last executing test programs: 1m34.11162738s ago: executing program 1 (id=259): openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x622880, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m34.111356564s ago: executing program 1 (id=261): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 1m34.051329775s ago: executing program 1 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1, 0x80802, 0x0) shutdown(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1m33.742579644s ago: executing program 1 (id=264): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 1m33.613804423s ago: executing program 1 (id=268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x20000884) 1m33.383238303s ago: executing program 1 (id=270): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 1m33.259032268s ago: executing program 32 (id=270): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 51.094244729s ago: executing program 3 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 51.09314558s ago: executing program 3 (id=598): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) getpgrp(r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x4000) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000440)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_open_procfs$userns(0x0, &(0x7f0000002280)) 50.154670602s ago: executing program 0 (id=607): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c67", 0x70, 0x48044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 50.060872531s ago: executing program 0 (id=608): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYRESHEX=r1]) 50.060324143s ago: executing program 0 (id=609): symlink(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xe, @empty, 0x204}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 50.060186335s ago: executing program 0 (id=610): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) close(r0) 49.044419357s ago: executing program 0 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x3}, {0x3000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0x10}, {0x4, 0xe000, 0xc, 0xc, 0x21, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xf000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x5, 0x8, 0x0, 0xc}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.799390528s ago: executing program 2 (id=621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 48.79903929s ago: executing program 2 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0000002}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 48.7210679s ago: executing program 2 (id=623): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffb, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c044}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) 48.720720903s ago: executing program 2 (id=624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000ff000000000085000000c70000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 48.541110333s ago: executing program 0 (id=625): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, 0x0, &(0x7f0000000340)=0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044004}, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 48.078033609s ago: executing program 4 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8004, 0x0, 0xb, 0x8, 0xfffffe0000000005, 0x3, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) 47.351142313s ago: executing program 3 (id=627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="24005080040006000500020005"], 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) 46.956018561s ago: executing program 2 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 46.859999981s ago: executing program 3 (id=629): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) 46.207065588s ago: executing program 4 (id=630): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 46.149285329s ago: executing program 3 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0000002}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 46.081179809s ago: executing program 4 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 45.943592445s ago: executing program 4 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xe}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0xb77, 0x0, r2}) 45.810353502s ago: executing program 3 (id=634): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x2087acee, 0x2, {0xd, @win={{0x0, 0x7, 0xffff}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffe8}]}}]}, 0x3c}}, 0x40804) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902"], 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r7, 0x100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r9 = dup(r8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 45.703993449s ago: executing program 2 (id=635): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000002e00)=""/4130, 0x104e}], 0x1) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x40000002, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) 45.137570083s ago: executing program 4 (id=636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748", 0x71, 0x48044, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x52, 0x0, 0x0) 42.554803617s ago: executing program 4 (id=637): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.909182534s ago: executing program 33 (id=625): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, 0x0, &(0x7f0000000340)=0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044004}, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 25.675056989s ago: executing program 34 (id=637): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.987992161s ago: executing program 35 (id=635): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000002e00)=""/4130, 0x104e}], 0x1) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x40000002, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) 18.85739338s ago: executing program 36 (id=634): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x2087acee, 0x2, {0xd, @win={{0x0, 0x7, 0xffff}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffe8}]}}]}, 0x3c}}, 0x40804) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902"], 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r7, 0x100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r9 = dup(r8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.679121337s ago: executing program 6 (id=639): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x20, 0x0, 0x0, 0x80000000}) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) 1.477425213s ago: executing program 7 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x70e, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @local, 0x10001}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r5, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r5, 0x5}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.352263683s ago: executing program 8 (id=641): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000000)=0x101) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) 1.200696774s ago: executing program 8 (id=642): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x1000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x5, 0x2], 0xeeee8000, 0x8340}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0) 1.200461869s ago: executing program 8 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x1, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000010c0)="bad3d93e99d3e0ab1a906b30fbc9", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1b, r4, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.090333816s ago: executing program 6 (id=644): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x40000, 0xffffffffffffffff, 0xa}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000006001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 1.090101422s ago: executing program 7 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 980.327094ms ago: executing program 8 (id=646): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 900.62037ms ago: executing program 7 (id=647): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) 900.467798ms ago: executing program 5 (id=638): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="24005080040006000500020005"], 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) 810.434174ms ago: executing program 7 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 720.634179ms ago: executing program 5 (id=649): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x44000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syslog(0x4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0x8001, 0x2, 0xd5, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0x13, 0x2, 0x1, 0x8, 0x1100004, 0x1, 0x63, 0x9, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x8, 0x800b, 0x8, 0x6, 0x8, 0xc, 0x7, 0x9]}) 156.099236ms ago: executing program 6 (id=650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3507, 0x2, 0x3}]}]}, 0xfc}}, 0x20000000) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) 133.049647ms ago: executing program 8 (id=651): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 6 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:11479' (ED25519) to the list of known hosts. [ 49.321515][ T5904] cgroup: Unknown subsys name 'net' [ 49.493326][ T5904] cgroup: Unknown subsys name 'cpuset' [ 49.497223][ T5904] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.740761][ T5904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.238647][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.239046][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.245414][ T5299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.248792][ T5299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.251382][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.253003][ T5299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.258746][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.258930][ T5299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.259129][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.259937][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.260642][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.262105][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.265738][ T5299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.265765][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.272258][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.286517][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.286689][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.290495][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.297938][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.302607][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.533537][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 55.681139][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 55.761804][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.764744][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.767254][ T5947] bridge_slave_0: entered allmulticast mode [ 55.770007][ T5947] bridge_slave_0: entered promiscuous mode [ 55.778706][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.781474][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.783792][ T5947] bridge_slave_1: entered allmulticast mode [ 55.786405][ T5947] bridge_slave_1: entered promiscuous mode [ 55.846340][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 55.861179][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 55.892546][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.904621][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.974049][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.976375][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.978662][ T5946] bridge_slave_0: entered allmulticast mode [ 55.981393][ T5946] bridge_slave_0: entered promiscuous mode [ 56.001312][ T5947] team0: Port device team_slave_0 added [ 56.020129][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.023448][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.026409][ T5946] bridge_slave_1: entered allmulticast mode [ 56.030215][ T5946] bridge_slave_1: entered promiscuous mode [ 56.042866][ T5947] team0: Port device team_slave_1 added [ 56.099780][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.113023][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.140161][ T5946] team0: Port device team_slave_0 added [ 56.152869][ T5946] team0: Port device team_slave_1 added [ 56.155279][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.157783][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.166279][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.172823][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.176384][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.179487][ T5949] bridge_slave_0: entered allmulticast mode [ 56.183818][ T5949] bridge_slave_0: entered promiscuous mode [ 56.188261][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.191536][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.194581][ T5942] bridge_slave_0: entered allmulticast mode [ 56.198276][ T5942] bridge_slave_0: entered promiscuous mode [ 56.213739][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.216755][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.219945][ T5942] bridge_slave_1: entered allmulticast mode [ 56.224041][ T5942] bridge_slave_1: entered promiscuous mode [ 56.228331][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.231141][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.240001][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.252819][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.255930][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.259011][ T5949] bridge_slave_1: entered allmulticast mode [ 56.263048][ T5949] bridge_slave_1: entered promiscuous mode [ 56.309333][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.312939][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.315896][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.326589][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.345405][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.356851][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.359144][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.368005][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.375313][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.395869][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.407972][ T5947] hsr_slave_0: entered promiscuous mode [ 56.410348][ T5947] hsr_slave_1: entered promiscuous mode [ 56.423211][ T5942] team0: Port device team_slave_0 added [ 56.438069][ T5942] team0: Port device team_slave_1 added [ 56.456148][ T5949] team0: Port device team_slave_0 added [ 56.466734][ T5946] hsr_slave_0: entered promiscuous mode [ 56.469219][ T5946] hsr_slave_1: entered promiscuous mode [ 56.471723][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 56.473608][ T5946] Cannot create hsr debugfs directory [ 56.502909][ T5949] team0: Port device team_slave_1 added [ 56.520534][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.522858][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.531094][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.539172][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.541621][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.549644][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.592731][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.595741][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.606433][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.612941][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.615947][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.626725][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.706270][ T5942] hsr_slave_0: entered promiscuous mode [ 56.708558][ T5942] hsr_slave_1: entered promiscuous mode [ 56.710775][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 56.712749][ T5942] Cannot create hsr debugfs directory [ 56.724890][ T5949] hsr_slave_0: entered promiscuous mode [ 56.727268][ T5949] hsr_slave_1: entered promiscuous mode [ 56.729612][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 56.731611][ T5949] Cannot create hsr debugfs directory [ 56.950690][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.984948][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.010225][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.016162][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.050375][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.060033][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.067152][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.080251][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.134678][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.142135][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.154153][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.163740][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.250511][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.258060][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.263125][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.272022][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.287756][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.301633][ T5945] Bluetooth: hci0: command tx timeout [ 57.303594][ T5951] Bluetooth: hci2: command tx timeout [ 57.304400][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.311091][ T5951] Bluetooth: hci1: command tx timeout [ 57.334552][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.354159][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.356981][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.361409][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.363901][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.377200][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.381077][ T5951] Bluetooth: hci3: command tx timeout [ 57.396811][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.399158][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.412722][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.418309][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.421427][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.449477][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.459405][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.461919][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.475779][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.478624][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.517126][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.557964][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.567772][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.570230][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.586128][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.588619][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.624810][ T5942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.628172][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.683937][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.695162][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.735003][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.739673][ T5946] veth0_vlan: entered promiscuous mode [ 57.756779][ T5946] veth1_vlan: entered promiscuous mode [ 57.767850][ T5947] veth0_vlan: entered promiscuous mode [ 57.773074][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.789309][ T5947] veth1_vlan: entered promiscuous mode [ 57.811621][ T5949] veth0_vlan: entered promiscuous mode [ 57.817308][ T5946] veth0_macvtap: entered promiscuous mode [ 57.830228][ T5946] veth1_macvtap: entered promiscuous mode [ 57.847415][ T5949] veth1_vlan: entered promiscuous mode [ 57.854531][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.860251][ T5947] veth0_macvtap: entered promiscuous mode [ 57.869258][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.873647][ T5942] veth0_vlan: entered promiscuous mode [ 57.882766][ T5947] veth1_macvtap: entered promiscuous mode [ 57.887170][ T217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.890627][ T217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.896738][ T217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.899975][ T217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913186][ T5942] veth1_vlan: entered promiscuous mode [ 57.933955][ T5949] veth0_macvtap: entered promiscuous mode [ 57.938826][ T5949] veth1_macvtap: entered promiscuous mode [ 57.943540][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.967489][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.971427][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.974798][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.975491][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.984788][ T4972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.991335][ T217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.001234][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.012383][ T217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.015184][ T217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.020428][ T5942] veth0_macvtap: entered promiscuous mode [ 58.026568][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.029066][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.031831][ T5942] veth1_macvtap: entered promiscuous mode [ 58.037887][ T217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.049151][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.052842][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060566][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.086369][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.102386][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.107969][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.141486][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.144681][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.167405][ T4972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.170279][ T4972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.178546][ T4972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.181976][ T217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.186100][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.188857][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.210110][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.214354][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.249510][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.252580][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.270801][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.273805][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.316994][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.319722][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.341219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.382393][ T5945] Bluetooth: hci2: command tx timeout [ 59.385013][ T5951] Bluetooth: hci1: command tx timeout [ 59.387409][ T5951] Bluetooth: hci0: command tx timeout [ 59.461063][ T5954] Bluetooth: hci3: command tx timeout [ 59.712057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.801077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.901062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.061232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.501567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 60.551164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.831586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 60.869951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 60.911161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.471063][ T5954] Bluetooth: hci0: command tx timeout [ 61.473096][ T5954] Bluetooth: hci2: command tx timeout [ 61.475098][ T5954] Bluetooth: hci1: command tx timeout [ 61.551017][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 63.205566][ T6082] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12'. [ 63.209341][ T6082] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12'. [ 63.550924][ T5951] Bluetooth: hci1: command tx timeout [ 63.550956][ T5945] Bluetooth: hci2: command tx timeout [ 63.550997][ T5954] Bluetooth: hci0: command tx timeout [ 63.630924][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 65.171028][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.320911][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 65.331710][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 65.347935][ T24] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 65.362474][ T24] usb 6-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 65.377541][ T24] usb 6-1: config 12 interface 0 has no altsetting 0 [ 65.407107][ T24] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 65.425354][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.428119][ T24] usb 6-1: Product: syz [ 65.429528][ T24] usb 6-1: Manufacturer: syz [ 65.441457][ T24] usb 6-1: SerialNumber: syz [ 65.499064][ T6107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.702457][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 66.248918][ T6123] binder: 6122:6123 ioctl 4018f50b 800003c0 returned -22 [ 67.268837][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.280897][ T24] usb 6-1: selecting invalid altsetting 0 [ 67.408280][ T24] usb 6-1: USB disconnect, device number 2 [ 67.436391][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.515462][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 70.254599][ T6175] process 'syz.0.36' launched './file0' with NULL argv: empty string added [ 70.511324][ T6178] Bluetooth: MGMT ver 1.23 [ 70.944763][ T40] audit: type=1800 audit(1766316301.958:2): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="/" dev="fuse" ino=4 res=0 errno=0 [ 72.060019][ T6195] kvm: MWAIT instruction emulated as NOP! [ 73.451023][ T61] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 73.612987][ T61] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 73.615699][ T61] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 73.619033][ T61] usb 6-1: config 0 has no interface number 0 [ 73.621460][ T61] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 73.625091][ T61] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.629347][ T61] usb 6-1: config 0 interface 52 has no altsetting 0 [ 73.636690][ T61] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 73.640415][ T61] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 73.644155][ T61] usb 6-1: Product: syz [ 73.646143][ T61] usb 6-1: Manufacturer: syz [ 73.648219][ T61] usb 6-1: SerialNumber: syz [ 73.653309][ T61] usb 6-1: config 0 descriptor?? [ 73.871800][ T61] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.52/input/input5 [ 74.069765][ C2] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 74.073075][ T61] usb 6-1: USB disconnect, device number 3 [ 74.719287][ T6247] binder: 6246:6247 ioctl 4018f50b 800003c0 returned -22 [ 74.770887][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 74.951021][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 74.966033][ T60] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.969422][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.972414][ T60] usb 8-1: Product: syz [ 74.973962][ T60] usb 8-1: Manufacturer: syz [ 74.976065][ T60] usb 8-1: SerialNumber: syz [ 74.980125][ T60] r8152-cfgselector 8-1: Unknown version 0x0000 [ 75.100970][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.189465][ T60] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 75.251007][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 75.263066][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.266765][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.270747][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 75.313024][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.341661][ T9] usb 7-1: config 0 descriptor?? [ 75.467026][ T6271] binder: 6270:6271 ioctl 4018f50b 800003c0 returned -22 [ 75.743811][ T6278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.748334][ T6278] Zero length message leads to an empty skb [ 75.792483][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.798569][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.804425][ T9] logitech 0003:046D:C20E.0002: rdesc size test failed for formula gp [ 75.807504][ T9] logitech 0003:046D:C20E.0002: unknown main item tag 0x0 [ 75.830284][ T9] logitech 0003:046D:C20E.0002: unknown main item tag 0x0 [ 75.840627][ T9] logitech 0003:046D:C20E.0002: unknown main item tag 0x0 [ 75.845543][ T9] logitech 0003:046D:C20E.0002: hidraw1: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0 [ 75.949608][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.952066][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.003106][ T61] usb 7-1: USB disconnect, device number 2 [ 76.069065][ T40] audit: type=1326 audit(1766316307.078:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.078596][ T40] audit: type=1326 audit(1766316307.078:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.086006][ T40] audit: type=1326 audit(1766316307.088:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.103572][ T40] audit: type=1326 audit(1766316307.088:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.120890][ T40] audit: type=1326 audit(1766316307.088:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.128265][ T40] audit: type=1326 audit(1766316307.088:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.138168][ T40] audit: type=1326 audit(1766316307.088:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.150919][ T40] audit: type=1326 audit(1766316307.088:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.158855][ T40] audit: type=1326 audit(1766316307.088:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 76.171960][ T40] audit: type=1326 audit(1766316307.088:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.81" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 76.590954][ T61] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.774115][ T61] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.777842][ T61] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.783338][ T61] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.787075][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.790190][ T61] usb 6-1: SerialNumber: syz [ 76.793020][ T6303] syzkaller0: entered promiscuous mode [ 76.794912][ T6303] syzkaller0: entered allmulticast mode [ 76.851020][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.015332][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.020288][ T61] usb 6-1: 0:2 : does not exist [ 77.022654][ T24] usb 7-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 77.026586][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.044481][ T24] usb 7-1: config 0 descriptor?? [ 77.072743][ T61] usb 6-1: USB disconnect, device number 4 [ 77.104848][ T6140] udevd[6140]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.476143][ T24] hid-generic 0003:18D1:503C.0003: unbalanced delimiter at end of report description [ 77.480787][ T24] hid-generic 0003:18D1:503C.0003: probe with driver hid-generic failed with error -22 [ 77.671304][ T60] usb 7-1: USB disconnect, device number 3 [ 78.010929][ T34] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 78.182224][ T34] usb 6-1: config 0 has no interfaces? [ 78.191294][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.194348][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.197221][ T34] usb 6-1: SerialNumber: syz [ 78.211637][ T34] usb 6-1: config 0 descriptor?? [ 78.599825][ T5983] usb 6-1: USB disconnect, device number 5 [ 78.665851][ T6346] kvm: pic: non byte read [ 78.668668][ T6346] kvm: pic: level sensitive irq not supported [ 78.669024][ T6346] kvm: pic: non byte read [ 78.681862][ T6346] kvm: pic: single mode not supported [ 78.682209][ T6346] kvm: pic: non byte read [ 78.687860][ T6346] kvm: pic: non byte read [ 78.701054][ T6346] kvm: pic: non byte read [ 78.704105][ T6346] kvm: pic: non byte read [ 81.158705][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 86.204776][ T141] cfg80211: failed to load regulatory.db [ 86.310935][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 86.310947][ T40] audit: type=1326 audit(1766316317.308:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.3.145" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 88.229158][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 89.399587][ T6513] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.659905][ T6524] Illegal XDP return value 4294967282 on prog (id 21) dev syz_tun, expect packet loss! [ 89.716155][ T6526] Bluetooth: MGMT ver 1.23 [ 90.983349][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 91.819824][ T6579] mmap: syz.3.188 (6579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.150394][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 94.402001][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 96.264570][ T6635] input: syz1 as /devices/virtual/input/input6 [ 97.130058][ T6663] IPv6: Can't replace route, no match found [ 97.574722][ T6677] ======================================================= [ 97.574722][ T6677] WARNING: The mand mount option has been deprecated and [ 97.574722][ T6677] and is ignored by this kernel. Remove the mand [ 97.574722][ T6677] option from the mount to silence this warning. [ 97.574722][ T6677] ======================================================= [ 97.761427][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 97.942608][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.954226][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 97.957821][ T9] usb 7-1: can't read configurations, error -71 [ 99.546623][ T40] audit: type=1326 audit(1766316330.558:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.553645][ T40] audit: type=1326 audit(1766316330.568:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.560743][ T40] audit: type=1326 audit(1766316330.568:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.568121][ T40] audit: type=1326 audit(1766316330.568:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.578100][ T40] audit: type=1326 audit(1766316330.568:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.600001][ T40] audit: type=1326 audit(1766316330.568:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.606828][ T40] audit: type=1326 audit(1766316330.568:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.613766][ T40] audit: type=1326 audit(1766316330.588:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.622306][ T40] audit: type=1326 audit(1766316330.588:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 99.631593][ T40] audit: type=1326 audit(1766316330.588:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.2.229" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 100.917642][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 101.492470][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 103.587052][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 103.611484][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 103.762925][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.769573][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.777475][ T34] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.782639][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.787365][ T34] usb 8-1: SerialNumber: syz [ 104.004212][ T34] usb 8-1: 0:2 : does not exist [ 104.010103][ T34] usb 8-1: unit 255 not found! [ 104.016862][ T34] usb 8-1: 5:0: cannot get min/max values for control 1 (id 5) [ 104.037625][ T34] usb 8-1: USB disconnect, device number 3 [ 104.640976][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 104.709800][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 104.709817][ T40] audit: type=1326 audit(1766316335.718:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 104.732972][ T40] audit: type=1326 audit(1766316335.718:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.0.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 104.810978][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 104.823474][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 104.829047][ T34] usb 6-1: config 2 has an invalid interface number: 166 but max is 0 [ 104.840929][ T34] usb 6-1: config 2 has no interface number 0 [ 104.843857][ T34] usb 6-1: config 2 interface 166 altsetting 248 endpoint 0x8B has an invalid bInterval 243, changing to 11 [ 104.848346][ T34] usb 6-1: config 2 interface 166 altsetting 248 endpoint 0x8B has invalid maxpacket 17509, setting to 1024 [ 104.863056][ T34] usb 6-1: config 2 interface 166 has no altsetting 0 [ 104.874677][ T34] usb 6-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=79.66 [ 104.879249][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.888205][ T34] usb 6-1: Product: syz [ 104.890057][ T34] usb 6-1: Manufacturer: syz [ 104.893566][ T34] usb 6-1: SerialNumber: syz [ 104.904175][ T6775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.118734][ T34] option 6-1:2.166: GSM modem (1-port) converter detected [ 105.139676][ T34] usb 6-1: USB disconnect, device number 6 [ 105.147711][ T34] option 6-1:2.166: device disconnected [ 106.300990][ T5983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.354680][ T6814] cgroup: fork rejected by pids controller in /syz3 [ 106.462057][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.470902][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 106.475276][ T5983] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 106.478838][ T5983] usb 5-1: config 0 has no interface number 0 [ 106.482505][ T5983] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 106.489227][ T5983] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 106.493067][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.496645][ T5983] usb 5-1: Product: syz [ 106.498507][ T5983] usb 5-1: Manufacturer: syz [ 106.500715][ T5983] usb 5-1: SerialNumber: syz [ 106.507415][ T5983] usb 5-1: config 0 descriptor?? [ 106.511162][ T6804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.537442][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.628305][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.653041][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.657199][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.660513][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.663928][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.666593][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.721962][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.729500][ T6802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.877539][ T13] bridge_slave_1: left allmulticast mode [ 106.880166][ T13] bridge_slave_1: left promiscuous mode [ 106.883599][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.890406][ T13] bridge_slave_0: left allmulticast mode [ 106.894674][ T13] bridge_slave_0: left promiscuous mode [ 106.897470][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.920571][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.926493][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.930037][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.934702][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.938574][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.185596][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.192857][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.197910][ T13] bond0 (unregistering): Released all slaves [ 107.212150][ T6819] chnl_net:caif_netlink_parms(): no params data found [ 107.461490][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.464324][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.466706][ T6819] bridge_slave_0: entered allmulticast mode [ 107.469679][ T6819] bridge_slave_0: entered promiscuous mode [ 107.518894][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.530189][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.541218][ T6819] bridge_slave_1: entered allmulticast mode [ 107.545375][ T6819] bridge_slave_1: entered promiscuous mode [ 107.618528][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.635193][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.681607][ T13] hsr_slave_0: left promiscuous mode [ 107.684903][ T13] hsr_slave_1: left promiscuous mode [ 107.690382][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.700651][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.706755][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.709480][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.739040][ T13] veth1_macvtap: left promiscuous mode [ 107.742537][ T13] veth0_macvtap: left promiscuous mode [ 107.745440][ T13] veth1_vlan: left promiscuous mode [ 107.747786][ T13] veth0_vlan: left promiscuous mode [ 108.106119][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.130371][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.413767][ T6819] team0: Port device team_slave_0 added [ 108.442470][ T6819] team0: Port device team_slave_1 added [ 108.500567][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.518864][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.531090][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.537434][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.540255][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.551125][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.589476][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 108.628408][ T6819] hsr_slave_0: entered promiscuous mode [ 108.632543][ T6819] hsr_slave_1: entered promiscuous mode [ 108.635554][ T6819] debugfs: 'hsr0' already exists in 'hsr' [ 108.638370][ T6819] Cannot create hsr debugfs directory [ 108.741017][ T5951] Bluetooth: hci0: command tx timeout [ 108.815766][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.818777][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.823552][ T6825] bridge_slave_0: entered allmulticast mode [ 108.826563][ T6825] bridge_slave_0: entered promiscuous mode [ 108.834553][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.836977][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.839835][ T6825] bridge_slave_1: entered allmulticast mode [ 108.845222][ T6825] bridge_slave_1: entered promiscuous mode [ 108.890522][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.894965][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.934457][ T6825] team0: Port device team_slave_0 added [ 108.943103][ T6825] team0: Port device team_slave_1 added [ 108.977039][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.979976][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.980934][ T5951] Bluetooth: hci1: command tx timeout [ 108.990474][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.007122][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.009849][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.018391][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.080615][ T6819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.110908][ T6819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.135547][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.150329][ T6825] hsr_slave_0: entered promiscuous mode [ 109.155905][ T6825] hsr_slave_1: entered promiscuous mode [ 109.158049][ T6825] debugfs: 'hsr0' already exists in 'hsr' [ 109.159692][ T6825] Cannot create hsr debugfs directory [ 109.161460][ T6819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.168274][ T6819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.253273][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.358559][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.408939][ T5983] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.421206][ T5983] asix 5-1:0.188: probe with driver asix failed with error -71 [ 109.449953][ T5983] usb 5-1: USB disconnect, device number 2 [ 109.459422][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.493305][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.516448][ T6819] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.525991][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.528266][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.553180][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.555736][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.628061][ T46] bridge_slave_1: left allmulticast mode [ 109.630106][ T46] bridge_slave_1: left promiscuous mode [ 109.633698][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.637447][ T46] bridge_slave_0: left allmulticast mode [ 109.639754][ T46] bridge_slave_0: left promiscuous mode [ 109.642699][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.835616][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.841790][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.846850][ T46] bond0 (unregistering): Released all slaves [ 110.013330][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.045185][ T6895] binder_alloc: 6887: binder_alloc_buf, no vma [ 110.199317][ T6819] veth0_vlan: entered promiscuous mode [ 110.207511][ T46] hsr_slave_0: left promiscuous mode [ 110.209753][ T46] hsr_slave_1: left promiscuous mode [ 110.211899][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.214412][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.221622][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.225283][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.244444][ T46] veth1_macvtap: left promiscuous mode [ 110.246258][ T46] veth0_macvtap: left promiscuous mode [ 110.247998][ T46] veth1_vlan: left promiscuous mode [ 110.250127][ T46] veth0_vlan: left promiscuous mode [ 110.311596][ T2290] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 110.460905][ T2290] usb 7-1: Using ep0 maxpacket: 32 [ 110.464896][ T2290] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 110.469019][ T2290] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 110.481068][ T2290] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.487822][ T2290] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 110.492203][ T2290] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 110.495306][ T2290] usb 7-1: Product: syz [ 110.496889][ T2290] usb 7-1: Manufacturer: syz [ 110.498665][ T2290] usb 7-1: SerialNumber: syz [ 110.511721][ T2290] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input8 [ 110.543792][ T46] team0 (unregistering): Port device team_slave_1 removed [ 110.578337][ T46] team0 (unregistering): Port device team_slave_0 removed [ 110.720788][ T141] usb 7-1: USB disconnect, device number 6 [ 110.745229][ T141] appletouch 7-1:1.0: input: appletouch disconnected [ 110.810531][ T6819] veth1_vlan: entered promiscuous mode [ 110.820969][ T5951] Bluetooth: hci0: command tx timeout [ 110.855822][ T6819] veth0_macvtap: entered promiscuous mode [ 110.880704][ T6825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.891313][ T6825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.896313][ T6819] veth1_macvtap: entered promiscuous mode [ 110.899727][ T6825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.907961][ T6825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.935748][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.958857][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.975053][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.978443][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.985911][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.989250][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.061199][ T5951] Bluetooth: hci1: command tx timeout [ 111.121539][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.159611][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.177917][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.179127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.180456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.183030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.208466][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.210778][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.267470][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.275633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.292819][ T40] audit: type=1326 audit(1766316342.308:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.299646][ T40] audit: type=1326 audit(1766316342.308:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.308068][ T40] audit: type=1326 audit(1766316342.308:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.315812][ T40] audit: type=1326 audit(1766316342.308:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.324568][ T40] audit: type=1326 audit(1766316342.318:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.335432][ T40] audit: type=1326 audit(1766316342.318:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.343192][ T40] audit: type=1326 audit(1766316342.318:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.372912][ T40] audit: type=1326 audit(1766316342.318:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.379528][ T40] audit: type=1326 audit(1766316342.318:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.402925][ T40] audit: type=1326 audit(1766316342.328:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.2.284" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 111.439550][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 111.548944][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.570610][ T6825] veth0_vlan: entered promiscuous mode [ 111.576004][ T6825] veth1_vlan: entered promiscuous mode [ 111.591805][ T6825] veth0_macvtap: entered promiscuous mode [ 111.596234][ T6825] veth1_macvtap: entered promiscuous mode [ 111.606349][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.614092][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.619757][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.627119][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.640866][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.660650][ T6964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 111.663306][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.667095][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.669119][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 111.681826][ T6965] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 111.685397][ T54] vhci_hcd vhci_hcd.4: stop threads [ 111.688390][ T54] vhci_hcd vhci_hcd.4: release socket [ 111.690136][ T54] vhci_hcd vhci_hcd.4: disconnect device [ 111.705402][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.708093][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.730313][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.734023][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.708860][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 112.901678][ T5951] Bluetooth: hci0: command tx timeout [ 113.141154][ T5951] Bluetooth: hci1: command tx timeout [ 114.240954][ T6032] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 114.393803][ T6032] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 114.396110][ T6032] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.399464][ T6032] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.410037][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0 [ 114.415340][ T6032] usb 9-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 114.421030][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.433080][ T6032] usb 9-1: config 0 descriptor?? [ 114.442847][ T6032] usbhid 9-1:0.0: can't add hid device: -22 [ 114.445428][ T6032] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 114.641918][ T5983] usb 9-1: USB disconnect, device number 2 [ 114.984285][ T5951] Bluetooth: hci0: command tx timeout [ 115.161727][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.342009][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.348571][ T34] usb 5-1: New USB device found, idVendor=3e6d, idProduct=ca91, bcdDevice= 0.00 [ 115.354205][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.361266][ T34] usb 5-1: config 0 descriptor?? [ 115.563650][ T7062] ubi8: attaching mtd0 [ 115.568301][ T7062] ubi8: scanning is finished [ 115.570356][ T7062] ubi8: empty MTD device detected [ 115.573057][ T7062] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 115.584573][ T5983] usb 5-1: USB disconnect, device number 3 [ 115.633440][ T7062] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 115.659902][ T7064] bridge_slave_0: left allmulticast mode [ 115.662691][ T7064] bridge_slave_0: left promiscuous mode [ 115.665772][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.671329][ T7064] bridge_slave_1: left allmulticast mode [ 115.673462][ T7064] bridge_slave_1: left promiscuous mode [ 115.675512][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.683859][ T7064] bond0: (slave bond_slave_0): Releasing backup interface [ 115.688148][ T7064] bond0: (slave bond_slave_1): Releasing backup interface [ 115.697415][ T7064] team0: Port device team_slave_0 removed [ 115.706246][ T7067] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 115.706759][ T7064] team0: Port device team_slave_1 removed [ 115.729731][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.744797][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.760501][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.775781][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.794878][ T7064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.859957][ T7067] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.291480][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.295645][ T7090] netlink: 168 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.298665][ T7090] netlink: 168 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.305223][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.314063][ T7090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.318068][ T7090] netlink: 168 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.322009][ T7090] netlink: 168 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.339829][ T7092] bridge0: port 3(syz_tun) entered blocking state [ 116.346726][ T7092] bridge0: port 3(syz_tun) entered disabled state [ 116.350164][ T7092] syz_tun: entered allmulticast mode [ 116.356134][ T7092] syz_tun: entered promiscuous mode [ 116.358977][ T7092] bridge0: port 3(syz_tun) entered blocking state [ 116.361854][ T7092] bridge0: port 3(syz_tun) entered forwarding state [ 117.104678][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 117.129420][ T7119] : entered promiscuous mode [ 117.302405][ T7126] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 117.308082][ T7126] syz_tun: entered promiscuous mode [ 117.315873][ T7126] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.337142][ T7126] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 117.347006][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.360162][ T7126] team0: Port device bond0 added [ 117.365983][ T7131] lo speed is unknown, defaulting to 1000 [ 117.374057][ T7131] lo speed is unknown, defaulting to 1000 [ 117.379224][ T7131] lo speed is unknown, defaulting to 1000 [ 117.387268][ T7131] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.394855][ T7131] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.430875][ T7131] lo speed is unknown, defaulting to 1000 [ 117.435235][ T7131] lo speed is unknown, defaulting to 1000 [ 117.442068][ T7131] lo speed is unknown, defaulting to 1000 [ 117.444589][ T7131] lo speed is unknown, defaulting to 1000 [ 117.481053][ T7134] binder_alloc: 7133: binder_alloc_buf, no vma [ 117.554197][ T7141] bridge0: port 3(syz_tun) entered blocking state [ 117.556613][ T7141] bridge0: port 3(syz_tun) entered disabled state [ 117.561605][ T7141] syz_tun: entered allmulticast mode [ 117.573676][ T7141] syz_tun: entered promiscuous mode [ 117.583108][ T7141] bridge0: port 3(syz_tun) entered blocking state [ 117.585871][ T7141] bridge0: port 3(syz_tun) entered forwarding state [ 117.599985][ T7141] syz_tun: left allmulticast mode [ 117.605542][ T7141] syz_tun: left promiscuous mode [ 117.614024][ T7141] bridge0: port 3(syz_tun) entered disabled state [ 117.687836][ T7141] bridge_slave_0: left allmulticast mode [ 117.690202][ T7141] bridge_slave_0: left promiscuous mode [ 117.699444][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.725928][ T7141] bridge_slave_1: left allmulticast mode [ 117.728174][ T7141] bridge_slave_1: left promiscuous mode [ 117.737457][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.778337][ T7141] bond0: (slave bond_slave_0): Releasing backup interface [ 117.803098][ T7141] bond0: (slave bond_slave_1): Releasing backup interface [ 117.834215][ T7141] team0: Port device team_slave_0 removed [ 117.847610][ T7141] team0: Port device team_slave_1 removed [ 117.850031][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.857548][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.876203][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.878531][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.882683][ T7141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.884905][ T7099] Set syz1 is full, maxelem 65536 reached [ 118.931002][ T6009] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 119.080944][ T6009] usb 8-1: Using ep0 maxpacket: 8 [ 119.084114][ T6009] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.087282][ T6009] usb 8-1: config 0 has no interfaces? [ 119.089920][ T6009] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.100874][ T6009] usb 8-1: config 0 has no interfaces? [ 119.110556][ T6009] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.115139][ T6009] usb 8-1: config 0 has no interfaces? [ 119.142780][ T6009] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.146471][ T6009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.191070][ T6009] usb 8-1: Product: syz [ 119.192898][ T6009] usb 8-1: Manufacturer: syz [ 119.194919][ T6009] usb 8-1: SerialNumber: syz [ 119.211918][ T6009] usb 8-1: config 0 descriptor?? [ 119.272880][ T7176] Set syz1 is full, maxelem 65536 reached [ 119.275870][ T7176] Set syz1 is full, maxelem 65536 reached [ 119.332341][ T61] IPVS: starting estimator thread 0... [ 119.384714][ T7181] bridge0: port 3(syz_tun) entered disabled state [ 119.387653][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.390428][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.419755][ T7151] syz.3.356 uses obsolete (PF_INET,SOCK_PACKET) [ 119.431010][ T7179] IPVS: using max 23 ests per chain, 55200 per kthread [ 119.435168][ T60] usb 8-1: USB disconnect, device number 4 [ 119.501021][ T5983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.657090][ T7193] bridge0: port 3(syz_tun) entered blocking state [ 119.659201][ T7193] bridge0: port 3(syz_tun) entered listening state [ 119.661437][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.664219][ T5983] usb 5-1: config 0 has no interfaces? [ 119.665565][ T7193] bridge0: port 2(bridge_slave_1) entered listening state [ 119.668180][ T5983] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.669938][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.673009][ T5983] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.675416][ T7193] bridge0: port 1(bridge_slave_0) entered listening state [ 119.688710][ T7193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.690367][ T5983] usb 5-1: Manufacturer: syz [ 119.792330][ T7195] syzkaller1: entered promiscuous mode [ 119.794165][ T7195] syzkaller1: entered allmulticast mode [ 119.821580][ T5983] usb 5-1: config 0 descriptor?? [ 120.313498][ T6009] usb 5-1: USB disconnect, device number 4 [ 120.395301][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 120.399025][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 120.595255][ T7233] Bluetooth: MGMT ver 1.23 [ 121.176052][ T7248] veth2: entered promiscuous mode [ 121.178268][ T7248] veth2: entered allmulticast mode [ 121.243649][ T6009] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.394059][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.397437][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.401392][ T6009] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 121.405249][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.411625][ T6009] usb 5-1: config 0 descriptor?? [ 121.442799][ T7262] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 121.453144][ T7262] team0: Failed to send options change via netlink (err -105) [ 121.455540][ T7262] team0: Port device dummy0 added [ 121.463291][ T7262] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 121.466162][ T7262] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.474529][ T7262] team0: Failed to send options change via netlink (err -105) [ 121.478651][ T7262] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.484145][ T7262] team0: Port device dummy0 removed [ 121.488001][ T7262] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.557793][ T1023] kernel read not supported for file /comedi4 (pid: 1023 comm: kworker/2:3) [ 121.613240][ T7272] syzkaller0: entered promiscuous mode [ 121.617182][ T7272] syzkaller0: entered allmulticast mode [ 121.823057][ T6009] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 121.843110][ T6009] cp2112 0003:10C4:EA90.0004: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 122.018276][ T6009] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 122.637151][ T6009] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 122.647102][ T6009] usb 5-1: USB disconnect, device number 5 [ 123.425333][ T5983] IPVS: starting estimator thread 0... [ 123.480884][ T2290] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 123.508055][ T7330] input: syz1 as /devices/virtual/input/input9 [ 123.520937][ T7326] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.632367][ T2290] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 123.635016][ T2290] usb 5-1: config 0 has no interface number 0 [ 123.637297][ T2290] usb 5-1: config 0 interface 41 has no altsetting 0 [ 123.652999][ T2290] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 123.662344][ T2290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.664920][ T2290] usb 5-1: Product: syz [ 123.666348][ T2290] usb 5-1: Manufacturer: syz [ 123.667901][ T2290] usb 5-1: SerialNumber: syz [ 123.703504][ T2290] usb 5-1: config 0 descriptor?? [ 124.068871][ T7347] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 124.234006][ T7347] syz_tun: entered promiscuous mode [ 124.246723][ T7347] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 124.334711][ T2290] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 124.343137][ T2290] usb 5-1: USB disconnect, device number 6 [ 126.530917][ T6009] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 126.800953][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 127.076817][ T6009] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.101350][ T6009] usb 7-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 127.146987][ T6009] usb 7-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.153222][ T6009] usb 7-1: config 12 interface 0 has no altsetting 0 [ 127.178765][ T6009] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 127.183041][ T6009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.186384][ T6009] usb 7-1: Product: syz [ 127.197228][ T6009] usb 7-1: Manufacturer: syz [ 127.205549][ T6009] usb 7-1: SerialNumber: syz [ 127.251520][ T7391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.947964][ T7409] syzkaller0: entered promiscuous mode [ 127.949870][ T7409] syzkaller0: entered allmulticast mode [ 128.586336][ T5945] Bluetooth: hci1: command 0x0405 tx timeout [ 128.962960][ T7417] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 129.348267][ T6009] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.359752][ T6009] usb 7-1: selecting invalid altsetting 0 [ 129.422824][ T6009] usb 7-1: USB disconnect, device number 7 [ 129.484007][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.653300][ T7429] binder: BINDER_SET_CONTEXT_MGR already set [ 129.655361][ T7429] binder: 7428:7429 ioctl 4018620d 80004a80 returned -16 [ 130.031345][ T7437] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 130.098711][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.108353][ T7437] team0: Port device bond0 added [ 131.604165][ T7463] can0: slcan on ttyS3. [ 131.643291][ T7463] capability: warning: `syz.2.453' uses 32-bit capabilities (legacy support in use) [ 131.883023][ T7465] binder: BINDER_SET_CONTEXT_MGR already set [ 131.885558][ T7465] binder: 7464:7465 ioctl 4018620d 80004a80 returned -16 [ 132.006806][ T7459] can0 (unregistered): slcan off ttyS3. [ 132.103809][ T7470] capability: warning: `syz.2.464' uses deprecated v2 capabilities in a way that may be insecure [ 132.681704][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 133.185063][ T5951] Bluetooth: hci4: sending frame failed (-49) [ 133.190466][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 133.573914][ T6027] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 133.601318][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 133.732459][ T6027] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 133.736640][ T6027] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 133.739804][ T6027] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.744127][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.859421][ T7516] kvm: pic: non byte read [ 133.862889][ T7516] kvm: pic: non byte read [ 133.865843][ T7516] kvm: pic: level sensitive irq not supported [ 133.866449][ T7516] kvm: pic: non byte read [ 133.873522][ T7516] kvm: pic: level sensitive irq not supported [ 133.873837][ T7516] kvm: pic: non byte read [ 133.963977][ T6027] usb 8-1: USB disconnect, device number 5 [ 134.241616][ T6028] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 134.395020][ T6028] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.398909][ T6028] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 134.404288][ T6028] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.409360][ T6028] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 134.414049][ T6028] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 134.419519][ T6028] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.423664][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.427050][ T6028] usb 9-1: Product: syz [ 134.428894][ T6028] usb 9-1: Manufacturer: syz [ 134.436642][ T6028] cdc_wdm 9-1:1.0: skipping garbage [ 134.438960][ T6028] cdc_wdm 9-1:1.0: skipping garbage [ 134.446953][ T6028] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 134.449278][ T6028] cdc_wdm 9-1:1.0: Unknown control protocol [ 134.640739][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.642953][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.645080][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.647183][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.649284][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.651341][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.653489][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.655552][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.658125][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.660246][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.662471][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.664516][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.666684][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.668734][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.670848][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.672919][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.675505][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.678088][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.680680][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 134.683292][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 134.692798][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 134.700949][ T6028] usb 9-1: USB disconnect, device number 3 [ 136.541525][ T7544] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 136.707586][ T7553] syzkaller0: entered promiscuous mode [ 136.709415][ T7553] syzkaller0: entered allmulticast mode [ 137.384081][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.386822][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.272704][ T7586] Falling back ldisc for ttyS3. [ 138.511058][ T7598] netlink: 256 bytes leftover after parsing attributes in process `syz.3.504'. [ 139.924801][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 140.303491][ T7620] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 140.491347][ T7623] netlink: 88 bytes leftover after parsing attributes in process `syz.4.516'. [ 140.814685][ T7630] tipc: Started in network mode [ 140.816980][ T7630] tipc: Node identity dea6e5343165, cluster identity 4711 [ 140.820003][ T7630] tipc: Enabled bearer , priority 0 [ 140.837302][ T7630] syzkaller0: entered promiscuous mode [ 140.839623][ T7630] syzkaller0: entered allmulticast mode [ 140.952236][ T7630] tipc: Resetting bearer [ 140.971293][ T7629] tipc: Resetting bearer [ 141.032264][ T7629] tipc: Disabling bearer [ 142.519885][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 142.519897][ T40] audit: type=1804 audit(1766316373.528:257): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.528" name="bus" dev="ramfs" ino=18963 res=1 errno=0 [ 143.491892][ T7675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.598458][ T7682] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 143.675566][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.683079][ T7682] team0: Port device bond0 added [ 143.905316][ T34] IPVS: starting estimator thread 0... [ 144.434686][ T7695] IPVS: using max 43 ests per chain, 103200 per kthread [ 146.999438][ T7735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.557'. [ 147.104134][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 147.107644][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 147.134925][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 147.151699][ T6009] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 147.228033][ T40] audit: type=1326 audit(1766316378.238:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.260964][ T40] audit: type=1326 audit(1766316378.238:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.267564][ T40] audit: type=1326 audit(1766316378.238:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.293207][ T40] audit: type=1326 audit(1766316378.238:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.299795][ T40] audit: type=1326 audit(1766316378.238:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.311465][ T6009] usb 8-1: Using ep0 maxpacket: 16 [ 147.322153][ T6009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.326607][ T6009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.329817][ T6009] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.343537][ T6009] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 147.347281][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.360078][ T6009] usb 8-1: config 0 descriptor?? [ 147.381829][ T40] audit: type=1326 audit(1766316378.248:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.390162][ T40] audit: type=1326 audit(1766316378.248:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.400452][ T40] audit: type=1326 audit(1766316378.248:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 147.805832][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.808273][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.817479][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.820491][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.825618][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.828148][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.830856][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.833293][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.843289][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.845775][ T6009] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 147.862216][ T6009] hid-multitouch 0003:0457:07DA.0005: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 148.008070][ T7781] netlink: 11 bytes leftover after parsing attributes in process `syz.4.579'. [ 148.085695][ T5983] usb 8-1: USB disconnect, device number 6 [ 148.350392][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 148.424667][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 148.427506][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 148.637887][ T7817] 9p: Bad value for 'rfdno' [ 148.686401][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 148.689559][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 148.952868][ T6009] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 148.976193][ T7834] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 148.988080][ T7786] Process accounting resumed [ 149.138176][ T6009] usb 8-1: config 0 has an invalid interface number: 182 but max is 1 [ 149.145633][ T6009] usb 8-1: config 0 has no interface number 1 [ 149.156248][ T6009] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 149.161298][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.179247][ T6009] usb 8-1: config 0 descriptor?? [ 149.712203][ T7850] 9p: Bad value for 'rfdno' [ 150.184105][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 150.187918][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 150.191065][ C3] bridge0: port 3(syz_tun) entered learning state [ 151.959691][ T5983] usb 8-1: USB disconnect, device number 7 [ 153.755419][ T7931] __nla_validate_parse: 6 callbacks suppressed [ 153.755430][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 153.761110][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 153.763940][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 154.280930][ T6028] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 154.493950][ T6028] usb 8-1: config 0 has no interfaces? [ 154.500193][ T6028] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.510920][ T6028] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.515007][ T6028] usb 8-1: Manufacturer: syz [ 154.593283][ T6028] usb 8-1: config 0 descriptor?? [ 168.521380][ T53] usb 8-1: USB disconnect, device number 8 [ 180.263086][ C3] bridge0: port 3(syz_tun) entered forwarding state [ 180.265211][ C3] bridge0: topology change detected, propagating [ 180.267388][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.269680][ C3] bridge0: topology change detected, propagating [ 180.271787][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.274032][ C3] bridge0: topology change detected, propagating [ 180.425837][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 180.427783][ T5945] Bluetooth: hci2: command 0x0406 tx timeout [ 184.956632][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.973773][ T5299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.986519][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.998263][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.022927][ T5299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.044667][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.267330][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.964924][ T5958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.991089][ T5958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.994007][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.107902][ T5950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.215782][ T5950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.256145][ T5950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.433694][ T5955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.496663][ T5955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.506981][ T5950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.615658][ T5958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.660037][ T5958] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.805937][ T5958] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.883458][ T5958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.964132][ C1] sched: DL replenish lagged too much [ 193.291825][ T6981] bridge0: port 3(syz_tun) entered disabled state [ 193.318633][ T5945] Bluetooth: hci4: command tx timeout [ 193.319121][ T64] Bluetooth: hci6: command tx timeout [ 193.324210][ T6981] syz_tun (unregistering): left allmulticast mode [ 193.326325][ T6981] syz_tun (unregistering): left promiscuous mode [ 193.328374][ T6981] bridge0: port 3(syz_tun) entered disabled state [ 193.379659][ T6398] bond0: (slave syz_tun): Releasing backup interface [ 193.395429][ T6825] bond0: (slave syz_tun): Releasing backup interface [ 193.508543][ T94] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.607559][ T94] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.695053][ T94] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.776064][ T7969] chnl_net:caif_netlink_parms(): no params data found [ 193.792169][ T7974] chnl_net:caif_netlink_parms(): no params data found [ 193.806610][ T94] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.838052][ T7973] chnl_net:caif_netlink_parms(): no params data found [ 193.894656][ T7970] chnl_net:caif_netlink_parms(): no params data found [ 193.959058][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.963639][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.966666][ T7969] bridge_slave_0: entered allmulticast mode [ 193.970473][ T7969] bridge_slave_0: entered promiscuous mode [ 193.995952][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.998953][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.001981][ T7969] bridge_slave_1: entered allmulticast mode [ 194.004549][ T7969] bridge_slave_1: entered promiscuous mode [ 194.032122][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.034396][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.036687][ T7974] bridge_slave_0: entered allmulticast mode [ 194.039358][ T7974] bridge_slave_0: entered promiscuous mode [ 194.071656][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.074724][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.077780][ T7974] bridge_slave_1: entered allmulticast mode [ 194.081951][ T7974] bridge_slave_1: entered promiscuous mode [ 194.093855][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.125680][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.128936][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.132305][ T7973] bridge_slave_0: entered allmulticast mode [ 194.136168][ T7973] bridge_slave_0: entered promiscuous mode [ 194.140303][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.159861][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.162300][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.164525][ T7973] bridge_slave_1: entered allmulticast mode [ 194.167090][ T7973] bridge_slave_1: entered promiscuous mode [ 194.206997][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.220180][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.224264][ T7969] team0: Port device team_slave_0 added [ 194.227398][ T7969] team0: Port device team_slave_1 added [ 194.237641][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.239902][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.242323][ T7970] bridge_slave_0: entered allmulticast mode [ 194.244913][ T7970] bridge_slave_0: entered promiscuous mode [ 194.251379][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.264064][ T94] bridge_slave_1: left allmulticast mode [ 194.266476][ T94] bridge_slave_1: left promiscuous mode [ 194.268962][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.275677][ T94] bridge_slave_0: left allmulticast mode [ 194.278042][ T94] bridge_slave_0: left promiscuous mode [ 194.280052][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.485644][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.489653][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.493906][ T94] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 194.498050][ T94] bond0 (unregistering): Released all slaves [ 194.509871][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.512552][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.515464][ T7970] bridge_slave_1: entered allmulticast mode [ 194.518693][ T7970] bridge_slave_1: entered promiscuous mode [ 194.523697][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.538969][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.541995][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.552454][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.570455][ T7974] team0: Port device team_slave_0 added [ 194.578634][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.581498][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.592077][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.616341][ T7973] team0: Port device team_slave_0 added [ 194.619688][ T7974] team0: Port device team_slave_1 added [ 194.635327][ T7970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.639321][ T7973] team0: Port device team_slave_1 added [ 194.667943][ T7970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.676689][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.679132][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.687183][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.691360][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.693597][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.701588][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.722020][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.724228][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.732431][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.738362][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.740542][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.750369][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.780364][ T7969] hsr_slave_0: entered promiscuous mode [ 194.783633][ T7969] hsr_slave_1: entered promiscuous mode [ 194.800364][ T7970] team0: Port device team_slave_0 added [ 194.804172][ T7970] team0: Port device team_slave_1 added [ 194.835890][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.838740][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.849235][ T7970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.869135][ T7973] hsr_slave_0: entered promiscuous mode [ 194.872541][ T7973] hsr_slave_1: entered promiscuous mode [ 194.875504][ T7973] debugfs: 'hsr0' already exists in 'hsr' [ 194.877945][ T7973] Cannot create hsr debugfs directory [ 194.895705][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.898553][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.909124][ T7970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.930008][ T7974] hsr_slave_0: entered promiscuous mode [ 194.932867][ T7974] hsr_slave_1: entered promiscuous mode [ 194.935868][ T7974] debugfs: 'hsr0' already exists in 'hsr' [ 194.938285][ T7974] Cannot create hsr debugfs directory [ 194.975959][ T94] hsr_slave_0: left promiscuous mode [ 194.978740][ T94] hsr_slave_1: left promiscuous mode [ 194.982369][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.985422][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.988978][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.992172][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.003120][ T94] veth1_macvtap: left promiscuous mode [ 195.005462][ T94] veth0_macvtap: left promiscuous mode [ 195.007817][ T94] veth1_vlan: left promiscuous mode [ 195.010268][ T94] veth0_vlan: left promiscuous mode [ 195.305045][ T94] team0 (unregistering): Port device team_slave_1 removed [ 195.325064][ T94] team0 (unregistering): Port device team_slave_0 removed [ 195.381714][ T5955] Bluetooth: hci0: command tx timeout [ 195.381767][ T64] Bluetooth: hci4: command tx timeout [ 195.391135][ T5955] Bluetooth: hci6: command tx timeout [ 195.394013][ T64] Bluetooth: hci5: command tx timeout [ 195.618842][ T7970] hsr_slave_0: entered promiscuous mode [ 195.622640][ T7970] hsr_slave_1: entered promiscuous mode [ 195.625150][ T7970] debugfs: 'hsr0' already exists in 'hsr' [ 195.627216][ T7970] Cannot create hsr debugfs directory [ 195.905502][ T7969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 195.922540][ T7969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 195.933359][ T7969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 195.944376][ T7969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.979104][ T7973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.989418][ T7973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.004728][ T7973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.012409][ T7973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.057784][ T7974] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 196.069632][ T7974] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 196.076676][ T7974] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 196.081294][ T7974] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 196.120755][ T94] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.175288][ T94] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.181569][ T7970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.188224][ T7970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.199257][ T7970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.214046][ T7970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.246737][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.264684][ T94] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.300244][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.312084][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.314438][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.319758][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.328534][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.330908][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.349531][ T94] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.378631][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.397750][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.405075][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.407393][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.418136][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.420466][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.460487][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.508915][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.512076][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.546196][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.548500][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.825596][ T94] team0: Port device bond0 removed [ 196.828596][ T94] bond0 (unregistering): Released all slaves [ 196.860216][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.875768][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.945821][ T7970] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.956136][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.958866][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.982339][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.984708][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.033337][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.127027][ T94] hsr_slave_0: left promiscuous mode [ 197.130030][ T94] hsr_slave_1: left promiscuous mode [ 197.152443][ T94] veth1_macvtap: left promiscuous mode [ 197.154361][ T94] veth0_macvtap: left promiscuous mode [ 197.156554][ T94] veth1_vlan: left promiscuous mode [ 197.158918][ T94] veth0_vlan: left promiscuous mode [ 197.460959][ T64] Bluetooth: hci4: command tx timeout [ 197.461214][ T5955] Bluetooth: hci6: command tx timeout [ 197.461224][ T5945] Bluetooth: hci0: command tx timeout [ 197.471033][ T5955] Bluetooth: hci5: command tx timeout [ 197.768062][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.771860][ T7969] veth0_vlan: entered promiscuous mode [ 197.781959][ T7969] veth1_vlan: entered promiscuous mode [ 197.813203][ T7969] veth0_macvtap: entered promiscuous mode [ 197.826461][ T7969] veth1_macvtap: entered promiscuous mode [ 197.863542][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.907477][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.916735][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.946569][ T1162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.950252][ T1162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.959009][ T1162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.964653][ T1162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.968904][ T7973] veth0_vlan: entered promiscuous mode [ 197.980046][ T7973] veth1_vlan: entered promiscuous mode [ 198.054191][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.060580][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.085154][ T7974] veth0_vlan: entered promiscuous mode [ 198.095773][ T7973] veth0_macvtap: entered promiscuous mode [ 198.095888][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.099971][ T7973] veth1_macvtap: entered promiscuous mode [ 198.101200][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.113076][ T94] IPVS: stop unused estimator thread 0... [ 198.117687][ T7974] veth1_vlan: entered promiscuous mode [ 198.126119][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.140676][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.170076][ T1141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.173394][ T1141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.179147][ T7974] veth0_macvtap: entered promiscuous mode [ 198.182940][ T1141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.191950][ T7974] veth1_macvtap: entered promiscuous mode [ 198.194342][ T1141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.197422][ T7970] veth0_vlan: entered promiscuous mode [ 198.226595][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.237159][ T7970] veth1_vlan: entered promiscuous mode [ 198.241679][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.246296][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.250788][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.262527][ T6060] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.265907][ T6060] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.275391][ T6060] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.279125][ T6060] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.286600][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.288951][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.338625][ T7970] veth0_macvtap: entered promiscuous mode [ 198.351466][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.352074][ T7970] veth1_macvtap: entered promiscuous mode [ 198.354027][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.374540][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.403691][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.408670][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.411913][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.416259][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.419240][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.424604][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.428765][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.492056][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.494862][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.557330][ T8110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.564541][ T8110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.637045][ T89] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.644914][ T89] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.649437][ T89] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.663600][ T89] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.747642][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.750122][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.796041][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.798687][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.823793][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.825808][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.542542][ T5955] Bluetooth: hci4: command tx timeout [ 199.542565][ T5945] Bluetooth: hci6: command tx timeout [ 199.542831][ T64] Bluetooth: hci5: command tx timeout [ 199.550974][ T5945] Bluetooth: hci0: command tx timeout [ 199.712447][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 199.729443][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 199.742625][ T8160] loop6: detected capacity change from 0 to 7 [ 199.760042][ T8160] Dev loop6: unable to read RDB block 7 [ 199.762351][ T8160] loop6: unable to read partition table [ 199.768823][ T8160] loop6: partition table beyond EOD, truncated [ 199.771440][ T8160] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.798423][ T5348] Dev loop6: unable to read RDB block 7 [ 199.800222][ T5348] loop6: unable to read partition table [ 199.802532][ T5348] loop6: partition table beyond EOD, truncated [ 199.823361][ T8163] [ 199.824172][ T8163] ====================================================== [ 199.826318][ T8163] WARNING: possible circular locking dependency detected [ 199.828440][ T8163] syzkaller #0 Not tainted [ 199.829900][ T8163] ------------------------------------------------------ [ 199.832370][ T8163] syz.6.652/8163 is trying to acquire lock: [ 199.834329][ T8163] ffff88806e69a358 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 199.837924][ T8163] [ 199.837924][ T8163] but task is already holding lock: [ 199.840698][ T8163] ffff88806e698ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 199.844388][ T8163] [ 199.844388][ T8163] which lock already depends on the new lock. [ 199.844388][ T8163] [ 199.848551][ T8163] [ 199.848551][ T8163] the existing dependency chain (in reverse order) is: [ 199.852190][ T8163] [ 199.852190][ T8163] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 199.854754][ T8163] lock_sock_nested+0x41/0xf0 [ 199.856381][ T8163] smc_listen_out+0x202/0x4a0 [ 199.857972][ T8163] smc_listen_work+0x5a3/0x50b0 [ 199.859621][ T8163] process_one_work+0x9ba/0x1b20 [ 199.861344][ T8163] worker_thread+0x6c8/0xf10 [ 199.862925][ T8163] kthread+0x3c5/0x780 [ 199.864455][ T8163] ret_from_fork+0x983/0xb10 [ 199.866058][ T8163] ret_from_fork_asm+0x1a/0x30 [ 199.867678][ T8163] [ 199.867678][ T8163] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 199.870780][ T8163] __lock_acquire+0x1669/0x2890 [ 199.872477][ T8163] lock_acquire+0x179/0x330 [ 199.874005][ T8163] __flush_work+0x4e4/0xcc0 [ 199.875564][ T8163] cancel_work_sync+0xd1/0xf0 [ 199.877173][ T8163] smc_clcsock_release+0x5f/0xe0 [ 199.878836][ T8163] __smc_release+0x5c2/0x880 [ 199.880397][ T8163] smc_close_non_accepted+0xda/0x200 [ 199.882226][ T8163] smc_close_active+0xc3c/0x1070 [ 199.883906][ T8163] __smc_release+0x634/0x880 [ 199.885476][ T8163] smc_release+0x1fc/0x620 [ 199.887023][ T8163] __sock_release+0xb3/0x270 [ 199.888598][ T8163] sock_close+0x1c/0x30 [ 199.890066][ T8163] __fput+0x402/0xb70 [ 199.891509][ T8163] task_work_run+0x150/0x240 [ 199.893113][ T8163] exit_to_user_mode_loop+0xfb/0x540 [ 199.894930][ T8163] __do_fast_syscall_32+0x4a4/0x680 [ 199.896685][ T8163] do_fast_syscall_32+0x32/0x80 [ 199.898324][ T8163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.900380][ T8163] [ 199.900380][ T8163] other info that might help us debug this: [ 199.900380][ T8163] [ 199.903962][ T8163] Possible unsafe locking scenario: [ 199.903962][ T8163] [ 199.906283][ T8163] CPU0 CPU1 [ 199.907934][ T8163] ---- ---- [ 199.909580][ T8163] lock(sk_lock-AF_SMC/1); [ 199.911022][ T8163] lock((work_completion)(&new_smc->smc_listen_work)); [ 199.913905][ T8163] lock(sk_lock-AF_SMC/1); [ 199.916035][ T8163] lock((work_completion)(&new_smc->smc_listen_work)); [ 199.918213][ T8163] [ 199.918213][ T8163] *** DEADLOCK *** [ 199.918213][ T8163] [ 199.920694][ T8163] 3 locks held by syz.6.652/8163: [ 199.922282][ T8163] #0: ffff8880123ed288 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 199.925574][ T8163] #1: ffff88806e698ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 199.928445][ T8163] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 199.931361][ T8163] [ 199.931361][ T8163] stack backtrace: [ 199.933496][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.6.652 Not tainted syzkaller #0 PREEMPT(full) [ 199.933511][ T8163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.933519][ T8163] Call Trace: [ 199.933523][ T8163] [ 199.933528][ T8163] dump_stack_lvl+0x116/0x1f0 [ 199.933545][ T8163] print_circular_bug+0x275/0x340 [ 199.933562][ T8163] check_noncircular+0x146/0x160 [ 199.933580][ T8163] __lock_acquire+0x1669/0x2890 [ 199.933592][ T8163] lock_acquire+0x179/0x330 [ 199.933602][ T8163] ? __flush_work+0x4d0/0xcc0 [ 199.933615][ T8163] ? mark_held_locks+0x49/0x80 [ 199.933624][ T8163] ? __flush_work+0x4d0/0xcc0 [ 199.933635][ T8163] __flush_work+0x4e4/0xcc0 [ 199.933646][ T8163] ? __flush_work+0x4d0/0xcc0 [ 199.933658][ T8163] ? __pfx___flush_work+0x10/0x10 [ 199.933670][ T8163] ? __pfx_wq_barrier_func+0x10/0x10 [ 199.933687][ T8163] ? do_raw_spin_lock+0x12c/0x2b0 [ 199.933698][ T8163] ? __pfx___might_resched+0x10/0x10 [ 199.933712][ T8163] cancel_work_sync+0xd1/0xf0 [ 199.933725][ T8163] smc_clcsock_release+0x5f/0xe0 [ 199.933738][ T8163] __smc_release+0x5c2/0x880 [ 199.933750][ T8163] ? __pfx_sock_def_readable+0x10/0x10 [ 199.933763][ T8163] smc_close_non_accepted+0xda/0x200 [ 199.933776][ T8163] smc_close_active+0xc3c/0x1070 [ 199.933789][ T8163] __smc_release+0x634/0x880 [ 199.933801][ T8163] smc_release+0x1fc/0x620 [ 199.933812][ T8163] ? security_file_free+0xba/0x180 [ 199.933825][ T8163] __sock_release+0xb3/0x270 [ 199.933838][ T8163] ? __pfx_sock_close+0x10/0x10 [ 199.933850][ T8163] sock_close+0x1c/0x30 [ 199.933862][ T8163] __fput+0x402/0xb70 [ 199.933872][ T8163] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.933885][ T8163] task_work_run+0x150/0x240 [ 199.933896][ T8163] ? __pfx_task_work_run+0x10/0x10 [ 199.933911][ T8163] ? __do_sys_close_range+0x278/0x730 [ 199.933927][ T8163] exit_to_user_mode_loop+0xfb/0x540 [ 199.933940][ T8163] __do_fast_syscall_32+0x4a4/0x680 [ 199.933957][ T8163] do_fast_syscall_32+0x32/0x80 [ 199.933967][ T8163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.933980][ T8163] RIP: 0023:0xf702d579 [ 199.933989][ T8163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.933999][ T8163] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 00000000000001b4 [ 199.934009][ T8163] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 199.934015][ T8163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.934020][ T8163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.934026][ T8163] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 199.934032][ T8163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.934041][ T8163] [ 200.714737][ T7955] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.946332][ T7955] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.004006][ T7955] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.063657][ T7955] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.175951][ T7955] bridge_slave_1: left allmulticast mode [ 201.180959][ T7955] bridge_slave_1: left promiscuous mode [ 201.182864][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.211114][ T7955] bridge_slave_0: left allmulticast mode [ 201.213295][ T7955] bridge_slave_0: left promiscuous mode [ 201.215366][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.436663][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.440521][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.589180][ T7955] bond0 (unregistering): Released all slaves [ 201.877857][ T5337] klogd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 201.885571][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 201.885592][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.885602][ T5337] Call Trace: [ 201.885608][ T5337] [ 201.885613][ T5337] dump_stack_lvl+0x16c/0x1f0 [ 201.885640][ T5337] dump_header+0x101/0x960 [ 201.885656][ T5337] oom_kill_process+0x176/0x910 [ 201.885671][ T5337] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 201.885687][ T5337] out_of_memory+0x1407/0x1700 [ 201.885705][ T5337] ? __pfx_out_of_memory+0x10/0x10 [ 201.885722][ T5337] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 201.885743][ T5337] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.885765][ T5337] ? scsi_queue_rq+0xe41/0x3a80 [ 201.885779][ T5337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.885801][ T5337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.885824][ T5337] ? policy_nodemask+0xea/0x4e0 [ 201.885846][ T5337] alloc_pages_mpol+0x1fb/0x550 [ 201.885867][ T5337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 201.885883][ T5337] ? swap_entry_swapped+0x1df/0x290 [ 201.885898][ T5337] ? __pfx_swap_entry_swapped+0x10/0x10 [ 201.885913][ T5337] folio_alloc_mpol_noprof+0x36/0x2f0 [ 201.885923][ T5337] __read_swap_cache_async+0x20a/0x500 [ 201.885936][ T5337] ? __pfx___read_swap_cache_async+0x10/0x10 [ 201.885949][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.885964][ T5337] swap_cluster_readahead+0x432/0x770 [ 201.885977][ T5337] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 201.885990][ T5337] ? __update_load_avg_cfs_rq+0x5fc/0x8d0 [ 201.886007][ T5337] ? kvm_sched_clock_read+0x11/0x20 [ 201.886021][ T5337] ? sched_clock+0x38/0x60 [ 201.886036][ T5337] ? get_vma_policy+0x242/0x3c0 [ 201.886045][ T5337] swapin_readahead+0x160/0x1220 [ 201.886057][ T5337] ? finish_task_switch.isra.0+0x202/0xbd0 [ 201.886071][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886084][ T5337] ? lock_release+0x201/0x2d0 [ 201.886093][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886106][ T5337] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 201.886123][ T5337] ? __pfx_swapin_readahead+0x10/0x10 [ 201.886134][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886147][ T5337] ? swap_cache_get_folio+0x267/0x8e0 [ 201.886158][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886171][ T5337] ? swap_cache_get_folio+0x267/0x8e0 [ 201.886181][ T5337] ? lock_release+0x201/0x2d0 [ 201.886190][ T5337] ? swap_cache_get_folio+0x267/0x8e0 [ 201.886201][ T5337] ? swap_cache_get_folio+0x293/0x8e0 [ 201.886212][ T5337] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 201.886223][ T5337] ? __pfx_get_swap_device+0x10/0x10 [ 201.886237][ T5337] ? lock_release+0x201/0x2d0 [ 201.886246][ T5337] ? do_swap_page+0x962/0x64a0 [ 201.886255][ T5337] do_swap_page+0x962/0x64a0 [ 201.886266][ T5337] ? page_table_check_set+0x7e7/0xa40 [ 201.886280][ T5337] ? xas_find+0x303/0x890 [ 201.886295][ T5337] ? __pfx_do_swap_page+0x10/0x10 [ 201.886305][ T5337] ? __pfx_default_wake_function+0x10/0x10 [ 201.886318][ T5337] ? lock_acquire+0x2cd/0x330 [ 201.886327][ T5337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.886342][ T5337] ? ___pte_offset_map+0x50/0x380 [ 201.886355][ T5337] ? ___pte_offset_map+0x175/0x380 [ 201.886369][ T5337] __handle_mm_fault+0x19cb/0x2bb0 [ 201.886381][ T5337] ? __pfx___handle_mm_fault+0x10/0x10 [ 201.886394][ T5337] ? find_vma+0xbf/0x140 [ 201.886407][ T5337] ? __pfx_find_vma+0x10/0x10 [ 201.886420][ T5337] handle_mm_fault+0x3fe/0xad0 [ 201.886431][ T5337] do_user_addr_fault+0x7a6/0x1370 [ 201.886444][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886458][ T5337] exc_page_fault+0x64/0xc0 [ 201.886472][ T5337] asm_exc_page_fault+0x26/0x30 [ 201.886482][ T5337] RIP: 0010:rseq_set_ids_get_csaddr+0x9e/0x240 [ 201.886494][ T5337] Code: e8 e7 38 c9 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 76 01 00 00 44 8b 7d 00 <44> 89 3b e8 ba 38 c9 ff 44 89 7b 04 e8 b1 38 c9 ff 44 89 73 14 e8 [ 201.886504][ T5337] RSP: 0000:ffffc90003167e10 EFLAGS: 00050246 [ 201.886513][ T5337] RAX: 0000000000000000 RBX: 00007f033f2ccae0 RCX: ffffffff81f51fd4 [ 201.886519][ T5337] RDX: 1ffff9200062cfce RSI: ffffffff81f51fd9 RDI: 0000000000000001 [ 201.886525][ T5337] RBP: ffffc90003167e70 R08: 0000000000000001 R09: 0000000000000000 [ 201.886531][ T5337] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003167e90 [ 201.886537][ T5337] R13: ffff888024adc980 R14: 0000000000000000 R15: 0000000000000000 [ 201.886544][ T5337] ? rseq_set_ids_get_csaddr+0x74/0x240 [ 201.886555][ T5337] ? rseq_set_ids_get_csaddr+0x79/0x240 [ 201.886571][ T5337] ? rcu_is_watching+0x12/0xc0 [ 201.886585][ T5337] __rseq_handle_slowpath+0x250/0x3c0 [ 201.886596][ T5337] ? __pfx___rseq_handle_slowpath+0x10/0x10 [ 201.886609][ T5337] irqentry_exit+0x3de/0x8c0 [ 201.886623][ T5337] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 201.886639][ T5337] asm_exc_page_fault+0x26/0x30 [ 201.886649][ T5337] RIP: 0033:0x7f033f49417d [ 201.886661][ T5337] Code: Unable to access opcode bytes at 0x7f033f494153. [ 201.886666][ T5337] RSP: 002b:00007ffd1f348ab0 EFLAGS: 00010246 [ 201.886673][ T5337] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 201.886679][ T5337] RDX: 0000000000000001 RSI: 00007f033f613dfe RDI: 0000000000000006 [ 201.886685][ T5337] RBP: 00007ffd1f348fd0 R08: 1999999999999999 R09: 0000000000000000 [ 201.886691][ T5337] R10: 0000000000000000 R11: 00007f033f50d8e0 R12: 00007ffd1f348fe8 [ 201.886697][ T5337] R13: 00007f033f613dfe R14: 0000000000000002 R15: 00007f033f6364d1 [ 201.886706][ T5337] [ 201.886709][ T5337] Mem-Info: [ 201.930936][ T8141] syz.7.648: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 201.931551][ T5337] active_anon:0 inactive_anon:218 isolated_anon:0 [ 201.931551][ T5337] active_file:28 inactive_file:64 isolated_file:0 [ 201.931551][ T5337] unevictable:1768 dirty:0 writeback:0 [ 201.931551][ T5337] slab_reclaimable:6306 slab_unreclaimable:59784 [ 201.931551][ T5337] mapped:10251 shmem:1768 pagetables:1325 [ 201.931551][ T5337] sec_pagetables:317 bounce:0 [ 201.931551][ T5337] kernel_misc_reclaimable:0 [ 201.931551][ T5337] free:6453 free_pcp:2308 free_cma:0 [ 201.933733][ T8141] ,cpuset= [ 201.935641][ T5337] Node 0 active_anon:0kB inactive_anon:64kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10148kB pagetables:1604kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 201.938024][ T8141] / [ 201.939679][ T5337] Node 1 active_anon:0kB inactive_anon:808kB active_file:120kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40988kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4064kB pagetables:3696kB sec_pagetables:112kB all_unreclaimable? yes Balloon:0kB [ 201.950524][ T8141] ,mems_allowed=0-1 [ 201.955832][ T5337] Node 0 [ 201.957723][ T8141] [ 201.959459][ T5337] DMA free:1532kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 201.962631][ T8141] CPU: 3 UID: 0 PID: 8141 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT(full) [ 201.962649][ T8141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.962657][ T8141] Call Trace: [ 201.962662][ T8141] [ 201.962667][ T8141] dump_stack_lvl+0x16c/0x1f0 [ 201.962690][ T8141] warn_alloc+0x248/0x3a0 [ 201.962705][ T8141] ? __pfx_warn_alloc+0x10/0x10 [ 201.962719][ T8141] ? schedule_timeout+0x160/0x290 [ 201.962734][ T8141] ? __pfx_schedule_timeout+0x10/0x10 [ 201.962748][ T8141] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 201.962768][ T8141] ? __pfx_process_timeout+0x10/0x10 [ 201.962789][ T8141] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 201.962808][ T8141] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.962823][ T8141] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.962842][ T8141] ? policy_nodemask+0xea/0x4e0 [ 201.962864][ T8141] ? lock_release+0x201/0x2d0 [ 201.962877][ T8141] alloc_pages_bulk_noprof+0x77a/0x1410 [ 201.962891][ T8141] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 201.962910][ T8141] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 201.962925][ T8141] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 201.962942][ T8141] ? __free_frozen_pages+0x817/0x1170 [ 201.962956][ T8141] __kasan_populate_vmalloc+0xfb/0x220 [ 201.962973][ T8141] alloc_vmap_area+0x98d/0x2a50 [ 201.962994][ T8141] ? __pfx_alloc_vmap_area+0x10/0x10 [ 201.963021][ T8141] __get_vm_area_node+0x1ca/0x330 [ 201.963040][ T8141] ? arena_map_alloc+0x29a/0x550 [ 201.963057][ T8141] get_vm_area+0x73/0xa0 [ 201.963074][ T8141] ? arena_map_alloc+0x29a/0x550 [ 201.963090][ T8141] arena_map_alloc+0x29a/0x550 [ 201.963106][ T8141] ? __pfx_arena_map_mem_usage+0x10/0x10 [ 201.963122][ T8141] map_create+0x65c/0x2a10 [ 201.963142][ T8141] ? __pfx_map_create+0x10/0x10 [ 201.963158][ T8141] ? __might_fault+0xe3/0x190 [ 201.963172][ T8141] ? __might_fault+0xe3/0x190 [ 201.963184][ T8141] ? __might_fault+0x13b/0x190 [ 201.963200][ T8141] __sys_bpf+0x3d9d/0x4980 [ 201.963210][ T8141] ? tomoyo_path_number_perm+0x18d/0x580 [ 201.963226][ T8141] ? __pfx___sys_bpf+0x10/0x10 [ 201.963240][ T8141] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.963260][ T8141] ? kcov_ioctl+0x265/0x6e0 [ 201.963276][ T8141] ? kcov_ioctl+0x265/0x6e0 [ 201.963294][ T8141] __ia32_sys_bpf+0x76/0xe0 [ 201.963305][ T8141] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.963325][ T8141] __do_fast_syscall_32+0xe8/0x680 [ 201.963345][ T8141] do_fast_syscall_32+0x32/0x80 [ 201.963356][ T8141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.963372][ T8141] RIP: 0023:0xf7fb1579 [ 201.963382][ T8141] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.963395][ T8141] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 201.963408][ T8141] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080003940 [ 201.963416][ T8141] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.963424][ T8141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.963431][ T8141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.963438][ T8141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.963450][ T8141] [ 201.963455][ T8141] Mem-Info: [ 201.965044][ T5337] lowmem_reserve[]: [ 201.966855][ T8141] active_anon:9 inactive_anon:156 isolated_anon:0 [ 201.966855][ T8141] active_file:9 inactive_file:83 isolated_file:0 [ 201.966855][ T8141] unevictable:1768 dirty:0 writeback:0 [ 201.966855][ T8141] slab_reclaimable:6306 slab_unreclaimable:59784 [ 201.966855][ T8141] mapped:10251 shmem:1768 pagetables:1325 [ 201.966855][ T8141] sec_pagetables:317 bounce:0 [ 201.966855][ T8141] kernel_misc_reclaimable:0 [ 201.966855][ T8141] free:6434 free_pcp:2316 free_cma:0 [ 201.968619][ T5337] 0 289 289 [ 201.970536][ T8141] Node 0 active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10148kB pagetables:1604kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 201.972941][ T5337] 289 [ 201.973613][ T8141] Node 1 active_anon:356kB inactive_anon:184kB active_file:88kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40988kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4064kB pagetables:3696kB sec_pagetables:112kB all_unreclaimable? yes Balloon:0kB [ 201.976039][ T5337] 289 [ 201.976541][ T8141] Node 0 [ 201.979248][ T5337] [ 201.979608][ T8141] DMA free:1532kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 201.981220][ T5337] Node 0 DMA32 free:7996kB boost:8192kB min:21524kB low:24856kB high:28188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:12kB active_file:24kB inactive_file:112kB unevictable:3536kB writepending:0kB zspages:648kB present:1032196kB managed:296816kB mlocked:0kB bounce:0kB free_pcp:1060kB local_pcp:48kB free_cma:0kB [ 201.983300][ T8141] lowmem_reserve[]: [ 201.985276][ T5337] lowmem_reserve[]: [ 201.986496][ T8141] 0 [ 201.987994][ T5337] 0 [ 201.989563][ T8141] 289 [ 201.991452][ T5337] 0 [ 201.992751][ T8141] 289 289 [ 201.994068][ T5337] 0 [ 201.995488][ T8141] 289 [ 201.996975][ T5337] 0 0 [ 201.998503][ T8141] Node 0 DMA32 free:7996kB boost:8192kB min:21524kB low:24856kB high:28188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:12kB active_file:24kB inactive_file:112kB unevictable:3536kB writepending:0kB zspages:648kB present:1032196kB managed:296816kB mlocked:0kB bounce:0kB free_pcp:1060kB local_pcp:956kB free_cma:0kB [ 202.000168][ T5337] [ 202.003220][ T8141] lowmem_reserve[]: [ 202.003601][ T5337] Node 1 [ 202.005449][ T8141] 0 0 [ 202.011900][ T5337] DMA32 free:16144kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:844kB active_file:0kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:4256kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:8112kB local_pcp:4kB free_cma:0kB [ 202.017234][ T8141] 0 [ 202.019809][ T5337] lowmem_reserve[]: [ 202.022295][ T8141] 0 0 [ 202.022307][ T8141] Node 1 DMA32 free:16144kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:748kB active_file:176kB inactive_file:56kB unevictable:3536kB writepending:0kB zspages:4256kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:8112kB local_pcp:8060kB free_cma:0kB [ 202.022338][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 202.022355][ T8141] Node 0 DMA: 0*4kB 1*8kB (U) 5*16kB [ 202.025000][ T5337] 0 [ 202.027441][ T8141] (U) 1*32kB [ 202.029237][ T5337] 0 [ 202.031002][ T8141] (U) [ 202.032751][ T5337] 0 [ 202.034391][ T8141] 4*64kB (U) 3*128kB (U) 1*256kB (U) 1*512kB [ 202.036854][ T5337] 0 [ 202.038288][ T8141] (U) 0*1024kB 0*2048kB 0*4096kB = 1528kB [ 202.038309][ T8141] Node 0 [ 202.040979][ T5337] 0 [ 202.042268][ T8141] DMA32: [ 202.043632][ T5337] [ 202.045727][ T8141] 99*4kB [ 202.047601][ T5337] Node 0 [ 202.050043][ T8141] (ME) 61*8kB [ 202.052973][ T5337] DMA: [ 202.060110][ T8141] (ME) [ 202.060512][ T5337] 0*4kB [ 202.061815][ T8141] 37*16kB [ 202.062911][ T5337] 1*8kB [ 202.065751][ T8141] (ME) 44*32kB (UME) 28*64kB (ME) 15*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB [ 202.085556][ T5337] (U) [ 202.093542][ T8141] 0*4096kB = 7876kB [ 202.093562][ T8141] Node 1 DMA32: 148*4kB (M) 151*8kB (UME) 157*16kB (UME) 109*32kB (UME) [ 202.094621][ T5337] 5*16kB (U) 1*32kB (U) [ 202.110882][ T8141] 38*64kB [ 202.117393][ T5337] 4*64kB (U) 3*128kB (U) 1*256kB (U) [ 202.385604][ T8141] (ME) 19*128kB (UM) 7*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 15992kB [ 202.388079][ T5337] 1*512kB (U) [ 202.390783][ T8141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.392029][ T5337] 0*1024kB 0*2048kB [ 202.399473][ T8141] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 202.399504][ T5337] 0*4096kB [ 202.400768][ T8141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.404449][ T5337] = 1528kB [ 202.405603][ T8141] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 202.408608][ T5337] Node 0 DMA32: [ 202.409801][ T8141] 2048 total pagecache pages [ 202.412638][ T5337] 99*4kB (ME) 61*8kB (ME) 37*16kB [ 202.420471][ T8141] 190 pages in swap cache [ 202.420494][ T5337] (ME) [ 202.422414][ T8141] Free swap = 104980kB [ 202.423802][ T5337] 43*32kB [ 202.424818][ T8141] Total swap = 124996kB [ 202.426559][ T5337] (ME) [ 202.427540][ T8141] 524155 pages RAM [ 202.427545][ T8141] 0 pages HighMem/MovableOnly [ 202.429164][ T5337] 29*64kB [ 202.430061][ T8141] 209058 pages reserved [ 202.430067][ T8141] 0 pages cma reserved [ 202.431702][ T5337] (UME) 15*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7396kB [ 202.444021][ T5337] Node 1 DMA32: 148*4kB (M) 151*8kB (UME) 157*16kB (UME) 109*32kB (UME) 38*64kB (ME) 19*128kB (UM) 7*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 15992kB [ 202.450276][ T5337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.454082][ T5337] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 202.457750][ T5337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.462275][ T5337] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 202.466026][ T5337] 2048 total pagecache pages [ 202.467896][ T5337] 190 pages in swap cache [ 202.469710][ T5337] Free swap = 105516kB [ 202.474715][ T5337] Total swap = 124996kB [ 202.476502][ T5337] 524155 pages RAM [ 202.478135][ T5337] 0 pages HighMem/MovableOnly [ 202.480121][ T5337] 209058 pages reserved [ 202.481871][ T5337] 0 pages cma reserved [ 202.483544][ T5337] Unreclaimable slab info: [ 202.485394][ T5337] Name Used Total [ 202.487908][ T5337] pid_3 7KB 7KB [ 202.490693][ T5337] pid_2 94KB 94KB [ 202.495182][ T5337] bio-472 15KB 15KB [ 202.497703][ T5337] bio-536 15KB 15KB [ 202.500187][ T5337] bio-552 15KB 15KB [ 202.509036][ T5337] bio-584 15KB 15KB [ 202.512052][ T5337] zspage-zswap1 126KB 126KB [ 202.514118][ T5337] zs_handle-zswap1 191KB 192KB [ 202.516100][ T5337] zswap_entry 513KB 545KB [ 202.518231][ T5337] AF_VSOCK 61KB 61KB [ 202.520419][ T5337] batadv_tt_change_cache 16KB 16KB [ 202.527969][ T5337] batadv_tl_cache 16KB 16KB [ 202.529878][ T5337] IEEE-802.15.4-MAC 31KB 31KB [ 202.531950][ T5337] p9_req_t 15KB 15KB [ 202.534313][ T5337] SMC6 93KB 93KB [ 202.536657][ T5337] SMC 62KB 62KB [ 202.538742][ T5337] TIPC 123KB 123KB [ 202.540924][ T5337] RDS 30KB 30KB [ 202.543032][ T5337] SCTPv6 120KB 120KB [ 202.544995][ T5337] SCTP 122KB 122KB [ 202.547037][ T5337] sctp_chunk 85KB 125KB [ 202.549159][ T5337] sctp_bind_bucket 16KB 16KB [ 202.551215][ T7955] hsr_slave_0: left promiscuous mode [ 202.551612][ T5337] PNPIPE 30KB 30KB [ 202.555971][ T5337] L2TP/IP 31KB 31KB [ 202.558353][ T5337] KCM 31KB 31KB [ 202.560350][ T5337] kcm_mux 15KB 15KB [ 202.562744][ T5337] RXRPC 128KB 128KB [ 202.562966][ T7955] hsr_slave_1: left promiscuous mode [ 202.565067][ T5337] rxrpc_call_jar 286KB 286KB [ 202.565142][ T5337] net_bridge_fdb_entry 15KB 15KB [ 202.565152][ T5337] MPTCPv6 125KB 125KB [ 202.565227][ T5337] ip6-frags 7KB 7KB [ 202.565235][ T5337] fib6_node 162KB 164KB [ 202.565303][ T5337] ip6_dst_cache 274KB 382KB [ 202.579322][ T5337] PINGv6 30KB 30KB [ 202.581603][ T5337] RAWv6 185KB 185KB [ 202.581998][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.583753][ T5337] UDPv6 122KB 122KB [ 202.586667][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.591182][ T5337] tw_sock_TCPv6 7KB 7KB [ 202.595127][ T5337] request_sock_TCPv6 7KB 7KB [ 202.598051][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.601243][ T5337] TCPv6 417KB 417KB [ 202.603392][ T5337] nf_conntrack 31KB 31KB [ 202.605349][ T5337] wg_peer 178KB 178KB [ 202.607210][ T5337] allowedips_node 23KB 23KB [ 202.609087][ T5337] t10_alua_lu_gp_cache 7KB 7KB [ 202.611170][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.615817][ T5337] scsi_sense_cache 48KB 48KB [ 202.617773][ T7955] veth1_macvtap: left promiscuous mode [ 202.619406][ T7955] veth0_macvtap: left promiscuous mode [ 202.621321][ T7955] veth1_vlan: left promiscuous mode [ 202.622944][ T7955] veth0_vlan: left promiscuous mode [ 202.625088][ T5337] virtio_scsi_cmd 16KB 16KB [ 202.626851][ T5337] bio-136 98KB 116KB [ 202.628662][ T5337] io_kiocb 78KB 117KB [ 202.630701][ T5337] bio-264 7KB 7KB [ 202.640969][ T5337] mqueue_inode_cache 121KB 121KB [ 202.642984][ T5337] f2fs_bio_post_read_ctx 23KB 23KB [ 202.645469][ T5337] jfs_mp 7KB 7KB [ 202.647956][ T5337] fuse_request 31KB 31KB [ 202.649911][ T5337] cifs_small_rq 16KB 16KB [ 202.661021][ T5337] cifs_request 67KB 67KB [ 202.662926][ T5337] cifs_mpx_ids 7KB 7KB [ 202.665008][ T5337] cifs_io_subrequest 39KB 39KB [ 202.667269][ T5337] cifs_io_request 95KB 95KB [ 202.669244][ T5337] nfs_commit_data 15KB 15KB [ 202.712068][ T5337] nfs_write_data 63KB 63KB [ 202.714447][ T5337] jbd2_inode 7KB 7KB [ 202.716733][ T5337] ext4_system_zone 3KB 3KB [ 202.719024][ T5337] ext4_io_end_vec 15KB 15KB [ 202.731016][ T5337] kioctx 127KB 127KB [ 202.733437][ T5337] aio_kiocb 31KB 31KB [ 202.735759][ T5337] userfaultfd_ctx_cache 63KB 63KB [ 202.738188][ T5337] fasync_cache 15KB 15KB [ 202.740069][ T5337] pid_namespace 61KB 61KB [ 202.748732][ T5337] kvm_gmem_inode_cache 31KB 31KB [ 202.751355][ T5337] kvm_vcpu 123KB 123KB [ 202.753764][ T5337] kvm_mmu_page_header 58KB 58KB [ 202.756124][ T5337] pte_list_desc 47KB 47KB [ 202.758982][ T5337] x86_emulator 126KB 126KB [ 202.763610][ T5337] rpc_buffers 31KB 31KB [ 202.766093][ T5337] rpc_tasks 7KB 7KB [ 202.768476][ T5337] UNIX-STREAM 183KB 183KB [ 202.771370][ T5337] UNIX 533KB 796KB [ 202.773815][ T5337] UDP-Lite 61KB 61KB [ 202.776236][ T5337] MPTCP 60KB 60KB [ 202.778630][ T5337] tcp_bind2_bucket 16KB 16KB [ 202.782798][ T5337] tcp_bind_bucket 16KB 16KB [ 202.785250][ T5337] inet_peer 8KB 8KB [ 202.787559][ T5337] xfrm_dst 78KB 118KB [ 202.789900][ T5337] xfrm_state 63KB 63KB [ 202.801294][ T5337] ip_fib_trie 40KB 40KB [ 202.803644][ T5337] ip_fib_alias 99KB 110KB [ 202.811149][ T5337] rtable 64KB 80KB [ 202.821711][ T5337] PING 31KB 31KB [ 202.824031][ T5337] RAW 159KB 159KB [ 202.826415][ T5337] UDP 154KB 154KB [ 202.831058][ T5337] tw_sock_TCP 15KB 15KB [ 202.833412][ T5337] request_sock_TCP 30KB 30KB [ 202.835716][ T5337] TCP 548KB 733KB [ 202.837994][ T5337] hugetlbfs_inode_cache 93KB 93KB [ 202.840466][ T5337] netfs_subrequest 31KB 31KB [ 202.860680][ T5337] netfs_request 95KB 95KB [ 202.863137][ T5337] bio-280 15KB 15KB [ 202.865496][ T5337] ep_head 16KB 16KB [ 202.873378][ T5337] eventpoll_pwq 19KB 19KB [ 202.875757][ T5337] eventpoll_epi 63KB 63KB [ 202.880022][ T5337] inotify_inode_mark 31KB 31KB [ 202.891359][ T5337] sgpool-128 29KB 29KB [ 202.893755][ T5337] sgpool-64 31KB 31KB [ 202.896126][ T5337] sgpool-32 189KB 189KB [ 202.900639][ T5337] sgpool-16 62KB 62KB [ 202.906166][ T5337] sgpool-8 62KB 62KB [ 202.910964][ T5337] bio_crypt_ctx 7KB 7KB [ 202.917056][ T5337] bio_integrity_data 4KB 4KB [ 202.920739][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 202.928668][ T5337] request_queue 216KB 216KB [ 202.930551][ T5337] blkdev_ioc 7KB 7KB [ 202.932411][ T5337] bio-200 171KB 203KB [ 202.934287][ T5337] biovec-max 684KB 777KB [ 202.937280][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 202.940880][ T5337] biovec-64 315KB 441KB [ 202.942778][ T5337] biovec-16 31KB 31KB [ 202.944649][ T5337] mm_slot 3KB 3KB [ 202.946554][ T5337] uid_cache 31KB 31KB [ 202.948376][ T5337] iommu_iova_magazine 1008KB 1039KB [ 202.950275][ T5337] iommu_iova 192KB 192KB [ 202.952310][ T5337] dmaengine-unmap-256 30KB 30KB [ 202.954403][ T5337] dmaengine-unmap-128 30KB 30KB [ 202.956886][ T5337] dmaengine-unmap-16 4KB 4KB [ 202.959253][ T5337] dmaengine-unmap-2 4KB 4KB [ 202.961814][ T5337] QIPCRTR 31KB 31KB [ 202.963984][ T5337] audit_buffer 39KB 39KB [ 202.966176][ T5337] skbuff_ext_cache 36KB 36KB [ 202.968492][ T5337] skbuff_small_head 1528KB 1574KB [ 202.970956][ T5337] skbuff_fclone_cache 201KB 328KB [ 202.973360][ T5337] skbuff_head_cache 1560KB 1646KB [ 202.975713][ T5337] configfs_dir_cache 16KB 16KB [ 202.978104][ T5337] file_lease_cache 7KB 7KB [ 202.980518][ T5337] file_lock_cache 79KB 79KB [ 202.983005][ T5337] file_lock_ctx 15KB 15KB [ 202.985358][ T5337] fsnotify_mark_connector 15KB 15KB [ 202.987902][ T5337] posix_timers_cache 32KB 32KB [ 202.990277][ T5337] taskstats 61KB 61KB [ 202.992683][ T5337] mem_cgroup_per_node 146KB 154KB [ 202.995102][ T5337] mem_cgroup 119KB 119KB [ 202.997423][ T5337] proc_dir_entry 802KB 882KB [ 202.999768][ T5337] pde_opener 15KB 15KB [ 203.002627][ T5337] seq_file 101KB 140KB [ 203.005054][ T5337] sigqueue 31KB 47KB [ 203.007424][ T5337] shmem_inode_cache 7602KB 7896KB [ 203.009742][ T5337] kernfs_iattrs_cache 15KB 15KB [ 203.012101][ T5337] kernfs_node_cache 28783KB 28818KB [ 203.014245][ T5337] mnt_cache 133KB 133KB [ 203.016617][ T5337] filp 264KB 527KB [ 203.018944][ T5337] names_cache 1309KB 1428KB [ 203.021531][ T5337] net_namespace 113KB 113KB [ 203.023928][ T5337] ima_iint_cache 55KB 55KB [ 203.026320][ T5337] lsm_inode_cache 1520KB 1701KB [ 203.028685][ T5337] lsm_file_cache 110KB 176KB [ 203.031102][ T5337] key_jar 23KB 23KB [ 203.033449][ T5337] uts_namespace 62KB 62KB [ 203.035829][ T5337] nsproxy 15KB 15KB [ 203.038233][ T5337] vm_area_struct 715KB 1156KB [ 203.040563][ T5337] fs_cache 91KB 112KB [ 203.043019][ T5337] files_cache 255KB 318KB [ 203.045451][ T5337] signal_cache 1000KB 1663KB [ 203.047783][ T5337] sighand_cache 1230KB 2134KB [ 203.050215][ T5337] task_struct 4290KB 4713KB [ 203.052680][ T5337] cred 160KB 328KB [ 203.055035][ T5337] anon_vma_chain 315KB 374KB [ 203.057368][ T5337] anon_vma 284KB 406KB [ 203.059712][ T5337] pid 219KB 433KB [ 203.062999][ T5337] Acpi-Operand 247KB 364KB [ 203.065449][ T5337] Acpi-ParseExt 90KB 122KB [ 203.067845][ T5337] Acpi-Parse 78KB 118KB [ 203.070203][ T5337] Acpi-State 63KB 98KB [ 203.072597][ T5337] Acpi-Namespace 56KB 56KB [ 203.074953][ T5337] numa_policy 7KB 7KB [ 203.077274][ T5337] perf_event 31KB 31KB [ 203.079633][ T5337] trace_event_file 528KB 528KB [ 203.082342][ T5337] ftrace_event_field 1004KB 1004KB [ 203.084626][ T5337] pool_workqueue 2088KB 2208KB [ 203.086597][ T5337] task_group 61KB 61KB [ 203.088478][ T5337] maple_node 651KB 1440KB [ 203.090334][ T5337] mm_struct 431KB 581KB [ 203.092272][ T5337] vmap_area 404KB 986KB [ 203.094065][ T5337] debug_objects_cache 2184KB 2255KB [ 203.095963][ T5337] page->ptl 76KB 137KB [ 203.097807][ T5337] kmalloc-cg-8k 2016KB 2160KB [ 203.099651][ T5337] kmalloc-cg-4k 16824KB 18496KB [ 203.101568][ T5337] kmalloc-cg-2k 10912KB 12320KB [ 203.104194][ T5337] kmalloc-cg-1k 3126KB 3776KB [ 203.106559][ T5337] kmalloc-cg-512 1365KB 1712KB [ 203.108876][ T5337] kmalloc-cg-256 457KB 528KB [ 203.111322][ T5337] kmalloc-cg-128 296KB 308KB [ 203.113650][ T5337] kmalloc-cg-64 80KB 80KB [ 203.115978][ T5337] kmalloc-cg-32 70KB 168KB [ 203.118276][ T5337] kmalloc-cg-16 16KB 16KB [ 203.120610][ T5337] kmalloc-cg-8 36KB 36KB [ 203.122940][ T5337] kmalloc-cg-192 68KB 68KB [ 203.125270][ T5337] kmalloc-cg-96 76KB 76KB [ 203.127536][ T5337] kmalloc-8k 7184KB 7552KB [ 203.129660][ T5337] kmalloc-4k 21464KB 21752KB [ 203.131598][ T5337] kmalloc-2k 13576KB 14656KB [ 203.133533][ T5337] kmalloc-1k 8500KB 8716KB [ 203.135729][ T5337] kmalloc-512 10462KB 10960KB [ 203.137822][ T5337] kmalloc-256 6052KB 6072KB [ 203.139902][ T5337] kmalloc-128 2434KB 3592KB [ 203.142418][ T5337] kmalloc-64 5240KB 6716KB [ 203.144365][ T5337] kmalloc-32 1645KB 1936KB [ 203.146257][ T5337] kmalloc-16 413KB 468KB [ 203.148152][ T5337] kmalloc-8 433KB 464KB [ 203.150145][ T5337] kmalloc-192 1671KB 1864KB [ 203.152246][ T5337] kmalloc-96 2601KB 3316KB [ 203.154292][ T5337] kmem_cache_node 224KB 224KB [ 203.156288][ T5337] kmem_cache 195KB 195KB [ 203.158275][ T5337] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=klogd,pid=5337,uid=0 [ 203.162806][ T5337] Out of memory (oom_kill_allocating_task): Killed process 5337 (klogd) total-vm:4044kB, anon-rss:0kB, file-rss:148kB, shmem-rss:0kB, UID:0 pgtables:52kB oom_score_adj:0 [ 203.761953][ T7955] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.806837][ T7955] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.865175][ T7955] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.944692][ T7955] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.349398][ T7955] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.406284][ T7955] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.476338][ T7955] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.554179][ T7955] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.635058][ T7955] bridge_slave_1: left allmulticast mode [ 204.637480][ T7955] bridge_slave_1: left promiscuous mode [ 204.640615][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.644720][ T7955] bridge_slave_0: left allmulticast mode [ 204.646494][ T7955] bridge_slave_0: left promiscuous mode [ 204.648234][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.652931][ T7955] bridge_slave_1: left allmulticast mode [ 204.654825][ T7955] bridge_slave_1: left promiscuous mode [ 204.656856][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.659552][ T7955] bridge_slave_0: left allmulticast mode [ 204.662686][ T7955] bridge_slave_0: left promiscuous mode [ 204.665117][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.670245][ T7955] bridge_slave_1: left allmulticast mode [ 204.672638][ T7955] bridge_slave_1: left promiscuous mode [ 204.675132][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.679183][ T7955] bridge_slave_0: left allmulticast mode [ 204.684039][ T7955] bridge_slave_0: left promiscuous mode [ 204.686446][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.814946][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.818536][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.822132][ T7955] bond0 (unregistering): Released all slaves [ 204.959590][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.962983][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.965905][ T7955] bond0 (unregistering): Released all slaves [ 205.066261][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.069891][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.073170][ T7955] bond0 (unregistering): Released all slaves [ 205.609108][ T7955] hsr_slave_0: left promiscuous mode [ 205.611923][ T7955] hsr_slave_1: left promiscuous mode [ 205.614386][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.617315][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.621604][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.624508][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.629824][ T7955] hsr_slave_0: left promiscuous mode [ 205.632638][ T7955] hsr_slave_1: left promiscuous mode [ 205.635048][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.638213][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.645136][ T7955] hsr_slave_0: left promiscuous mode [ 205.647675][ T7955] hsr_slave_1: left promiscuous mode [ 205.650086][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.655245][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.658443][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.661449][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.668988][ T7955] veth1_macvtap: left promiscuous mode [ 205.671629][ T7955] veth0_macvtap: left promiscuous mode [ 205.673855][ T7955] veth1_vlan: left promiscuous mode [ 205.675990][ T7955] veth0_vlan: left promiscuous mode [ 205.678796][ T7955] veth1_macvtap: left promiscuous mode [ 205.681073][ T7955] veth0_macvtap: left promiscuous mode [ 205.683344][ T7955] veth1_vlan: left promiscuous mode [ 205.685496][ T7955] veth0_vlan: left promiscuous mode [ 205.787399][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 205.797710][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 205.989785][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 206.006115][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 206.199505][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 206.211163][ T7955] team0 (unregistering): Port device team_slave_0 removed