last executing test programs: 5.866610892s ago: executing program 0 (id=222): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xbb4, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='pcspkr', 0x6) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 4.880821322s ago: executing program 1 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (fail_nth: 6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 4.574348948s ago: executing program 3 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x80047456, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 3.952159474s ago: executing program 1 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/186, 0xba, 0x81) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20048040}, 0x4054) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f40)=""/92, 0x5c}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000600)={{0x60000, 0xdddd1000, 0xc, 0x1, 0xb, 0x8, 0xff, 0x80, 0x7, 0x5, 0x2, 0x2}, {0x50000, 0xc000, 0xc, 0x6, 0x9, 0x6, 0x1, 0x92, 0xcb, 0x6, 0xb, 0x74}, {0xb000, 0xeeef0000, 0xb, 0x7, 0x2, 0xf, 0x5, 0x3, 0x9, 0x1, 0x4, 0xf}, {0xe000, 0x2, 0xf, 0x7, 0x6b, 0x9, 0x80, 0xfb, 0x5, 0xff, 0x2, 0xb5}, {0x9000, 0xdddd1000, 0xf, 0xc9, 0xd, 0x2, 0x1, 0x3, 0x8, 0x9, 0x2, 0x6}, {0xa000, 0x73000, 0xd, 0x4, 0x0, 0xb, 0x6, 0xba, 0x5, 0x2, 0xfd, 0x9}, {0xe000, 0x6000, 0xe, 0xfc, 0xfc, 0x69, 0x9, 0x8, 0x80, 0x81, 0x8, 0x6a}, {0x2, 0xeeced000, 0x8, 0xb, 0x5, 0x81, 0xc0, 0x9, 0x8, 0xf8, 0xff, 0x3}, {0x3000, 0x4}, {0x54000, 0x5}, 0x20000011, 0x0, 0x5000, 0x40, 0x9, 0x2c01, 0x41000, [0xe, 0x8, 0x8, 0x9]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f2021"], 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0x0) 3.652665037s ago: executing program 3 (id=231): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$9p(0x0, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2a18005, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 2.982492912s ago: executing program 2 (id=232): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000040)={[0x0, 0x5]}, 0x8) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) r2 = socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@delqdisc={0x64, 0x25, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xffe0}, {0x2, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_RATE={0x6, 0x5, {0xff, 0xa1}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2.980638123s ago: executing program 1 (id=240): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="726561646f6e6c79b5", 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008000"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000070000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7040030a9644269b3c7d087efffffff0000000000e11f00"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.919651589s ago: executing program 1 (id=233): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x43}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 2.761856302s ago: executing program 3 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000140)}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 2.760499257s ago: executing program 3 (id=243): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$9p(0x0, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2a18005, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 2.371528116s ago: executing program 0 (id=235): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r1 = syz_open_procfs(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="3f0943016b49396ad7c5909357be63e03ca4d77e"]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000004c0)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x6, 0x800, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, 0x0, 0x2, 0x3}}}, 0x90) r3 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000800", @ANYRES32=0x0, @ANYBLOB="0100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="10000100000000002000010000000000"], 0x8c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 1.902737931s ago: executing program 1 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x300, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 1.851631996s ago: executing program 2 (id=237): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r2 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) openat$cachefiles(0xffffff9c, &(0x7f0000000240), 0x141240, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) r6 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.739304746s ago: executing program 2 (id=238): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r1, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x94ffb58ffa608d95) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x7}, {0x4}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x14, 0x18, 0x9, 0x2, 0x8, 0x2, 0x2}}, {0x8, 0x2, [0x806, 0x100]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r5, 0x0, 0x10d00, 0xf) 1.738544122s ago: executing program 3 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000d8dbdf25250000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.672115311s ago: executing program 3 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000050000008e480480000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x145}) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0xf}, 0x1, 0x0, 0x0, 0x24084801}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000002600010126bd7000fcffffff1d000000a4716e05e110c5fce32c000e80280007b2cd18b1925c84a67627ee6bc1c37a52800292d09be5b9cb3573c630"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.6422297s ago: executing program 2 (id=242): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000040)={[0x0, 0x5]}, 0x8) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) r2 = socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@delqdisc={0x64, 0x25, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0xffe0}, {0x2, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_RATE={0x6, 0x5, {0xff, 0xa1}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.624167569s ago: executing program 0 (id=244): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x501, 0x1e2}, 0x18) r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x107302, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xf9ffff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad43010000000000950000000000000005000000000000009500"], 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004a40), 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x412180, 0x0) read(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6e) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @msi={0x7, 0x40, 0x3, 0x1000}}]}) 900.538292ms ago: executing program 1 (id=245): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xbb4, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 622.707208ms ago: executing program 2 (id=246): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="726561646f6e6c79b5", 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) 590.491441ms ago: executing program 2 (id=247): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xbb4, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='pcspkr', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 292.304513ms ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/file\x00', 0x41, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setns(0xc9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0, 0x2, 0x3, 0x6}, {0xfff, 0x4, 0xf4, 0x6}, {0x800, 0x5c, 0xff, 0xfffff34d}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0xff, 0x5e, 0x4}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="eaff000000bc0000000000000000cd00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="746c6447231470f1914b40b857cea7b42d7b824a4ba7507de4bbd6d03e24366be72094391573262326a43d5ff47c30bda786e6c7821e14edcd0af3b7264f6bc1c92515482a017abd3af9c69a0741f8e20546088169d84e6f980796809aa2661e31204c9c93648763f62e6aad06819ec5f9e07754e0bf1c55de583ad983ac49b26d041e9723bea4549605dc8b3fda6cfbf930fa644715233df382e6292beefdecc1e9fb4a031ce2abb08ef002c766e6f39792cbaa1b286c573143a1fea5a6d4345e062847a63e18a283a31a4f431f7dab413b26b707c33467f3b91f6173dc6b65f3bad6de"], 0x26c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1000\x00', 0x5) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000018000106000000000000000002200000fe04000100000000080001006401010108000400ffe9ed1c5a0400000000000000ef3040086fd0892f4aba39f649f438d76b04f7a58153131d86329d3503d5424f4573fac73be2e47b9921b2363cc1aff216c72441994240b48e2617bf83", @ANYRES32=0x1, @ANYBLOB="06001500010000000c0016800800010000000000"], 0x40}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0x1001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x1}) 132.297578ms ago: executing program 0 (id=249): r0 = timerfd_create(0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0xc0045003, &(0x7f0000001100)) r2 = signalfd(r1, &(0x7f0000000140)={[0x6acc17d6, 0x7]}, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), 0x8) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r4}]}, 0x28}}, 0x0) r5 = syz_io_uring_setup(0x1895, &(0x7f00000003c0)={0x0, 0x854d, 0x1000, 0x1, 0x2b9}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000008c0)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd_index}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x7) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000040)) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7000d8dbdf25250000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 0s ago: executing program 0 (id=250): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2$9p(0x0, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2a18005, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2588' (ED25519) to the list of known hosts. [ 48.106903][ T5725] cgroup: Unknown subsys name 'net' [ 48.249963][ T5725] cgroup: Unknown subsys name 'cpuset' [ 48.255765][ T5725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.551908][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.865606][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.871423][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.876466][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.882251][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.883046][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.888217][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.888533][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.893973][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.894594][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.897297][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.900852][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.905362][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.906893][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.909903][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.913255][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.916922][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.919545][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.920750][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.922783][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.930869][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.499390][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.503385][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.507353][ T5745] bridge_slave_0: entered allmulticast mode [ 55.511384][ T5745] bridge_slave_0: entered promiscuous mode [ 55.515994][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.518753][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.521967][ T5745] bridge_slave_1: entered allmulticast mode [ 55.527502][ T5745] bridge_slave_1: entered promiscuous mode [ 55.595976][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.602884][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.679210][ T5745] team0: Port device team_slave_0 added [ 55.693201][ T5745] team0: Port device team_slave_1 added [ 55.765723][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.768825][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.779744][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.810659][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.813741][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.824660][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.995188][ T5745] hsr_slave_0: entered promiscuous mode [ 55.998949][ T5745] hsr_slave_1: entered promiscuous mode [ 56.012780][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.016126][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.019328][ T5754] bridge_slave_0: entered allmulticast mode [ 56.022924][ T5754] bridge_slave_0: entered promiscuous mode [ 56.027865][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.031776][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.034591][ T5749] bridge_slave_0: entered allmulticast mode [ 56.038741][ T5749] bridge_slave_0: entered promiscuous mode [ 56.065539][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.068708][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.073088][ T5754] bridge_slave_1: entered allmulticast mode [ 56.077524][ T5754] bridge_slave_1: entered promiscuous mode [ 56.092451][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.095751][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.098898][ T5749] bridge_slave_1: entered allmulticast mode [ 56.102869][ T5749] bridge_slave_1: entered promiscuous mode [ 56.200122][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.218942][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.227510][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.253638][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.282172][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.285304][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.288784][ T5756] bridge_slave_0: entered allmulticast mode [ 56.292802][ T5756] bridge_slave_0: entered promiscuous mode [ 56.323606][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.326876][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.330032][ T5756] bridge_slave_1: entered allmulticast mode [ 56.334063][ T5756] bridge_slave_1: entered promiscuous mode [ 56.370558][ T5754] team0: Port device team_slave_0 added [ 56.384733][ T5749] team0: Port device team_slave_0 added [ 56.392909][ T5754] team0: Port device team_slave_1 added [ 56.397860][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.403292][ T5749] team0: Port device team_slave_1 added [ 56.446748][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.484864][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.488284][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.498745][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.513452][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.515778][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.524907][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.535967][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.542759][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.553940][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.563097][ T5756] team0: Port device team_slave_0 added [ 56.576580][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.578772][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.589262][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.594739][ T5756] team0: Port device team_slave_1 added [ 56.623819][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.626744][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.637072][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.654888][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.659391][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.670170][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.700079][ T5749] hsr_slave_0: entered promiscuous mode [ 56.703313][ T5749] hsr_slave_1: entered promiscuous mode [ 56.706424][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 56.708895][ T5749] Cannot create hsr debugfs directory [ 56.742208][ T5754] hsr_slave_0: entered promiscuous mode [ 56.745229][ T5754] hsr_slave_1: entered promiscuous mode [ 56.748165][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 56.750571][ T5754] Cannot create hsr debugfs directory [ 56.821554][ T5756] hsr_slave_0: entered promiscuous mode [ 56.824823][ T5756] hsr_slave_1: entered promiscuous mode [ 56.827949][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 56.830434][ T5756] Cannot create hsr debugfs directory [ 56.931432][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.939664][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.947148][ T5747] Bluetooth: hci0: command tx timeout [ 56.977941][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.985512][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.016848][ T5747] Bluetooth: hci2: command tx timeout [ 57.017083][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.026349][ T5747] Bluetooth: hci3: command tx timeout [ 57.026508][ T5750] Bluetooth: hci1: command tx timeout [ 57.027061][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.046980][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.053946][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.183380][ T5756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.195516][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.199684][ T5756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.206923][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.210776][ T5756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.219155][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.223039][ T5756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.230965][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.305901][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.314856][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.329426][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.335969][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.340547][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.348174][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.353894][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.360362][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.370441][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.424380][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.442632][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.449315][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.453131][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.458481][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.462812][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.468560][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.471488][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.475662][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.489400][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.491829][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.513723][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.516342][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.552026][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.595784][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.609874][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.625239][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.627661][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.645773][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.648879][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.674596][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.693272][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.711793][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.714212][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.736991][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.741343][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.743943][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.759173][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.762334][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.784328][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.787549][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.859176][ T5754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.998575][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.025035][ T5745] veth0_vlan: entered promiscuous mode [ 58.032593][ T5745] veth1_vlan: entered promiscuous mode [ 58.042810][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.064139][ T5745] veth0_macvtap: entered promiscuous mode [ 58.074805][ T5745] veth1_macvtap: entered promiscuous mode [ 58.095448][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.105868][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.114506][ T5756] veth0_vlan: entered promiscuous mode [ 58.128038][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.138219][ T5756] veth1_vlan: entered promiscuous mode [ 58.142453][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.216636][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.220777][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.227981][ T5749] veth0_vlan: entered promiscuous mode [ 58.243265][ T5756] veth0_macvtap: entered promiscuous mode [ 58.251603][ T5756] veth1_macvtap: entered promiscuous mode [ 58.262596][ T5749] veth1_vlan: entered promiscuous mode [ 58.267562][ T5616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.273763][ T5754] veth0_vlan: entered promiscuous mode [ 58.281167][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.284120][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.295123][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.304674][ T5754] veth1_vlan: entered promiscuous mode [ 58.315886][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.331666][ T5749] veth0_macvtap: entered promiscuous mode [ 58.331710][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.349600][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.353027][ T5749] veth1_macvtap: entered promiscuous mode [ 58.360097][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.368467][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.385867][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.395437][ T5754] veth0_macvtap: entered promiscuous mode [ 58.409602][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.424211][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.429183][ T5754] veth1_macvtap: entered promiscuous mode [ 58.459511][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.460582][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.462675][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.475135][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.495989][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.500735][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.506562][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.517203][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.527658][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.559198][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.576567][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.662997][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.669579][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.745212][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.750369][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.751766][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.757798][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.778243][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.778399][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.786865][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.790838][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.795228][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.803387][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.836532][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.847033][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.849919][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.948034][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.968858][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.973421][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.978163][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.981948][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.041202][ T5750] Bluetooth: hci0: command tx timeout [ 59.098250][ T5750] Bluetooth: hci3: command tx timeout [ 59.101871][ T5750] Bluetooth: hci2: command tx timeout [ 59.108214][ T5750] Bluetooth: hci1: command tx timeout [ 59.127992][ T5911] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.328497][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.334158][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.339352][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 60.009195][ T5911] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 60.060981][ T5911] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 60.064808][ T5911] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 60.068681][ T5911] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 60.080229][ T5911] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 60.444717][ T5911] pci 0000:00:01.0: Adding to iommu group 1 [ 60.495586][ T5911] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 60.498515][ T5911] pci 0000:00:01.0: vgaarb: bridge control possible [ 60.501263][ T5911] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 60.778070][ T5911] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 60.794002][ T5911] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 60.828996][ T5911] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 60.949439][ T5911] [drm] Found bochs VGA, ID 0xb0c5. [ 60.953352][ T5911] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 61.086112][ T5911] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 61.102324][ T5750] Bluetooth: hci0: command tx timeout [ 61.187718][ T5750] Bluetooth: hci1: command tx timeout [ 61.191069][ T5750] Bluetooth: hci2: command tx timeout [ 61.194034][ T5750] Bluetooth: hci3: command tx timeout [ 61.350318][ T5911] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 61.656528][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 61.660964][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.186583][ T5747] Bluetooth: hci0: command tx timeout [ 63.239941][ T5952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.261734][ T1350] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.286509][ T5752] Bluetooth: hci2: command tx timeout [ 63.286525][ T5750] Bluetooth: hci1: command tx timeout [ 63.291715][ T5747] Bluetooth: hci3: command tx timeout [ 63.294051][ T5963] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 63.421807][ T1350] usb 6-1: config 0 has no interfaces? [ 63.424931][ T1350] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 63.429331][ T1350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.457047][ T1350] usb 6-1: config 0 descriptor?? [ 63.780408][ T5841] usb 6-1: USB disconnect, device number 2 [ 63.837458][ T5958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11'. [ 63.992403][ T42] audit: type=1800 audit(1785944468.340:2): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14" name="memory_backed" dev="configfs" ino=10658 res=0 errno=0 [ 64.000699][ T42] audit: type=1800 audit(1785944468.340:3): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14" name="zoned" dev="configfs" ino=10659 res=0 errno=0 [ 64.001151][ T5973] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 64.012957][ T5973] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14'. [ 64.015851][ T5973] netlink: 'syz.0.14': attribute type 2 has an invalid length. [ 64.018503][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 64.047340][ T42] audit: type=1800 audit(1785944468.400:4): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14" name="power" dev="configfs" ino=10665 res=0 errno=0 [ 64.057170][ T5973] null_blk: my_zoned_dev: using native zone append [ 64.115470][ T5973] null_blk: disk my_zoned_dev created [ 64.336100][ T5981] 9p: Bad value for 'wfdno' [ 64.422846][ T5981] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 64.448538][ T5981] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 64.451841][ T5981] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 64.454951][ T5981] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 64.458657][ T5981] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 64.543167][ T5981] pci 0000:00:01.0: Adding to iommu group 1 [ 64.596024][ T5981] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 64.598275][ T5981] pci 0000:00:01.0: vgaarb: bridge control possible [ 64.600284][ T5981] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 64.620282][ T5981] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 64.623412][ T5981] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 64.639111][ T5981] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 64.723665][ T5981] [drm] Found bochs VGA, ID 0xb0c5. [ 64.726613][ T5981] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 64.799590][ T5981] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 64.816617][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.969112][ T29] usb 8-1: config 0 has no interfaces? [ 64.971404][ T29] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 64.974792][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.982754][ T29] usb 8-1: config 0 descriptor?? [ 65.136173][ T5981] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 65.322305][ T29] usb 8-1: USB disconnect, device number 2 [ 65.379453][ T5987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 65.380015][ T42] audit: type=1804 audit(1785944469.730:5): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.20" name="/newroot/4/file1" dev="tmpfs" ino=41 res=1 errno=0 [ 65.542880][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 65.561635][ T6004] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 65.567701][ T6003] team0: Port device team_slave_0 removed [ 65.576747][ T6004] VFS: Can't find a romfs filesystem on dev nullb0. [ 65.576747][ T6004] [ 65.981245][ T6012] batman_adv: batadv0: Adding interface: veth0 [ 65.981958][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 65.983469][ T6012] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.994804][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 65.995148][ T6012] batman_adv: batadv0: Interface activated: veth0 [ 66.029808][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.035787][ T6013] bond1: (slave bond0): making interface the new active one [ 66.039872][ T6013] bond1: (slave bond0): Enslaving as an active interface with an up link [ 66.064802][ T6008] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 66.067807][ T6008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22'. [ 66.074494][ T6008] .`: renamed from bond0 (while UP) [ 66.086972][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.089750][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.094432][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.097858][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.101818][ T6014] batman_adv: batadv0: Interface deactivated: veth0 [ 66.104379][ T6014] batman_adv: batadv0: Removing interface: veth0 [ 66.124103][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 66.177980][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 66.576907][ T6022] process 'syz.0.25' launched './file0' with NULL argv: empty string added [ 66.753904][ T6024] geneve2: entered promiscuous mode [ 66.756310][ T6024] geneve2: entered allmulticast mode [ 66.904768][ T6028] team0: Port device team_slave_0 removed [ 67.216382][ T5901] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.261894][ T6030] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 67.310060][ T6030] socket: no more sockets [ 67.368015][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 67.372677][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.377609][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 67.381473][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 67.385370][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 67.388771][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.394921][ T5901] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 67.398861][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.401940][ T5901] usb 7-1: Product: syz [ 67.403418][ T5901] usb 7-1: Manufacturer: syz [ 67.404918][ T5901] usb 7-1: SerialNumber: syz [ 67.408339][ T5901] usb 7-1: config 0 descriptor?? [ 67.411780][ T6030] socket: no more sockets [ 67.421708][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 67.624229][ T847] usb 7-1: USB disconnect, device number 2 [ 67.846342][ T5901] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.999478][ T5901] usb 8-1: config 0 has no interfaces? [ 68.002855][ T5901] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 68.006736][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.015670][ T5901] usb 8-1: config 0 descriptor?? [ 68.273356][ T29] usb 8-1: USB disconnect, device number 3 [ 68.382360][ T6047] team0: Port device team_slave_0 removed [ 68.789988][ T6052] e1000e 0000:00:02.0 eth1: removed PHC [ 68.923097][ T6052] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 68.944587][ T6059] 9p: Bad value for 'rfdno' [ 69.736817][ T6072] Invalid ELF header magic: != ELF [ 69.748180][ T6072] ======================================================= [ 69.748180][ T6072] WARNING: The mand mount option has been deprecated and [ 69.748180][ T6072] and is ignored by this kernel. Remove the mand [ 69.748180][ T6072] option from the mount to silence this warning. [ 69.748180][ T6072] ======================================================= [ 70.357054][ T6090] kAFS: unable to lookup cell '/,cL' [ 70.432573][ T6090] binder: 6086:6090 ioctl c0506107 80000180 returned -22 [ 71.076394][ T4664] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.103634][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.109835][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.248509][ T4664] usb 8-1: config 0 has no interfaces? [ 71.256302][ T4664] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 71.267533][ T4664] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.281998][ T4664] usb 8-1: config 0 descriptor?? [ 71.563680][ T1489] usb 8-1: USB disconnect, device number 4 [ 71.637937][ T6103] __nla_validate_parse: 6 callbacks suppressed [ 71.637959][ T6103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.41'. [ 71.667806][ T6110] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 71.786841][ T40] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.968019][ T40] usb 6-1: config 0 has no interfaces? [ 71.991545][ T40] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 72.009753][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.070184][ T40] usb 6-1: config 0 descriptor?? [ 72.206325][ T5901] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.279393][ T5820] usb 6-1: USB disconnect, device number 3 [ 72.295009][ T6118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'. [ 72.366409][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 72.475974][ T6133] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.597185][ T5901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 72.600588][ T5901] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 72.606008][ T5901] usb 7-1: can't read configurations, error -71 [ 73.154728][ T6145] netlink: 9 bytes leftover after parsing attributes in process `syz.2.48'. [ 73.162674][ T6145] gretap0: entered promiscuous mode [ 73.258839][ T6146] netlink: 5 bytes leftover after parsing attributes in process `syz.2.48'. [ 73.262612][ T6146] 0{X: renamed from gretap0 [ 73.266546][ T6146] 0{X: left promiscuous mode [ 73.268658][ T6146] 0{X: entered allmulticast mode [ 73.272671][ T6146] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 73.306380][ T40] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.468597][ T40] usb 5-1: config 0 has no interfaces? [ 73.471099][ T40] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 73.474992][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.481057][ T40] usb 5-1: config 0 descriptor?? [ 73.750107][ T29] usb 5-1: USB disconnect, device number 2 [ 73.806990][ T6143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.47'. [ 74.016771][ T1350] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.168167][ T1350] usb 8-1: config 0 has no interfaces? [ 74.170722][ T1350] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 74.174535][ T1350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.180336][ T1350] usb 8-1: config 0 descriptor?? [ 74.486774][ T5901] usb 8-1: USB disconnect, device number 5 [ 74.548799][ T6152] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 75.390565][ T6165] netlink: Conntrack attr has 8 unknown bytes [ 75.392698][ T6165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.397722][ T6165] overlayfs: failed to resolve './file1': -2 [ 75.408889][ T6165] Bluetooth: (null): Invalid header checksum [ 75.756498][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.866337][ T1489] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.906421][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 75.910688][ T29] usb 7-1: config 1 has an invalid interface number: 31 but max is 3 [ 75.914240][ T29] usb 7-1: config 1 has an invalid interface number: 116 but max is 3 [ 75.917823][ T29] usb 7-1: config 1 has an invalid interface number: 46 but max is 3 [ 75.921302][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 75.925021][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 75.928862][ T29] usb 7-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 75.933176][ T29] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 75.937155][ T29] usb 7-1: config 1 has no interface number 0 [ 75.939712][ T29] usb 7-1: config 1 has no interface number 1 [ 75.942426][ T29] usb 7-1: config 1 has no interface number 2 [ 75.945100][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 75.949885][ T29] usb 7-1: config 1 interface 31 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 75.954533][ T29] usb 7-1: config 1 interface 31 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 75.959225][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 75.963902][ T29] usb 7-1: config 1 interface 31 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 75.968635][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 75.973803][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 75.978904][ T29] usb 7-1: config 1 interface 31 altsetting 12 has a duplicate endpoint with address 0x3, skipping [ 75.983875][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 75.989706][ T29] usb 7-1: config 1 interface 31 altsetting 12 has an endpoint descriptor with address 0x1F, changing to 0xF [ 75.995663][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0xF has an invalid bInterval 69, changing to 10 [ 76.000953][ T29] usb 7-1: config 1 interface 31 altsetting 12 endpoint 0xF has invalid maxpacket 26282, setting to 1024 [ 76.006413][ T29] usb 7-1: config 1 interface 31 altsetting 12 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 76.012161][ T29] usb 7-1: config 1 interface 116 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 76.016819][ T29] usb 7-1: config 1 interface 116 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 76.021419][ T29] usb 7-1: config 1 interface 116 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 76.025815][ T29] usb 7-1: config 1 interface 116 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 76.030904][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 76.035580][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 76.038123][ T1489] usb 6-1: config 0 has no interfaces? [ 76.040504][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 76.042614][ T1489] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 76.047406][ T29] usb 7-1: config 1 interface 46 altsetting 255 endpoint 0xB has invalid maxpacket 21477, setting to 64 [ 76.047433][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 76.047451][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 76.047469][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 76.047507][ T29] usb 7-1: config 1 interface 46 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 76.047527][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 76.047547][ T29] usb 7-1: config 1 interface 46 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 76.047568][ T29] usb 7-1: config 1 interface 46 altsetting 255 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 76.047592][ T29] usb 7-1: config 1 interface 31 has no altsetting 0 [ 76.047609][ T29] usb 7-1: config 1 interface 116 has no altsetting 0 [ 76.047625][ T29] usb 7-1: config 1 interface 46 has no altsetting 0 [ 76.049898][ T29] usb 7-1: Dual-Role OTG device on HNP port [ 76.053454][ T1489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.056164][ T1489] usb 6-1: config 0 descriptor?? [ 76.058638][ T29] usb 7-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=ba.56 [ 76.111542][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.114853][ T29] usb 7-1: Product: syz [ 76.116724][ T29] usb 7-1: Manufacturer: syz [ 76.118674][ T29] usb 7-1: SerialNumber: syz [ 76.127148][ T29] r8152-cfgselector 7-1: Unknown version 0x0000 [ 76.131925][ T6169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.256332][ T1350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.329055][ T5820] usb 6-1: USB disconnect, device number 4 [ 76.381194][ T6173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.54'. [ 76.408486][ T1350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.411654][ T1350] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 76.414708][ T1350] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 76.419451][ T1350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.431875][ T1350] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 76.442447][ T1350] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 76.764928][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.57'. [ 76.820221][ T6175] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 76.826185][ T6175] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 76.885056][ T6182] 9p: Bad value for 'wfdno' [ 76.892049][ T6175] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 76.935722][ T6175] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 77.131464][ T1489] usb 5-1: USB disconnect, device number 3 [ 77.146745][ T1489] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 77.151090][ T1489] spcp8x5 5-1:1.0: device disconnected [ 77.793987][ T6187] Zero length message leads to an empty skb [ 78.372586][ T29] r8152 7-1:1.46: Expected endpoints are not found [ 78.407680][ T29] r8152-cfgselector 7-1: USB disconnect, device number 5 [ 78.727024][ T1489] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.846330][ T1350] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.892519][ T1489] usb 5-1: config 0 has no interfaces? [ 78.895175][ T1489] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 78.899216][ T1489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.907629][ T1489] usb 5-1: config 0 descriptor?? [ 78.986318][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.007965][ T1350] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 79.012850][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.016706][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.021434][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.025512][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.029457][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.034282][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.041169][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.045182][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.050045][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.054192][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.058488][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.063283][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.067473][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.071508][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.076360][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.080452][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.084432][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.089253][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.094391][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.098386][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.103166][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.109308][ T1350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.113448][ T1350] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.118756][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 79.124662][ T1350] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.128968][ T1350] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.132639][ T1350] usb 6-1: Product: syz [ 79.134610][ T1350] usb 6-1: Manufacturer: syz [ 79.137062][ T1350] usb 6-1: SerialNumber: syz [ 79.140345][ T29] usb 7-1: config 0 has no interfaces? [ 79.142620][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 79.145830][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.147929][ T1350] usb 6-1: config 0 descriptor?? [ 79.152121][ T29] usb 7-1: config 0 descriptor?? [ 79.168293][ T1350] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.192665][ T5901] usb 5-1: USB disconnect, device number 4 [ 79.251892][ T6198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.61'. [ 79.407582][ T6205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.456606][ T5820] usb 7-1: USB disconnect, device number 6 [ 79.522090][ T6205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.540950][ T6208] netlink: 44 bytes leftover after parsing attributes in process `syz.2.63'. [ 79.643074][ T6205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.720364][ T6205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.836283][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.839036][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.846377][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.852055][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.890193][ T1489] usb 6-1: USB disconnect, device number 5 [ 79.909209][ T1489] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 80.076844][ T1134] ata1.00: exception Emask 0x0 SAct 0x80000 SErr 0x0 action 0x6 [ 80.082204][ T1134] ata1.00: waking up from sleep [ 80.091114][ T1134] ata1: hard resetting link [ 80.125037][ T6215] Bluetooth: MGMT ver 1.23 [ 80.420494][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 80.430098][ T1134] ata1.00: configured for UDMA/100 [ 80.432849][ T1134] ata1: EH complete [ 81.373217][ T55] cfg80211: failed to load regulatory.db [ 81.926400][ T847] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.006445][ T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.088276][ T847] usb 7-1: config 0 has no interfaces? [ 82.090813][ T847] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 82.094644][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.100453][ T847] usb 7-1: config 0 descriptor?? [ 82.168015][ T40] usb 6-1: config 0 has no interfaces? [ 82.170659][ T40] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 82.174522][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.182500][ T40] usb 6-1: config 0 descriptor?? [ 82.206361][ T5897] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.366166][ T55] usb 7-1: USB disconnect, device number 7 [ 82.370704][ T5897] usb 5-1: config 0 has no interfaces? [ 82.373834][ T5897] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 82.377772][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.383319][ T5897] usb 5-1: config 0 descriptor?? [ 82.422367][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.72'. [ 82.441256][ T5841] usb 6-1: USB disconnect, device number 6 [ 82.645595][ T5841] usb 5-1: USB disconnect, device number 5 [ 82.664441][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 82.669035][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 82.704493][ T6253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.75'. [ 83.192053][ T6258] alloc_netdev: Unable to allocate device with zero queues [ 83.402251][ T6268] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 83.407303][ T6268] VFS: Can't find a romfs filesystem on dev nullb0. [ 83.407303][ T6268] [ 84.496350][ T40] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.649207][ T40] usb 8-1: config 0 has no interfaces? [ 84.651584][ T40] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 84.657119][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.663241][ T40] usb 8-1: config 0 descriptor?? [ 84.954634][ T1350] usb 8-1: USB disconnect, device number 6 [ 85.267268][ T6273] netlink: 44 bytes leftover after parsing attributes in process `syz.3.79'. [ 85.965013][ T6285] socket: no more sockets [ 87.546424][ T6258] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 87.643219][ T6307] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.739349][ T6307] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.807979][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.809665][ T6312] syz_tun: entered allmulticast mode [ 87.810948][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.815338][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.818588][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.830295][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.837300][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.841986][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.844154][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.846896][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.850146][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.918309][ T1350] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 87.918309][ T1350] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 87.931598][ T6307] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.964778][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.974702][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.984738][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.990611][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.996906][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.999853][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.002847][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.011254][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.017147][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.021964][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.033448][ T6307] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.356359][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.377443][ T5840] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.416348][ T5840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.419145][ T5840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.666455][ T1489] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.818857][ T1489] usb 6-1: config 0 has no interfaces? [ 89.821312][ T1489] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 89.825309][ T1489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.835439][ T1489] usb 6-1: config 0 descriptor?? [ 89.837827][ T6350] syz_tun: entered allmulticast mode [ 89.956359][ T1350] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 89.960584][ T6343] socket: no more sockets [ 90.099656][ T5841] usb 6-1: USB disconnect, device number 7 [ 90.118417][ T1350] usb 7-1: config 0 has no interfaces? [ 90.120212][ T1350] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 90.124666][ T1350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.131358][ T1350] usb 7-1: config 0 descriptor?? [ 90.197409][ T6343] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 90.347087][ T1489] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.392379][ T5841] usb 7-1: USB disconnect, device number 8 [ 90.501897][ T1489] usb 8-1: config 0 has no interfaces? [ 90.504396][ T1489] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 90.510881][ T1489] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.519154][ T1489] usb 8-1: config 0 descriptor?? [ 90.698373][ T6363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.787307][ T5841] usb 8-1: USB disconnect, device number 7 [ 90.977795][ T6363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.164427][ T6363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.278985][ T6363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.856424][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859674][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.862524][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.865562][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.076595][ T6375] __nla_validate_parse: 20 callbacks suppressed [ 93.076617][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 93.562375][ T6391] warning: `syz.3.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.912199][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 93.919047][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 94.657432][ T5897] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.705825][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 94.829382][ T5897] usb 7-1: config 0 has no interfaces? [ 94.835950][ T5897] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 94.844035][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.857867][ T5897] usb 7-1: config 0 descriptor?? [ 95.001868][ T6437] 9p: Bad value for 'wfdno' [ 95.044219][ T6424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 95.209741][ T5820] usb 7-1: USB disconnect, device number 9 [ 95.258230][ T6439] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 95.268754][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.116'. [ 95.300849][ T6439] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 95.305708][ T6439] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 95.312286][ T6439] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 95.317529][ T6439] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 95.349903][ T6439] pci 0000:00:01.0: Adding to iommu group 1 [ 95.360487][ T6439] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 95.362666][ T6439] pci 0000:00:01.0: vgaarb: bridge control possible [ 95.364705][ T6439] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 95.388881][ T6439] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 95.393303][ T6439] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 95.398432][ T6439] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 95.408793][ T6439] [drm] Found bochs VGA, ID 0xb0c5. [ 95.410499][ T6439] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 95.425216][ T6439] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 95.485146][ T6439] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 95.713448][ T6451] 9p: Bad value for 'wfdno' [ 95.724869][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 95.739907][ T6453] team0: Port device team_slave_0 removed [ 95.890099][ T6454] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 95.918722][ T6454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 95.926991][ T6454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 95.934004][ T6454] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 95.937057][ T6454] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 95.968289][ T6454] pci 0000:00:01.0: Adding to iommu group 1 [ 95.978336][ T6454] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 95.980566][ T6454] pci 0000:00:01.0: vgaarb: bridge control possible [ 95.982859][ T6454] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 96.025475][ T6454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 96.032307][ T6454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 96.043066][ T6454] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 96.084240][ T6454] [drm] Found bochs VGA, ID 0xb0c5. [ 96.087710][ T6454] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 96.372559][ T6454] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 96.477953][ T5841] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.510646][ T6454] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 96.627746][ T5841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.631504][ T5841] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.635141][ T5841] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 96.640100][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.658482][ T5841] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 96.668836][ T5841] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 96.968261][ T6466] socket: no more sockets [ 97.026392][ T6463] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 97.030500][ T6463] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 97.033195][ T6463] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 97.218881][ T6470] socket: no more sockets [ 97.286656][ T6462] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 97.290425][ T40] usb 8-1: USB disconnect, device number 8 [ 97.302192][ T40] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 97.306034][ T40] spcp8x5 8-1:1.0: device disconnected [ 97.851216][ T6483] FAULT_INJECTION: forcing a failure. [ 97.851216][ T6483] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.858517][ T6483] CPU: 3 UID: 0 PID: 6483 Comm: syz.3.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.858548][ T6483] Tainted: [L]=SOFTLOCKUP [ 97.858555][ T6483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.858567][ T6483] Call Trace: [ 97.858589][ T6483] [ 97.858597][ T6483] dump_stack_lvl+0x100/0x190 [ 97.858759][ T6483] should_fail_ex.cold+0x5/0xa [ 97.858808][ T6483] _copy_from_user+0x2e/0xd0 [ 97.858887][ T6483] __do_sys_landlock_create_ruleset+0x1bf/0x580 [ 97.858913][ T6483] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 97.858942][ T6483] ? __pfx_ksys_write+0x10/0x10 [ 97.858992][ T6483] __do_fast_syscall_32+0xe7/0x970 [ 97.859084][ T6483] ? lockdep_hardirqs_on+0x78/0x100 [ 97.859111][ T6483] do_fast_syscall_32+0x32/0x70 [ 97.859138][ T6483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.859164][ T6483] RIP: 0023:0xf703efec [ 97.859190][ T6483] Code: Unable to access opcode bytes at 0xf703efc2. [ 97.859218][ T6483] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bc [ 97.859238][ T6483] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000030 [ 97.859252][ T6483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.859263][ T6483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.859273][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.859284][ T6483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.859307][ T6483] [ 98.284927][ T6493] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 98.426930][ T6495] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 99.372926][ T42] audit: type=1800 audit(1785944503.720:6): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 99.994660][ T6505] socket: no more sockets [ 100.196896][ T6513] overlayfs: failed to decode file handle (len=9, type=248, flags=0, err=-22) [ 100.260198][ T42] audit: type=1804 audit(1785944504.610:7): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.149" name="/newroot/35/merge/file" dev="overlay" ino=223 res=1 errno=0 [ 100.366504][ T1489] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.506120][ T6531] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 100.523248][ T1489] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.527472][ T1489] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.531488][ T1489] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 100.534733][ T1489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.623478][ T1489] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 100.895357][ T1489] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 102.030660][ T6540] FAULT_INJECTION: forcing a failure. [ 102.030660][ T6540] name failslab, interval 1, probability 0, space 0, times 1 [ 102.036023][ T6540] CPU: 2 UID: 0 PID: 6540 Comm: syz.3.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.036041][ T6540] Tainted: [L]=SOFTLOCKUP [ 102.036045][ T6540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.036051][ T6540] Call Trace: [ 102.036056][ T6540] [ 102.036061][ T6540] dump_stack_lvl+0x100/0x190 [ 102.036081][ T6540] should_fail_ex.cold+0x5/0xa [ 102.036094][ T6540] should_failslab+0xc2/0x120 [ 102.036124][ T6540] __kmalloc_noprof+0xfc/0x820 [ 102.036143][ T6540] ? rcu_is_watching+0x12/0xc0 [ 102.036170][ T6540] ? tomoyo_realpath_from_path+0xb6/0x690 [ 102.036191][ T6540] tomoyo_realpath_from_path+0xb6/0x690 [ 102.036226][ T6540] tomoyo_path_number_perm+0x23c/0x580 [ 102.036252][ T6540] ? tomoyo_path_number_perm+0x22e/0x580 [ 102.036267][ T6540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.036283][ T6540] ? get_pid_task+0x106/0x250 [ 102.036317][ T6540] ? find_held_lock+0x2b/0x80 [ 102.036337][ T6540] ? __fget_files+0x215/0x3d0 [ 102.036348][ T6540] ? hook_file_ioctl_common+0x140/0x440 [ 102.036362][ T6540] ? __fget_files+0x215/0x3d0 [ 102.036375][ T6540] ? __fget_files+0x21f/0x3d0 [ 102.036387][ T6540] security_file_ioctl_compat+0xd3/0x230 [ 102.036404][ T6540] __ia32_compat_sys_ioctl+0xc2/0x360 [ 102.036423][ T6540] __do_fast_syscall_32+0xe7/0x970 [ 102.036440][ T6540] ? lockdep_hardirqs_on+0x78/0x100 [ 102.036456][ T6540] do_fast_syscall_32+0x32/0x70 [ 102.036474][ T6540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.036492][ T6540] RIP: 0023:0xf703efec [ 102.036507][ T6540] Code: Unable to access opcode bytes at 0xf703efc2. [ 102.036512][ T6540] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 102.036524][ T6540] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800448f0 [ 102.036530][ T6540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.036537][ T6540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.036543][ T6540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.036549][ T6540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.036563][ T6540] [ 102.181005][ T6540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.400916][ T6547] socket: no more sockets [ 102.416336][ T847] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.568377][ T847] usb 6-1: config 0 has no interfaces? [ 102.571843][ T847] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 102.575371][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.580569][ T847] usb 6-1: config 0 descriptor?? [ 102.601390][ T6554] fuse: Bad value for 'user_id' [ 102.603035][ T6554] fuse: Bad value for 'user_id' [ 102.797103][ T1489] usb 6-1: USB disconnect, device number 8 [ 102.865601][ T6543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.153'. [ 102.900163][ T6556] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 102.903070][ T6556] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.908334][ T6556] vhci_hcd vhci_hcd.0: Device attached [ 103.073833][ T1489] hid_parser_main: 6 callbacks suppressed [ 103.073867][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.082939][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.086142][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.091298][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.094526][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.100480][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.103440][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.106284][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.109054][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.111833][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.122649][ T1489] hid-generic 0004:FFFFFFFF:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 103.176799][ T55] usb 44-1: SetAddress Request (2) to port 0 [ 103.180764][ T55] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 103.228916][ T29] usb 7-1: USB disconnect, device number 10 [ 103.246678][ T29] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 103.251068][ T29] spcp8x5 7-1:1.0: device disconnected [ 103.268214][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 103.271113][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 103.349223][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.463080][ T6557] vhci_hcd: connection reset by peer [ 103.469204][ T12] vhci_hcd vhci_hcd.3: stop threads [ 103.471461][ T12] vhci_hcd vhci_hcd.3: release socket [ 103.473980][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 103.507581][ T40] usb 5-1: config 0 has no interfaces? [ 103.509340][ T40] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 103.512286][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.516124][ T40] usb 5-1: config 0 descriptor?? [ 104.496440][ T847] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 104.660007][ T847] usb 8-1: config 0 has no interfaces? [ 104.663602][ T847] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 104.670566][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.685446][ T847] usb 8-1: config 0 descriptor?? [ 104.967551][ T29] usb 8-1: USB disconnect, device number 9 [ 105.045796][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.162'. [ 105.204047][ T6588] FAULT_INJECTION: forcing a failure. [ 105.204047][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.210664][ T6588] CPU: 3 UID: 0 PID: 6588 Comm: syz.2.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.210689][ T6588] Tainted: [L]=SOFTLOCKUP [ 105.210706][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.210714][ T6588] Call Trace: [ 105.210719][ T6588] [ 105.210724][ T6588] dump_stack_lvl+0x100/0x190 [ 105.210743][ T6588] should_fail_ex.cold+0x5/0xa [ 105.210757][ T6588] strncpy_from_user+0x3b/0x2d0 [ 105.210779][ T6588] do_getname+0x78/0x390 [ 105.210796][ T6588] user_path_at+0x26/0x60 [ 105.210814][ T6588] __ia32_sys_mount+0x1fb/0x310 [ 105.210829][ T6588] ? __pfx___ia32_sys_mount+0x10/0x10 [ 105.210855][ T6588] ? ksys_write+0x1ac/0x250 [ 105.210866][ T6588] ? __pfx_ksys_write+0x10/0x10 [ 105.210879][ T6588] __do_fast_syscall_32+0xe7/0x970 [ 105.210897][ T6588] ? lockdep_hardirqs_on+0x78/0x100 [ 105.210912][ T6588] do_fast_syscall_32+0x32/0x70 [ 105.210928][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.210943][ T6588] RIP: 0023:0xf701efec [ 105.210958][ T6588] Code: Unable to access opcode bytes at 0xf701efc2. [ 105.210963][ T6588] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 105.210975][ T6588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 105.210983][ T6588] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080000180 [ 105.210989][ T6588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.210995][ T6588] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.211001][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.211015][ T6588] [ 105.419664][ T6594] 9p: Bad value for 'wfdno' [ 106.115803][ T1350] usb 5-1: USB disconnect, device number 6 [ 106.226609][ T56] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.387898][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.391045][ T56] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 106.394095][ T56] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 106.398581][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.409404][ T56] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 106.415256][ T56] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 106.462211][ T6610] netlink: 84 bytes leftover after parsing attributes in process `syz.2.174'. [ 106.786486][ T6596] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 106.789774][ T6596] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 106.793582][ T6596] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 107.050321][ T6595] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 107.059983][ T40] usb 6-1: USB disconnect, device number 9 [ 107.095263][ T40] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 107.104181][ T40] spcp8x5 6-1:1.0: device disconnected [ 107.443896][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 107.453290][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 107.722277][ T6630] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 108.219052][ T55] usb 44-1: device descriptor read/8, error -110 [ 108.253758][ T6649] 9p: Bad value for 'wfdno' [ 109.361959][ T6656] socket: no more sockets [ 109.386373][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 109.527029][ T55] usb usb44-port1: attempt power cycle [ 109.540122][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.544708][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 109.549927][ T24] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 109.554034][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.565865][ T24] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 109.606012][ T24] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 109.734149][ T6676] 9p: Bad value for 'wfdno' [ 110.136300][ T55] usb usb44-port1: unable to enumerate USB device [ 110.733346][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 110.996365][ T847] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 110.996405][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 111.148068][ T55] usb 6-1: config 0 has no interfaces? [ 111.148348][ T847] usb 7-1: config 0 has no interfaces? [ 111.149896][ T55] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 111.151919][ T847] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 111.156490][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.157613][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.163764][ T55] usb 6-1: config 0 descriptor?? [ 111.164022][ T847] usb 7-1: config 0 descriptor?? [ 111.424295][ T56] usb 6-1: USB disconnect, device number 10 [ 111.440666][ T5897] usb 7-1: USB disconnect, device number 11 [ 111.481535][ T6696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.192'. [ 111.503570][ T6697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.193'. [ 111.835806][ T42] audit: type=1804 audit(1785944516.180:8): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.196" name="/newroot/54/merge/file" dev="overlay" ino=331 res=1 errno=0 [ 112.153879][ T56] usb 8-1: USB disconnect, device number 10 [ 112.172078][ T6712] socket: no more sockets [ 112.180888][ T56] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 112.185066][ T56] spcp8x5 8-1:1.0: device disconnected [ 112.626376][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.778752][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.783324][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.787723][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 112.791799][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.800575][ T24] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 112.812857][ T24] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 113.187084][ T6718] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 113.191720][ T6718] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 113.200547][ T6718] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 113.308538][ T6718] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 113.761516][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 113.765336][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 114.779648][ T6745] UHID_CREATE from different security context by process 170 (syz.2.209), this is not allowed. [ 114.784809][ T24] hid_parser_main: 22 callbacks suppressed [ 114.784833][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.791995][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.796052][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.799477][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.802938][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.806170][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.809677][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.813166][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.816417][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.819597][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.820822][ T6741] socket: no more sockets [ 114.830587][ T24] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.03 Device [syz1] on syz1 [ 115.387846][ T5897] usb 5-1: USB disconnect, device number 7 [ 115.415112][ T5897] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 115.434052][ T5897] spcp8x5 5-1:1.0: device disconnected [ 115.472361][ T6755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'. [ 115.755883][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 115.775466][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 116.527132][ T55] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 116.706124][ T6788] 9p: Bad value for 'wfdno' [ 116.790013][ T55] usb 7-1: config 0 has no interfaces? [ 117.263463][ T55] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 117.356317][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.476322][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.484868][ T55] usb 7-1: config 0 descriptor?? [ 117.517716][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.522667][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.536358][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 117.539557][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.545106][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.224'. [ 117.553948][ T24] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 117.571490][ T24] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 117.720164][ T24] usb 7-1: USB disconnect, device number 12 [ 117.774125][ T6778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.835496][ T6802] FAULT_INJECTION: forcing a failure. [ 117.835496][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 117.841463][ T6802] CPU: 3 UID: 0 PID: 6802 Comm: syz.1.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.841494][ T6802] Tainted: [L]=SOFTLOCKUP [ 117.841501][ T6802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.841529][ T6802] Call Trace: [ 117.841537][ T6802] [ 117.841545][ T6802] dump_stack_lvl+0x100/0x190 [ 117.841576][ T6802] should_fail_ex.cold+0x5/0xa [ 117.841601][ T6802] should_failslab+0xc2/0x120 [ 117.841629][ T6802] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 117.841656][ T6802] ? __d_alloc+0x35/0xa50 [ 117.841682][ T6802] __d_alloc+0x35/0xa50 [ 117.841705][ T6802] d_alloc_pseudo+0x1c/0xc0 [ 117.841731][ T6802] alloc_file_pseudo+0x118/0x290 [ 117.841758][ T6802] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 117.841784][ T6802] ? _raw_spin_unlock+0x3e/0x50 [ 117.841806][ T6802] ? alloc_fd+0x471/0x7a0 [ 117.841828][ T6802] __anon_inode_getfile+0xe8/0x280 [ 117.841857][ T6802] __anon_inode_getfd+0x5c/0xe0 [ 117.841884][ T6802] __ia32_sys_fsopen+0x192/0x230 [ 117.841912][ T6802] __do_fast_syscall_32+0xe7/0x970 [ 117.841938][ T6802] ? lockdep_hardirqs_on+0x78/0x100 [ 117.841964][ T6802] do_fast_syscall_32+0x32/0x70 [ 117.841991][ T6802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.842014][ T6802] RIP: 0023:0xf701efec [ 117.842038][ T6802] Code: Unable to access opcode bytes at 0xf701efc2. [ 117.842047][ T6802] RSP: 002b:00000000f53ea50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 117.842065][ T6802] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000000000000 [ 117.842077][ T6802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.842087][ T6802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.842098][ T6802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.842108][ T6802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.842132][ T6802] [ 119.694609][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 119.697720][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 120.171958][ T847] usb 5-1: USB disconnect, device number 8 [ 120.191942][ T847] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 120.195948][ T847] spcp8x5 5-1:1.0: device disconnected [ 120.303935][ T6849] 9p: Bad value for 'wfdno' [ 120.845240][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 121.365483][ T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 121.587847][ T55] usb 8-1: config 0 has no interfaces? [ 121.589919][ T55] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 121.609738][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.755754][ T55] usb 8-1: config 0 descriptor?? [ 121.937304][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 121.996128][ T29] usb 8-1: USB disconnect, device number 11 [ 122.048199][ T6867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.241'. [ 122.098143][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.102080][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.105907][ T34] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 122.108939][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.118552][ T34] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 122.122785][ T34] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 122.266626][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 122.275864][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 122.278074][ T40] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 122.431176][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.435382][ T40] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.442486][ T40] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 122.446168][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.457001][ T40] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 122.471607][ T40] usb 7-1: SPCP8x5 converter now attached to ttyUSB1 [ 122.496530][ T6874] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 122.499104][ T6874] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 122.502735][ T6874] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 122.527300][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 122.596641][ T6874] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 122.672108][ T6879] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 122.676860][ T6879] ------------[ cut here ]------------ [ 122.679563][ T6879] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x98/0x380 [ 122.684454][ T6879] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#3: syz.2.247/6879 [ 122.688525][ T6879] Modules linked in: [ 122.690493][ T6879] CPU: 3 UID: 0 PID: 6879 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.694867][ T6879] Tainted: [L]=SOFTLOCKUP [ 122.696890][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.701141][ T6879] RIP: 0010:__might_sleep+0x97/0xc0 [ 122.703355][ T6879] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d ec e6 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 0d 24 a4 00 eb 9f 89 74 24 04 e8 32 24 a4 [ 122.711332][ T6879] RSP: 0018:ffffc90003647538 EFLAGS: 00010286 [ 122.713873][ T6879] RAX: dffffc0000000000 RBX: ffffffff8e1955a9 RCX: ffffffff81e1c178 [ 122.717205][ T6879] RDX: ffffffff81e1c178 RSI: 0000000000000001 RDI: ffffffff912603e0 [ 122.720510][ T6879] RBP: 0000000000000143 R08: 0000000000000001 R09: 00000000000000b2 [ 122.723876][ T6879] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880284cca80 [ 122.727200][ T6879] R13: 0000000000000001 R14: ffffffff87b1e4c0 R15: dffffc0000000000 [ 122.730388][ T6879] FS: 0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f540db40 [ 122.733800][ T6879] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 122.736607][ T6879] CR2: 00000000f7367598 CR3: 0000000071aec000 CR4: 0000000000352ef0 [ 122.739947][ T6879] Call Trace: [ 122.741410][ T6879] [ 122.742613][ T6879] __kmalloc_cache_noprof+0x3fd/0x6c0 [ 122.744736][ T6879] ? spcp8x5_get_msr+0xe9/0x2d0 [ 122.746951][ T6879] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 122.749587][ T6879] spcp8x5_get_msr+0xe9/0x2d0 [ 122.751609][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.754076][ T6879] spcp8x5_carrier_raised+0x75/0xe0 [ 122.756321][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.758640][ T6879] ? mark_held_locks+0x40/0x70 [ 122.760556][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.763010][ T6879] serial_port_carrier_raised+0x8f/0xd0 [ 122.765229][ T6879] tty_port_block_til_ready+0x43f/0x910 [ 122.767514][ T6879] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 122.769873][ T6879] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.772184][ T6879] ? mark_held_locks+0x40/0x70 [ 122.774049][ T6879] tty_port_open+0x19c/0x1f0 [ 122.775843][ T6879] ? __pfx_serial_open+0x10/0x10 [ 122.777894][ T6879] tty_open+0x3dd/0xfa0 [ 122.779527][ T6879] ? __pfx_tty_open+0x10/0x10 [ 122.781810][ T6879] ? chrdev_open+0x10b/0x6a0 [ 122.783610][ T6879] ? chrdev_open+0x10b/0x6a0 [ 122.785605][ T6879] ? __pfx_tty_open+0x10/0x10 [ 122.787533][ T6879] chrdev_open+0x234/0x6a0 [ 122.789295][ T6879] ? __pfx_apparmor_file_open+0x10/0x10 [ 122.791474][ T6879] ? __pfx_chrdev_open+0x10/0x10 [ 122.793374][ T6879] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 122.795365][ T6879] do_dentry_open+0x6ab/0x14d0 [ 122.796883][ T6879] ? __pfx_chrdev_open+0x10/0x10 [ 122.798503][ T6879] vfs_open+0x82/0x3f0 [ 122.800235][ T6879] path_openat+0x2873/0x4280 [ 122.802072][ T6879] ? __pfx_path_openat+0x10/0x10 [ 122.804008][ T6879] do_file_open+0x20e/0x430 [ 122.805850][ T6879] ? __lock_acquire+0x49f/0x1a40 [ 122.807940][ T6879] ? __pfx_do_file_open+0x10/0x10 [ 122.810009][ T6879] ? _raw_spin_unlock+0x28/0x50 [ 122.811927][ T6879] ? alloc_fd+0x471/0x7a0 [ 122.813674][ T6879] do_sys_openat2+0x10f/0x1e0 [ 122.815543][ T6879] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.817791][ T6879] __ia32_compat_sys_openat+0x12d/0x210 [ 122.820049][ T6879] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 122.822495][ T6879] __do_fast_syscall_32+0xe7/0x970 [ 122.824489][ T6879] ? lockdep_hardirqs_on+0x78/0x100 [ 122.826642][ T6879] do_fast_syscall_32+0x32/0x70 [ 122.828589][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.831165][ T6879] RIP: 0023:0xf701efec [ 122.832811][ T6879] Code: Unable to access opcode bytes at 0xf701efc2. [ 122.835460][ T6879] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 122.838777][ T6879] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 122.841842][ T6879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.844939][ T6879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.848071][ T6879] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.851290][ T6879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.854592][ T6879] [ 122.855928][ T6879] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.858980][ T6879] CPU: 3 UID: 0 PID: 6879 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.863459][ T6879] Tainted: [L]=SOFTLOCKUP [ 122.865277][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.869426][ T6879] Call Trace: [ 122.870853][ T6879] [ 122.872011][ T6879] dump_stack_lvl+0x100/0x190 [ 122.873875][ T6879] vpanic+0x552/0x970 [ 122.875536][ T6879] ? __pfx_vpanic+0x10/0x10 [ 122.877475][ T6879] panic+0xd1/0xe0 [ 122.879065][ T6879] ? __pfx_panic+0x10/0x10 [ 122.880983][ T6879] check_panic_on_warn.cold+0x19/0x34 [ 122.883076][ T6879] ? __might_sleep+0x94/0xc0 [ 122.884999][ T6879] __warn.cold+0x191/0x318 [ 122.886915][ T6879] __report_bug+0x30f/0x440 [ 122.888834][ T6879] ? __might_sleep+0x94/0xc0 [ 122.890576][ T6879] ? __pfx___report_bug+0x10/0x10 [ 122.892529][ T6879] ? prepare_to_wait+0x98/0x380 [ 122.894042][ T6879] ? prepare_to_wait+0x98/0x380 [ 122.895949][ T6879] report_bug_entry+0xe1/0x290 [ 122.897871][ T6879] ? __might_sleep+0x97/0xc0 [ 122.899780][ T6879] handle_bug+0x1cd/0x2a0 [ 122.901560][ T6879] exc_invalid_op+0x17/0x50 [ 122.903347][ T6879] asm_exc_invalid_op+0x1a/0x20 [ 122.905243][ T6879] RIP: 0010:__might_sleep+0x97/0xc0 [ 122.907342][ T6879] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d ec e6 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 0d 24 a4 00 eb 9f 89 74 24 04 e8 32 24 a4 [ 122.914964][ T6879] RSP: 0018:ffffc90003647538 EFLAGS: 00010286 [ 122.917465][ T6879] RAX: dffffc0000000000 RBX: ffffffff8e1955a9 RCX: ffffffff81e1c178 [ 122.920537][ T6879] RDX: ffffffff81e1c178 RSI: 0000000000000001 RDI: ffffffff912603e0 [ 122.923215][ T6879] RBP: 0000000000000143 R08: 0000000000000001 R09: 00000000000000b2 [ 122.926190][ T6879] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880284cca80 [ 122.929443][ T6879] R13: 0000000000000001 R14: ffffffff87b1e4c0 R15: dffffc0000000000 [ 122.932696][ T6879] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 122.935306][ T6879] ? prepare_to_wait+0x98/0x380 [ 122.937321][ T6879] ? prepare_to_wait+0x98/0x380 [ 122.939410][ T6879] __kmalloc_cache_noprof+0x3fd/0x6c0 [ 122.941673][ T6879] ? spcp8x5_get_msr+0xe9/0x2d0 [ 122.943724][ T6879] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 122.946094][ T6879] spcp8x5_get_msr+0xe9/0x2d0 [ 122.948030][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.950527][ T6879] spcp8x5_carrier_raised+0x75/0xe0 [ 122.952720][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.955205][ T6879] ? mark_held_locks+0x40/0x70 [ 122.957196][ T6879] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 122.959638][ T6879] serial_port_carrier_raised+0x8f/0xd0 [ 122.961996][ T6879] tty_port_block_til_ready+0x43f/0x910 [ 122.964310][ T6879] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 122.966851][ T6879] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.969337][ T6879] ? mark_held_locks+0x40/0x70 [ 122.971363][ T6879] tty_port_open+0x19c/0x1f0 [ 122.972834][ T6879] ? __pfx_serial_open+0x10/0x10 [ 122.974405][ T6879] tty_open+0x3dd/0xfa0 [ 122.975771][ T6879] ? __pfx_tty_open+0x10/0x10 [ 122.977739][ T6879] ? chrdev_open+0x10b/0x6a0 [ 122.979483][ T6879] ? chrdev_open+0x10b/0x6a0 [ 122.981245][ T6879] ? __pfx_tty_open+0x10/0x10 [ 122.983216][ T6879] chrdev_open+0x234/0x6a0 [ 122.985055][ T6879] ? __pfx_apparmor_file_open+0x10/0x10 [ 122.987360][ T6879] ? __pfx_chrdev_open+0x10/0x10 [ 122.989422][ T6879] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 122.992094][ T6879] do_dentry_open+0x6ab/0x14d0 [ 122.994103][ T6879] ? __pfx_chrdev_open+0x10/0x10 [ 122.996145][ T6879] vfs_open+0x82/0x3f0 [ 122.997869][ T6879] path_openat+0x2873/0x4280 [ 122.999836][ T6879] ? __pfx_path_openat+0x10/0x10 [ 123.001933][ T6879] do_file_open+0x20e/0x430 [ 123.003833][ T6879] ? __lock_acquire+0x49f/0x1a40 [ 123.005917][ T6879] ? __pfx_do_file_open+0x10/0x10 [ 123.008023][ T6879] ? _raw_spin_unlock+0x28/0x50 [ 123.010076][ T6879] ? alloc_fd+0x471/0x7a0 [ 123.011866][ T6879] do_sys_openat2+0x10f/0x1e0 [ 123.013843][ T6879] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.015997][ T6879] __ia32_compat_sys_openat+0x12d/0x210 [ 123.018315][ T6879] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 123.020890][ T6879] __do_fast_syscall_32+0xe7/0x970 [ 123.022820][ T6879] ? lockdep_hardirqs_on+0x78/0x100 [ 123.024470][ T6879] do_fast_syscall_32+0x32/0x70 [ 123.026076][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.028688][ T6879] RIP: 0023:0xf701efec [ 123.030410][ T6879] Code: Unable to access opcode bytes at 0xf701efc2. [ 123.033132][ T6879] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 123.036586][ T6879] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 123.039880][ T6879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.043185][ T6879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.046156][ T6879] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.049424][ T6879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.052680][ T6879] [ 123.054755][ T6879] Kernel Offset: disabled [ 123.056564][ T6879] Rebooting in 86400 seconds..