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.980123][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 68.013009][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 68.077627][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 68.171033][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.178335][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.186315][ T5768] bridge_slave_0: entered allmulticast mode [ 68.193029][ T5768] bridge_slave_0: entered promiscuous mode [ 68.201775][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.209069][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.216619][ T5770] bridge_slave_0: entered allmulticast mode [ 68.223198][ T5770] bridge_slave_0: entered promiscuous mode [ 68.242185][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.249348][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.256741][ T5768] bridge_slave_1: entered allmulticast mode [ 68.263372][ T5768] bridge_slave_1: entered promiscuous mode [ 68.270591][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.277971][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.285250][ T5770] bridge_slave_1: entered allmulticast mode [ 68.291859][ T5770] bridge_slave_1: entered promiscuous mode [ 68.362993][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.370791][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.378325][ T5763] bridge_slave_0: entered allmulticast mode [ 68.386550][ T5763] bridge_slave_0: entered promiscuous mode [ 68.414945][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.427015][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.436484][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.443576][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.452498][ T5763] bridge_slave_1: entered allmulticast mode [ 68.459181][ T5763] bridge_slave_1: entered promiscuous mode [ 68.477384][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.485804][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.492921][ T5764] bridge_slave_0: entered allmulticast mode [ 68.500352][ T5764] bridge_slave_0: entered promiscuous mode [ 68.509263][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.521245][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.558109][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.565558][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.572664][ T5764] bridge_slave_1: entered allmulticast mode [ 68.580150][ T5764] bridge_slave_1: entered promiscuous mode [ 68.600237][ T5770] team0: Port device team_slave_0 added [ 68.608223][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.622048][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.650927][ T5770] team0: Port device team_slave_1 added [ 68.690129][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.702543][ T5768] team0: Port device team_slave_0 added [ 68.711379][ T5768] team0: Port device team_slave_1 added [ 68.740170][ T5763] team0: Port device team_slave_0 added [ 68.749220][ T5763] team0: Port device team_slave_1 added [ 68.756626][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.785307][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.792264][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.818874][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.868568][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.876513][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.902470][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.929906][ T5764] team0: Port device team_slave_0 added [ 68.938506][ T5764] team0: Port device team_slave_1 added [ 68.944955][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.951913][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.978236][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.990944][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.997957][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.023888][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.036760][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.043812][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.069966][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.103821][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.111041][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.137057][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.158779][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.165935][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.191891][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.204148][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.211093][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.237770][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.282055][ T5770] hsr_slave_0: entered promiscuous mode [ 69.288708][ T5770] hsr_slave_1: entered promiscuous mode [ 69.340219][ T5768] hsr_slave_0: entered promiscuous mode [ 69.348577][ T5768] hsr_slave_1: entered promiscuous mode [ 69.355457][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.363198][ T5768] Cannot create hsr debugfs directory [ 69.381569][ T5763] hsr_slave_0: entered promiscuous mode [ 69.388284][ T5763] hsr_slave_1: entered promiscuous mode [ 69.394875][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.402431][ T5763] Cannot create hsr debugfs directory [ 69.435307][ T5764] hsr_slave_0: entered promiscuous mode [ 69.441564][ T5764] hsr_slave_1: entered promiscuous mode [ 69.449230][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.456949][ T5764] Cannot create hsr debugfs directory [ 69.525836][ T5769] Bluetooth: hci2: command tx timeout [ 69.534066][ T5769] Bluetooth: hci0: command tx timeout [ 69.604201][ T5769] Bluetooth: hci1: command tx timeout [ 69.615183][ T5769] Bluetooth: hci3: command tx timeout [ 69.815960][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.830544][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.840459][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.850141][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.899976][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.910103][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.921865][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.955160][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.047737][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.061371][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.101565][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.111479][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.157291][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.170085][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.180807][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.190195][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.271959][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.309232][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.333243][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.379276][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.388812][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.396198][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.407008][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.414168][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.440520][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.447664][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.483144][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.490314][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.537517][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.562332][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.611049][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.618246][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.648986][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.663319][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.670515][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.743198][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.815242][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.822403][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.849800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.857034][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.909088][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.063329][ T5770] veth0_vlan: entered promiscuous mode [ 71.090936][ T5770] veth1_vlan: entered promiscuous mode [ 71.133329][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.190140][ T5770] veth0_macvtap: entered promiscuous mode [ 71.201241][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.217321][ T5770] veth1_macvtap: entered promiscuous mode [ 71.270554][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.286993][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.319129][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.330113][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.340000][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.349242][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.362328][ T5763] veth0_vlan: entered promiscuous mode [ 71.396945][ T5763] veth1_vlan: entered promiscuous mode [ 71.440985][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.519531][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.538769][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.541044][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.545999][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556234][ T5768] veth0_vlan: entered promiscuous mode [ 71.602026][ T5763] veth0_macvtap: entered promiscuous mode [ 71.610284][ T5769] Bluetooth: hci0: command tx timeout [ 71.614802][ T5773] Bluetooth: hci2: command tx timeout [ 71.623236][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.634338][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.647642][ T5768] veth1_vlan: entered promiscuous mode [ 71.660753][ T5763] veth1_macvtap: entered promiscuous mode [ 71.671221][ T5764] veth0_vlan: entered promiscuous mode [ 71.684666][ T5773] Bluetooth: hci3: command tx timeout [ 71.684839][ T5769] Bluetooth: hci1: command tx timeout [ 71.726162][ T5764] veth1_vlan: entered promiscuous mode [ 71.777671][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.791544][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804889][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.840534][ T5768] veth0_macvtap: entered promiscuous mode [ 71.852326][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.870217][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.883856][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.898044][ T5768] veth1_macvtap: entered promiscuous mode [ 71.926266][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942483][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.951666][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.967123][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.048775][ T5764] veth0_macvtap: entered promiscuous mode [ 72.110419][ T5764] veth1_macvtap: entered promiscuous mode [ 72.126416][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.138513][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.148661][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.159166][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.231110][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.490770][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.585124][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.642433][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.681464][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.737177][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.827769][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.847100][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.857013][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.867470][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.874123][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.884287][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.895894][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.913161][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.918460][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.943388][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.953405][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.965316][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.974308][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.031006][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.043605][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.063802][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.081217][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.092030][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.110947][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.123603][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.138071][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.151507][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.190496][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.199675][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.225731][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.293115][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685620][ T5769] Bluetooth: hci2: command tx timeout [ 73.691516][ T5769] Bluetooth: hci0: command tx timeout [ 73.766791][ T5769] Bluetooth: hci3: command tx timeout [ 73.770559][ T5773] Bluetooth: hci1: command tx timeout [ 73.976880][ T2112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.000752][ T2112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.003782][ T5868] overlayfs: failed to clone lowerpath [ 74.138039][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.168167][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.228216][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.241911][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.256216][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 74.315644][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.332601][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.445782][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.777390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.790907][ T5885] Error parsing options; rc = [-22] [ 74.826890][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 74.880195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.983414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.993627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.994675][ T5836] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.064235][ T5836] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.087212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.096650][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.105934][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.804135][ T5773] Bluetooth: hci0: command tx timeout [ 75.809789][ T5773] Bluetooth: hci2: command tx timeout [ 75.845141][ T5769] Bluetooth: hci3: command tx timeout [ 75.850727][ T5773] Bluetooth: hci1: command tx timeout [ 75.868350][ T5836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.878226][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.891556][ T5836] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.910426][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.945308][ T5836] usb 3-1: config 0 descriptor?? [ 76.044567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 76.187176][ T5836] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.256390][ T5836] usb 3-1: USB disconnect, device number 2 [ 76.269518][ T5836] usblp0: removed [ 76.874471][ T5836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.354378][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 77.362422][ T5836] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 77.364759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.407185][ T5836] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 77.434391][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 77.470270][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.494241][ T5836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.521953][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.553632][ T5836] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 77.578289][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.635282][ T5836] usb 3-1: config 0 descriptor?? [ 77.651656][ T5836] usb 3-1: can't set config #0, error -71 [ 77.672642][ T5836] usb 3-1: USB disconnect, device number 3 [ 77.904377][ T5906] binder_alloc: 5904: binder_alloc_buf, no vma [ 78.734635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.744228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.214627][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 81.225959][ T5942] x_tables: ip_tables: udp match: only valid for protocol 17 [ 81.254100][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.454112][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 81.468453][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.478766][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.488988][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.507830][ T5836] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.518176][ T5836] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.527062][ T5836] usb 2-1: Manufacturer: syz [ 81.541531][ T5836] usb 2-1: config 0 descriptor?? [ 81.651936][ T5952] Bluetooth: MGMT ver 1.22 [ 81.657439][ T5952] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 81.761227][ T5874] usb 2-1: USB disconnect, device number 2 [ 81.772051][ T1187] cfg80211: failed to load regulatory.db [ 83.892516][ T5986] ubi31: attaching mtd0 [ 83.903835][ T5986] ubi31 error: ubi_attach_mtd_dev: bad VID header (134217728) or data offsets (134217792) [ 84.043039][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 84.769979][ T6005] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.529678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.063550][ T6023] hub 6-0:1.0: USB hub found [ 88.069767][ T6023] hub 6-0:1.0: 1 port detected [ 88.774365][ T5755] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.814633][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.901193][ T6031] syz.2.56[6031]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.014080][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 89.110173][ T5755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.139622][ T5755] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.471226][ T5755] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.483875][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.493361][ T5755] usb 1-1: Product: syz [ 89.575807][ T5755] usb 1-1: Manufacturer: syz [ 89.583399][ T5755] usb 1-1: SerialNumber: syz [ 90.036836][ T5755] usb 1-1: 0:2 : does not exist [ 90.463064][ T5755] usb 1-1: USB disconnect, device number 2 [ 90.770433][ T28] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 90.785009][ T28] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 90.886958][ T28] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 91.048079][ T6047] process 'syz.2.64' launched '/dev/fd/-1' with NULL argv: empty string added [ 91.169620][ T6047] netlink: 300 bytes leftover after parsing attributes in process `syz.2.64'. [ 91.345097][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.416811][ T6049] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 91.548924][ T787] usb 2-1: USB disconnect, device number 3 [ 91.813932][ T6061] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.115627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f3dc00: rx timeout, send abort [ 92.624980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f3dc00: abort rx timeout. Force session deactivation [ 93.883958][ C0] sched: RT throttling activated [ 94.238259][ T1187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.436863][ T1187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.493930][ T1187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.525281][ T1187] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 94.548425][ T1187] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 94.585968][ T1187] usb 3-1: config 1 interface 1 has no altsetting 0 [ 94.598661][ T1187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.618417][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.635382][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.636980][ T1187] usb 3-1: Product: syz [ 94.654412][ T1187] usb 3-1: Manufacturer: syz [ 94.659267][ T1187] usb 3-1: SerialNumber: syz [ 94.673750][ T1187] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 94.752435][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.956756][ T5861] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 94.965902][ T5861] usb 4-1: config 0 has no interface number 0 [ 94.972109][ T5861] usb 4-1: config 0 interface 46 altsetting 0 has an invalid endpoint with address 0xBC, skipping [ 94.983589][ T5861] usb 4-1: config 0 interface 46 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.006436][ T5861] usb 4-1: New USB device found, idVendor=0f11, idProduct=1101, bcdDevice=e4.dc [ 95.015616][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.672951][ T5861] usb 4-1: Product: syz [ 95.684226][ T5861] usb 4-1: Manufacturer: syz [ 95.693996][ T5861] usb 4-1: SerialNumber: syz [ 95.776804][ T5861] usb 4-1: config 0 descriptor?? [ 95.864202][ T5861] ldusb 4-1:0.46: Interrupt in endpoint not found [ 95.982217][ T6113] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 96.025396][ T6113] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.064974][ T5861] usb 4-1: USB disconnect, device number 2 [ 96.117462][ T6113] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.326455][ T6120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.454052][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.656980][ T787] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 96.679857][ T787] usb 1-1: config 0 has no interface number 0 [ 96.814775][ T787] usb 1-1: config 0 interface 238 has no altsetting 0 [ 96.826909][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=76.30 [ 96.836344][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.849749][ T787] usb 1-1: Product: syz [ 96.855564][ T787] usb 1-1: Manufacturer: syz [ 97.376470][ T787] usb 1-1: SerialNumber: syz [ 97.387118][ T787] usb 1-1: config 0 descriptor?? [ 97.415853][ T787] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 97.425940][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 97.439958][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.451194][ T787] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 97.463501][ T787] usb 1-1: media controller created [ 97.469389][ T787] dvb-usb: bulk message failed: -22 (5/0) [ 97.482050][ T787] dvb-usb: MAC address reading failed. [ 97.509334][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.586413][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 97.592454][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 97.599287][ T787] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 97.624298][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 97.653879][ T787] dvb-usb: schedule remote query interval to 100 msecs. [ 97.681198][ T787] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 97.762622][ T787] usb 1-1: USB disconnect, device number 3 [ 97.989443][ T787] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 98.026064][ T23] usb 3-1: USB disconnect, device number 4 [ 100.846003][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.512505][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.806469][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 104.907383][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.044955][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.153024][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.384411][ T23] usb 2-1: config 0 descriptor?? [ 105.518009][ T23] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 106.804199][ T27] audit: type=1326 audit(1767854395.868:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d598f749 code=0x0 [ 106.853086][ T27] audit: type=1326 audit(1767854395.918:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.0.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fb9d598f749 code=0x0 [ 106.944566][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 106.956150][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 107.429292][ T23] usb 2-1: USB disconnect, device number 4 [ 107.750702][ T6235] Process accounting resumed [ 108.869419][ T27] audit: type=1326 audit(1767854397.938:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2bfb8f749 code=0x0 [ 110.414011][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 110.532891][ T5755] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.584067][ T5861] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.742805][ T5755] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 110.752139][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.762109][ T5755] usb 2-1: config 0 descriptor?? [ 110.775751][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.777129][ T5755] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 110.805995][ T5861] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.817424][ T5861] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.829491][ T5861] usb 4-1: Manufacturer: syz [ 110.842526][ T5861] usb 4-1: config 0 descriptor?? [ 110.978406][ T5861] usb 2-1: USB disconnect, device number 5 [ 111.014142][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.069937][ T787] usb 4-1: USB disconnect, device number 3 [ 111.204923][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 111.214929][ T23] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 111.225453][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.235281][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.926415][ T6297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.951176][ T6297] kvm: pic: non byte read [ 111.956328][ T6297] kvm: pic: level sensitive irq not supported [ 111.957366][ T6297] kvm: pic: non byte read [ 111.969331][ T6297] kvm: pic: level sensitive irq not supported [ 111.969383][ T6297] kvm: pic: non byte read [ 111.980668][ T6297] kvm: pic: level sensitive irq not supported [ 111.981509][ T6297] kvm: pic: non byte read [ 113.718930][ T5755] usb 1-1: USB disconnect, device number 4 [ 114.637821][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 115.379916][ T27] audit: type=1800 audit(1767854404.448:5): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.155" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 115.451597][ T6327] mmap: syz.2.153 (6327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.684514][ T5755] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.087896][ T5755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.107390][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.128259][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.165740][ T5755] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 117.189117][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.230704][ T5755] usb 2-1: config 0 descriptor?? [ 117.448695][ T5861] usb 2-1: USB disconnect, device number 6 [ 117.643733][ T6346] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 117.651731][ T6346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.162'. [ 117.663312][ T6346] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 118.155461][ T6358] Zero length message leads to an empty skb [ 118.290083][ T6363] trusted_key: syz.1.166 sent an empty control message without MSG_MORE. [ 118.544324][ T5755] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.862000][ T5861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.870410][ T5755] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 119.894026][ T5755] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 119.910627][ T5755] usb 1-1: config 1 interface 0 has no altsetting 0 [ 119.924143][ T5773] Bluetooth: hci0: command 0x0401 tx timeout [ 119.955680][ T5755] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 120.004233][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.017880][ T5755] usb 1-1: Product: syz [ 120.022075][ T5755] usb 1-1: Manufacturer: syz [ 120.037134][ T5755] usb 1-1: SerialNumber: syz [ 120.056700][ T6362] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.064635][ T6362] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.084029][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 120.100729][ T5861] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 120.119262][ T5861] usb 2-1: config 0 has no interface number 0 [ 120.134005][ T5861] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 120.156537][ T5861] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 120.174877][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.184368][ T5861] usb 2-1: Product: syz [ 120.188566][ T5861] usb 2-1: Manufacturer: syz [ 120.203305][ T5861] usb 2-1: SerialNumber: syz [ 120.215601][ T5861] usb 2-1: config 0 descriptor?? [ 120.352484][ T6372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 120.862744][ T6372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 121.415815][ T5755] rtl8150 1-1:1.0: couldn't reset the device [ 121.422155][ T5755] rtl8150: probe of 1-1:1.0 failed with error -5 [ 121.454216][ T5755] usb 1-1: USB disconnect, device number 5 [ 122.562550][ T6413] cgroup: release_agent respecified [ 124.806935][ T5861] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 124.838717][ T5861] asix: probe of 2-1:0.188 failed with error -71 [ 124.877538][ T5861] usb 2-1: USB disconnect, device number 7 [ 126.015060][ T5836] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.795361][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.896850][ T5836] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.984047][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.026613][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 127.042835][ T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.052596][ T5836] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.070385][ T5836] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.080165][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.094100][ T5836] usb 1-1: Manufacturer: syz [ 127.142446][ T8] usb 4-1: config 0 descriptor?? [ 127.155564][ T5836] usb 1-1: config 0 descriptor?? [ 127.182541][ T6434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 128.057373][ T8] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 128.070452][ T5836] rc_core: IR keymap rc-hauppauge not found [ 128.085464][ T5836] Registered IR keymap rc-empty [ 128.091914][ T5836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 128.134493][ T5836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 128.139333][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 128.158168][ T6460] bond_slave_0: default FDB implementation only supports local addresses [ 128.252023][ T787] usb 4-1: USB disconnect, device number 4 [ 128.258229][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 5 [ 129.598862][ T27] audit: type=1326 audit(1767854417.848:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e598f749 code=0x7ffc0000 [ 129.625904][ T27] audit: type=1326 audit(1767854417.848:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e598f749 code=0x7ffc0000 [ 129.649868][ T27] audit: type=1326 audit(1767854417.858:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 129.661564][ T1187] usb 1-1: USB disconnect, device number 6 [ 129.704057][ T27] audit: type=1326 audit(1767854417.858:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 129.740454][ T6456] fido_id[6456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 129.757919][ T27] audit: type=1326 audit(1767854417.858:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 129.832586][ T27] audit: type=1326 audit(1767854417.868:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 129.994756][ T27] audit: type=1326 audit(1767854417.868:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 130.022843][ T27] audit: type=1326 audit(1767854417.868:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 130.796490][ T6476] capability: warning: `syz.1.205' uses 32-bit capabilities (legacy support in use) [ 130.855776][ T27] audit: type=1326 audit(1767854417.868:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 131.046411][ T27] audit: type=1326 audit(1767854417.868:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61e59c2005 code=0x7ffc0000 [ 132.765454][ T6487] warning: `syz.1.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.987723][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998149][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.449933][ T5861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.865091][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.949432][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 136.032423][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 136.113660][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 136.191418][ T5861] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 136.272047][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.353695][ T5861] usb 2-1: config 0 descriptor?? [ 136.653442][ T5861] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 137.007986][ T5861] hdpvr 2-1:0.0: device init failed [ 137.032605][ T5861] hdpvr: probe of 2-1:0.0 failed with error -12 [ 137.059337][ T5861] usb 2-1: USB disconnect, device number 8 [ 137.192950][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 137.246919][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 137.344695][ T6514] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.594315][ T5861] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.798603][ T5861] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 139.821746][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.850442][ T5861] usb 4-1: Product: syz [ 139.854041][ T5836] IPVS: starting estimator thread 0... [ 139.860549][ T5861] usb 4-1: Manufacturer: syz [ 139.874100][ T5861] usb 4-1: SerialNumber: syz [ 139.922028][ T5861] usb 4-1: config 0 descriptor?? [ 139.938625][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 139.954219][ T6537] IPVS: using max 20 ests per chain, 48000 per kthread [ 139.987272][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.140955][ T6531] dvb-usb: bulk message failed: -22 (7/0) [ 140.157381][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.004119][ T5861] usb 4-1: media controller created [ 141.038271][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.228311][ T5861] DVB: Unable to find symbol mt352_attach() [ 141.578911][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 141.671685][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 141.831754][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 141.944424][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 141.961730][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 141.990175][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 142.051200][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 142.077605][ T5861] usb 4-1: USB disconnect, device number 5 [ 142.213812][ T6553] netlink: 104 bytes leftover after parsing attributes in process `syz.0.230'. [ 142.265135][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 143.566782][ T5773] Bluetooth: hci0: command 0x0401 tx timeout [ 143.574444][ T6563] tty tty27: ldisc open failed (-12), clearing slot 26 [ 143.675961][ T6544] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 145.966848][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 146.174264][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.280254][ T6580] bond1: entered allmulticast mode [ 146.956064][ T6586] fuse: Unknown parameter 'smackfstransmute' [ 147.094130][ T5755] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.274529][ T5755] usb 4-1: Using ep0 maxpacket: 16 [ 147.348983][ T5755] usb 4-1: config 0 has an invalid interface number: 129 but max is 0 [ 147.654349][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.697966][ T5755] usb 4-1: config 0 has no interface number 0 [ 148.574458][ T5755] usb 4-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.581359][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 148.665832][ T6609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.246'. [ 149.526084][ T5769] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 149.535775][ T5769] Bluetooth: hci2: Injecting HCI hardware error event [ 149.544247][ T5773] Bluetooth: hci2: hardware error 0x00 [ 150.209624][ T5755] usb 4-1: string descriptor 0 read error: -71 [ 150.233263][ T5755] usb 4-1: New USB device found, idVendor=19d2, idProduct=1165, bcdDevice=c1.d5 [ 150.252386][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.280425][ T5755] usb 4-1: config 0 descriptor?? [ 150.310403][ T5755] usb 4-1: can't set config #0, error -71 [ 150.333636][ T5755] usb 4-1: USB disconnect, device number 6 [ 151.479555][ T6630] random: crng reseeded on system resumption [ 151.604032][ T5773] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 152.389536][ T6637] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 152.421868][ T6637] VFS: Can't find a romfs filesystem on dev nullb0. [ 152.421868][ T6637] [ 152.977249][ T6648] ------------[ cut here ]------------ [ 152.982804][ T6648] WARNING: CPU: 1 PID: 6648 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 152.991850][ T6648] Modules linked in: [ 152.995835][ T6648] CPU: 1 PID: 6648 Comm: syz.2.261 Not tainted syzkaller #0 [ 153.003145][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.013854][ T6648] RIP: 0010:__alloc_pages+0x2de/0x460 [ 153.019398][ T6648] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 153.039104][ T6648] RSP: 0018:ffffc900197afa00 EFLAGS: 00010246 [ 153.045418][ T6648] RAX: ffffc900197afa00 RBX: 1ffff920032f5f44 RCX: 0000000000000000 [ 153.053402][ T6648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900197afa68 [ 153.061631][ T6648] RBP: ffffc900197afb00 R08: ffffc900197afa67 R09: 0000000000000000 [ 153.069644][ T6648] R10: ffffc900197afa40 R11: fffff520032f5f4d R12: 000000000000000f [ 153.077653][ T6648] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 153.085683][ T6648] FS: 00007f61e67ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 153.094925][ T6648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.101526][ T6648] CR2: 000000110c4293ac CR3: 00000000733e2000 CR4: 00000000003506e0 [ 153.109542][ T6648] Call Trace: [ 153.113259][ T6648] [ 153.116493][ T6648] ? zone_statistics+0x170/0x170 [ 153.121466][ T6648] ? __might_fault+0xaa/0x120 [ 153.126244][ T6648] ? __lock_acquire+0x7c80/0x7c80 [ 153.131284][ T6648] __kmalloc_large_node+0x8c/0x1e0 [ 153.136446][ T6648] ? raw_ioctl+0x19b0/0x3b70 [ 153.141046][ T6648] __kmalloc+0x111/0x240 [ 153.145353][ T6648] raw_ioctl+0x19b0/0x3b70 [ 153.149784][ T6648] ? tomoyo_path_number_perm+0x477/0x590 [ 153.155485][ T6648] ? __kmem_cache_free+0xba/0x1f0 [ 153.160532][ T6648] ? tomoyo_path_number_perm+0x4dc/0x590 [ 153.166217][ T6648] ? tomoyo_path_number_perm+0x1ba/0x590 [ 153.171866][ T6648] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 153.177372][ T6648] ? make_qualifier+0x250/0x250 [ 153.182276][ T6648] ? __fget_files+0x28/0x4d0 [ 153.186969][ T6648] ? bpf_lsm_file_ioctl+0x9/0x10 [ 153.191928][ T6648] ? security_file_ioctl+0x80/0xa0 [ 153.197889][ T6648] ? make_qualifier+0x250/0x250 [ 153.202760][ T6648] __se_sys_ioctl+0xfd/0x170 [ 153.207574][ T6648] do_syscall_64+0x55/0xb0 [ 153.212009][ T6648] ? clear_bhb_loop+0x40/0x90 [ 153.217559][ T6648] ? clear_bhb_loop+0x40/0x90 [ 153.222269][ T6648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.228593][ T6648] RIP: 0033:0x7f61e598f749 [ 153.233049][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.253111][ T6648] RSP: 002b:00007f61e67ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.261699][ T6648] RAX: ffffffffffffffda RBX: 00007f61e5be5fa0 RCX: 00007f61e598f749 [ 153.269735][ T6648] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 0000000000000003 [ 153.277747][ T6648] RBP: 00007f61e5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.286231][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.294258][ T6648] R13: 00007f61e5be6038 R14: 00007f61e5be5fa0 R15: 00007fff02ce62d8 [ 153.302260][ T6648] [ 153.305315][ T6648] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.312590][ T6648] CPU: 1 PID: 6648 Comm: syz.2.261 Not tainted syzkaller #0 [ 153.319876][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.329937][ T6648] Call Trace: [ 153.333222][ T6648] [ 153.336158][ T6648] dump_stack_lvl+0x16c/0x230 [ 153.340856][ T6648] ? show_regs_print_info+0x20/0x20 [ 153.346070][ T6648] ? load_image+0x3b0/0x3b0 [ 153.350593][ T6648] panic+0x2c0/0x710 [ 153.354506][ T6648] ? bpf_jit_dump+0xd0/0xd0 [ 153.359033][ T6648] __warn+0x2e0/0x470 [ 153.363019][ T6648] ? __alloc_pages+0x2de/0x460 [ 153.367794][ T6648] ? __alloc_pages+0x2de/0x460 [ 153.372562][ T6648] report_bug+0x2be/0x4f0 [ 153.376903][ T6648] ? __alloc_pages+0x2de/0x460 [ 153.381683][ T6648] ? __alloc_pages+0x2de/0x460 [ 153.386456][ T6648] ? __alloc_pages+0x2e0/0x460 [ 153.391224][ T6648] handle_bug+0xcf/0x120 [ 153.395472][ T6648] exc_invalid_op+0x1a/0x50 [ 153.399978][ T6648] asm_exc_invalid_op+0x1a/0x20 [ 153.404830][ T6648] RIP: 0010:__alloc_pages+0x2de/0x460 [ 153.410210][ T6648] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 153.429913][ T6648] RSP: 0018:ffffc900197afa00 EFLAGS: 00010246 [ 153.435992][ T6648] RAX: ffffc900197afa00 RBX: 1ffff920032f5f44 RCX: 0000000000000000 [ 153.443971][ T6648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900197afa68 [ 153.451945][ T6648] RBP: ffffc900197afb00 R08: ffffc900197afa67 R09: 0000000000000000 [ 153.459921][ T6648] R10: ffffc900197afa40 R11: fffff520032f5f4d R12: 000000000000000f [ 153.467896][ T6648] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 153.475891][ T6648] ? zone_statistics+0x170/0x170 [ 153.480851][ T6648] ? __might_fault+0xaa/0x120 [ 153.485531][ T6648] ? __lock_acquire+0x7c80/0x7c80 [ 153.490564][ T6648] __kmalloc_large_node+0x8c/0x1e0 [ 153.495688][ T6648] ? raw_ioctl+0x19b0/0x3b70 [ 153.500278][ T6648] __kmalloc+0x111/0x240 [ 153.504528][ T6648] raw_ioctl+0x19b0/0x3b70 [ 153.508947][ T6648] ? tomoyo_path_number_perm+0x477/0x590 [ 153.514590][ T6648] ? __kmem_cache_free+0xba/0x1f0 [ 153.519629][ T6648] ? tomoyo_path_number_perm+0x4dc/0x590 [ 153.525279][ T6648] ? tomoyo_path_number_perm+0x1ba/0x590 [ 153.530925][ T6648] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 153.536394][ T6648] ? make_qualifier+0x250/0x250 [ 153.541278][ T6648] ? __fget_files+0x28/0x4d0 [ 153.545887][ T6648] ? bpf_lsm_file_ioctl+0x9/0x10 [ 153.549494][ T6659] netlink: del zone limit has 8 unknown bytes [ 153.556879][ T6648] ? security_file_ioctl+0x80/0xa0 [ 153.561999][ T6648] ? make_qualifier+0x250/0x250 [ 153.566850][ T6648] __se_sys_ioctl+0xfd/0x170 [ 153.571433][ T6648] do_syscall_64+0x55/0xb0 [ 153.575839][ T6648] ? clear_bhb_loop+0x40/0x90 [ 153.580505][ T6648] ? clear_bhb_loop+0x40/0x90 [ 153.585171][ T6648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.591059][ T6648] RIP: 0033:0x7f61e598f749 [ 153.595461][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.615055][ T6648] RSP: 002b:00007f61e67ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.623457][ T6648] RAX: ffffffffffffffda RBX: 00007f61e5be5fa0 RCX: 00007f61e598f749 [ 153.631417][ T6648] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 0000000000000003 [ 153.639378][ T6648] RBP: 00007f61e5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.647338][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.655295][ T6648] R13: 00007f61e5be6038 R14: 00007f61e5be5fa0 R15: 00007fff02ce62d8 [ 153.663268][ T6648] [ 153.666590][ T6648] Kernel Offset: disabled [ 153.670905][ T6648] Rebooting in 86400 seconds..