last executing test programs: 4.264278477s ago: executing program 1 (id=2616): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x80044df9, &(0x7f0000000700)=0xa) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) recvmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 4.166286928s ago: executing program 1 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2001, &(0x7f00000002c0)) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r4, 0x4) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000100), &(0x7f0000000080)=@v1={0x2, "79f6e77d"}, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000000)={r8, r9, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06464ce, &(0x7f0000000440)={r9, 0x3, 0x348a, 0xff, 0x3, [], [0x6, 0x81, 0x8, 0x2], [0x6, 0x4, 0x3fd, 0x6], [0x4, 0x12, 0x7fffffff, 0x2]}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.997314074s ago: executing program 0 (id=2621): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x3, 0x0, {0x20, 0x1}, {0x45, 0x2}, @const={0x4, {0xff7c, 0xff, 0xffff, 0x7}}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b15367"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtclass={0x0, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9885e3d6d398d438}, {0x4, 0xf}, {0x0, 0xc}}, [@tclass_kind_options=@c_mq]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64e", 0x13}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="4dc81e1012a65871897155b8acf81e6a9bbace8448ba706a1233deeae6756cfab36a87608ec409e2258fb69ef44e94104d8d6c15e27e1569a4fa5b2d1e65af77477d59d4e06cff2083c67ccecc8563b088f4ad941066511b7b57a287d58a2a2ebcedc1868857830c95fe49bc4fd3549ef8ded4611a24c263c5a503f3cf601ba1957a4af7fa77679b8e84045f25d6b1bb4ecc417ed0baf97c3ab9d484e1b0a5933643a4fd24dea14dee055ea8e8612157b17b96b7e26ea531a72050cb298a535b1fe5ea4bd8ca", 0xc6}, {&(0x7f00000005c0)="a55f37dbbea99e916b2b208bf1829e79abae37bb081f61415b57b0c60b78472e8d0e95f46410b1e64493ca09beb78d9be84592654a3658fe1c17b4f189a699a8adb3d6523c3b4bdb9e605a42d22700098fcb79579f6e37ba3bc07c708b7b6ff1f13089224642830f678596a1cc67c433f60fddda97480af5f9c5eeb643aebb09b8e5348ca8c65940e788128317234c31801dc38a09eafd99f1f6f2607a6d31f49b5dad3434a87ac4c18515046c7f924ebffaea44b1a9a2b7791f560bf85990ebf4338a8313e4a422b0eb3266570cbf1293d3396177c3ec40841180f57eb0f9cfd32390d83af755e2", 0xe8}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000000000000010000008000000010000000000000000700000000000000180000000000000008000000", @ANYRES32=r1, @ANYBLOB="7e540e9fc56fb8f6"], 0x38}}], 0x1, 0x24004084) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.716776865s ago: executing program 1 (id=2622): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x1b, 0xfff3}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.613432242s ago: executing program 1 (id=2623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66833dfc9fa5fb8827a46118b38bba670264f1139e4cfdcecff61016b347059f0e1e108ff0049cd274974e5f5ce481697a1df5f901744280ce22a7a59a8775eca1be98222ab3d1c4381641329ddede4b"]) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="342000002100010029bd7000fedbdf25022000035f0000011204bf0af77947c7f33b00000008000b0002000000080001007f00000108000b00cb6d8b7d679efe0925b77ae96a14c10dab94255a55"], 0x34}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x14, &(0x7f00000007c0)={@flat=@binder={0x73622a85, 0x101, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/222, 0x0, 0x1, 0x35}, @flat=@binder={0x73622a85, 0x10a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xffff}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d76697274696f2c706f7369010001002c00"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x40c2}, 0x8) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r11], 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x2}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r11, 0x4) pidfd_send_signal(r11, 0x5, &(0x7f0000000380)={0x17, 0x7, 0x401}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x48, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x200480c0) 3.55657488s ago: executing program 1 (id=2625): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000300)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x14, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x4, 0xff}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0xfd, 0x1, 0xff, 0xd}, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="f2ff40000514100481124b92d2a9bde3a568038464ad0f0c0d0a10030202000276002103100b10100a0e21000000000000fc30c1ff000a100300010009f70800"], 0x8, [{0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="300316fac2799e0a41d12a8e2f2d544ada873679112c5cefdbd7a068f4a52637ed4bec000000007fffffffc611b499c80f1ce12ccca036a3762fba53bdf37924c4ccfdb3563d3c2198001cef68b8d244792e5e8e7acbc3b0c130fca6c53f0e5a3c33cb365f6cc7231775fd632e9068eef00f1296c8f6a51f3b25476faf5a93252b977986537cbcc5e498661fbc5ce7a7d61b4cfe7ac4cdcc7022e3c3771d9c9720836640ae2e703f"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}, {0x4b, &(0x7f0000000680)=ANY=[@ANYBLOB="4b03bc2b69cf4b1bb02abf9bd429a55e88ac0463c299f9d2dc90a2ab078c2a61bf46902efdc885c3d23f60e0246ca8add4bce27a49f0bbdf9c464a20b0b93fa4d3d4716c4c89f3a1413b49"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0xc7, &(0x7f0000000880)=@string={0xc7, 0x3, "af02588d9bec48ed4236e5ea265739a53b1397fdb7a47ecd6c440a3ce921cd7f9711cea9351be8cdf76a2d8cf6ad1f2d92b179b69b737f959419c945d425d94cf0a4fbc126bd7fd3b5bc5166a849f4d7e7303dcb104e2284e575dbbba7e3c45d8bc18a23c6b34f3ba8c9598049038986de35220ea54f0e28c259908485acdd6068c9f7d56834e606457a1bed5894351021868060c3942d75483e457bfc0daec12f6c0826f92db62afe4ea220a6d444324019cf005d492ac0f3aba2467a562e1d4bf16ab8c6"}}, {0x96, &(0x7f0000000a80)=@string={0x96, 0x3, "baa19a851675722a02e6c6774ed48fef59c088a4fe79ca627b82c8b7392297587c8f4d502c669923d66cf98b2f56793461c69fa6cb8b77ecfd44d5f0b2a9ef04223e80f48c7c87031e28662514a2ccec7ccafac85bfd7042a98969e5afb669356c362914ff7008c11205872a827478adad1bd5496541bc57131f84d0804a0c175e077493b9ec978277a97f0963e8553a20ff76b5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x446}}]}) bpf$PROG_LOAD(0x4, &(0x7f00000009c0)={0xa, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.417195656s ago: executing program 3 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x13c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "e12179b52217a3565e019cdb5f44cd091595545b2371d6c69aebdbe8cb860b2922ab2040d7909c1242d9e9e042eedeb591203435ca3ed89dd46ec1ff3ba1be975d5ff81e7a4505e1884dc038fd8112b35514ab8776003403d6d5"}, @NFTA_TABLE_USERDATA={0x78, 0x6, "933eed213ad6fa0e8159f65786b524e7c4527ec25093eb0f5ccace7a4b999e1b52d71604be95975ab893f21c343b86facb9603a3bf96fdbfbc3cbd0bab75c602961b30c705f54a8d7d821f005591dc40c39e28cf7ec6b40c00b2536146facc4abc8f15f7d7619b3543339ff55659dc9a81c6e741"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x48800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 3.416997135s ago: executing program 3 (id=2627): unshare(0x28000600) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x80, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x1000000}}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) unshare(0x8000280) 3.238820249s ago: executing program 3 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000540)={0x1a, 0xdef0, 0x6b33, "00ed7c35ace1f63078dae3cc4e039e2b13e53df20ea8b63edfdd"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x8001, 0x7, {{0x4d, 0x4, 0x2, 0x4, 0x134, 0x64, 0x0, 0xa, 0x2f, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x3c, 0x56, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x10000}, {@loopback, 0xde6}, {@empty, 0x3}, {@broadcast, 0xe}, {@empty, 0x91b}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xa2cf}, {@broadcast, 0x4}]}, @cipso={0x86, 0x79, 0xffffffffffffffff, [{0x6, 0xd, "5b3ca9786ebadf35b59e5a"}, {0x1, 0xc, "f43d29e7d9bdbea77597"}, {0x2, 0xe, "2558354d5724effef5c15ae5"}, {0x7, 0x9, "4636db15612398"}, {0x2, 0xe, "9d90be1dcceedefff6419a5c"}, {0x0, 0xc, "f5344d274bb1df273212"}, {0x6, 0x2}, {0x7, 0x8, "523bbbc575cc"}, {0x0, 0xd, "44a893b72516b588b764b2"}, {0x1, 0x12, "0ef59db42e16f5b71d6b42bfdf69aace"}]}, @timestamp={0x44, 0x2c, 0x81, 0x0, 0x3, [0x4, 0x5, 0xf0d, 0x7, 0xa, 0x7f, 0x8, 0xbb, 0x0, 0x2]}, @timestamp_addr={0x44, 0xc, 0xed, 0x1, 0x8, [{@broadcast, 0x3}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xce, [@broadcast, @loopback, @broadcast, @broadcast]}, @noop, @ssrr={0x89, 0x17, 0x9b, [@local, @multicast1, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x42}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc0001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000034030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000001d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9, 0x0) 3.132817021s ago: executing program 3 (id=2630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000004c0)="800000800000210ee7decd7a00000000", 0x10, 0x40054, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.025331146s ago: executing program 0 (id=2632): getrandom(0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x8010002b) 2.934868663s ago: executing program 3 (id=2633): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setparam(r0, &(0x7f0000000340)=0xfffffffc) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(0x0, r6) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200402}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r8 = syz_open_dev$vim2m(&(0x7f0000000280), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f00000012c0)=0x2) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)=0x3fffe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) 2.455109683s ago: executing program 2 (id=2636): r0 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000006"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000b000000080000000200000010000000", @ANYRES32, @ANYBLOB="000000000000000000ce5b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4048aecb, &(0x7f0000000540)=@arm64_ccsidr={0x6020000000110008, 0x0}) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x101, 0x0, 0x2, 0x0) r9 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x5, 0x7fff}]}, 0xc, 0x2) writev(r9, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) io_uring_enter(r0, 0x3ac4, 0x4c6e, 0x1, 0x0, 0x0) 2.245903894s ago: executing program 2 (id=2637): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500ff8d}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd80) fcntl$setpipe(r6, 0x408, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x18, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) 1.768275471s ago: executing program 0 (id=2638): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = socket(0x840000000002, 0x3, 0xff) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffc, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 1.484176458s ago: executing program 0 (id=2639): r0 = socket$inet(0x2, 0x2, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000840)='./file0/file0\x00', 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 1.461891339s ago: executing program 3 (id=2640): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x0, 0x7, "a2e420589a451588b02ee1bc4df668ca"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2b, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4000, 0x0, 0xffffff22}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syslog(0x4, &(0x7f0000000180)=""/153, 0x99) 1.368279279s ago: executing program 0 (id=2641): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x3, 0x0, {0x20, 0x1}, {0x45, 0x2}, @const={0x4, {0xff7c, 0xff, 0xffff, 0x7}}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b15367"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtclass={0x0, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9885e3d6d398d438}, {0x4, 0xf}, {0x0, 0xc}}, [@tclass_kind_options=@c_mq]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64e", 0x13}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="4dc81e1012a65871897155b8acf81e6a9bbace8448ba706a1233deeae6756cfab36a87608ec409e2258fb69ef44e94104d8d6c15e27e1569a4fa5b2d1e65af77477d59d4e06cff2083c67ccecc8563b088f4ad941066511b7b57a287d58a2a2ebcedc1868857830c95fe49bc4fd3549ef8ded4611a24c263c5a503f3cf601ba1957a4af7fa77679b8e84045f25d6b1bb4ecc417ed0baf97c3ab9d484e1b0a5933643a4fd24dea14dee055ea8e8612157b17b96b7e26ea531a72050cb298a535b1fe5ea4bd8ca", 0xc6}, {&(0x7f00000005c0)="a55f37dbbea99e916b2b208bf1829e79abae37bb081f61415b57b0c60b78472e8d0e95f46410b1e64493ca09beb78d9be84592654a3658fe1c17b4f189a699a8adb3d6523c3b4bdb9e605a42d22700098fcb79579f6e37ba3bc07c708b7b6ff1f13089224642830f678596a1cc67c433f60fddda97480af5f9c5eeb643aebb09b8e5348ca8c65940e788128317234c31801dc38a09eafd99f1f6f2607a6d31f49b5dad3434a87ac4c18515046c7f924ebffaea44b1a9a2b7791f560bf85990ebf4338a8313e4a422b0eb3266570cbf1293d3396177c3ec40841180f57eb0f9cfd32390d83af755e2", 0xe8}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000000000000010000008000000010000000000000000700000000000000180000000000000008000000", @ANYRES32=r1, @ANYBLOB="7e540e9fc56fb8f6"], 0x38}}], 0x1, 0x24004084) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.310644155s ago: executing program 2 (id=2642): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x140, 0x1000, 0x0, 0x1, 0x0, {0x816, 0x3}, {0x350, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x4, 0x0, 0x7fb}, 0x1, 0x100, 0x4, 0xd614, 0x0, 0x0, 0x0, 0x3ff, 0xe, 0x0, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x4}) (fail_nth: 4) 1.116506538s ago: executing program 2 (id=2643): ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 548.251154ms ago: executing program 2 (id=2644): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x100}) 537.649154ms ago: executing program 2 (id=2645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8000000, '\x00', @value=0x401}}) (fail_nth: 1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) setpriority(0x1, 0x0, 0x5) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f00000003c0)) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040001000500000000000000", @ANYRES32, @ANYBLOB="000000c800400000000000000506000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000001400)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYRESDEC=r3, @ANYBLOB="6b3d4b44711712df5f0c7444be5cd72ca8b648705d60d4c560274c235cf03c46a0ffc1cb38993ffdcc59ddd0bbe201b3bc8fe111b01feab76b91fba3f80f61290d3dea9e6f1355ee1564a9162290dd77cbff76f4745179caecfc1ff7364ca741966444d258f1980cb3ba3c47334fe5078b"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 86.10925ms ago: executing program 0 (id=2646): r0 = epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r2, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000480)={{r0}, "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"}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x12, 0x0, 0x0, @binary}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x1, 0x0, 0xc7, 0x7, 0xfff, 0x0, 0xe, 0x3, 0x8, 0x40, 0x4, 0xcd41, 0x7fffffff, 0x7, 0x5, 0x95, 0xe7b7, 0x7, 0x9, 0x5, 0x4, 0xfcf, 0x101, 0x7f, 0x9, 0x7fffffff, 0xc90, 0x1, 0xfffff801, 0xfffffff8, 0x3]}) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/162, 0xa2) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/194, 0xfffffffffffffccc, 0x200) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) 0s ago: executing program 1 (id=2647): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$bpf(0x0, 0x0, 0x0, 0x5085040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x8010002b) kernel console output (not intermixed with test programs): 5][T12964] bond22: entered allmulticast mode [ 393.301003][T12964] 8021q: adding VLAN 0 to HW filter on device bond22 [ 393.327689][T12964] bond23: entered promiscuous mode [ 393.329901][T12964] bond23: entered allmulticast mode [ 393.335742][T12964] 8021q: adding VLAN 0 to HW filter on device bond23 [ 393.382561][T12964] bond24: entered promiscuous mode [ 393.384745][T12964] bond24: entered allmulticast mode [ 393.386793][T12964] 8021q: adding VLAN 0 to HW filter on device bond24 [ 393.417968][T12964] bond25: entered promiscuous mode [ 393.420202][T12964] bond25: entered allmulticast mode [ 393.423788][T12964] 8021q: adding VLAN 0 to HW filter on device bond25 [ 393.442012][T12964] bond26: entered promiscuous mode [ 393.443709][T12964] bond26: entered allmulticast mode [ 393.445673][T12964] 8021q: adding VLAN 0 to HW filter on device bond26 [ 393.492585][T12964] bond27: entered promiscuous mode [ 393.494586][T12964] bond27: entered allmulticast mode [ 393.496520][T12964] 8021q: adding VLAN 0 to HW filter on device bond27 [ 393.525221][T12964] bond28: entered promiscuous mode [ 393.527365][T12964] bond28: entered allmulticast mode [ 393.529860][T12964] 8021q: adding VLAN 0 to HW filter on device bond28 [ 394.121921][ T6099] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 394.274931][ T6099] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.278627][ T6099] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 394.282489][ T6099] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.286104][ T6099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.502985][T13039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.592934][ T6099] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.224136][T13066] binder: 13065:13066 ioctl c018620c 80000380 returned -22 [ 395.384739][ T892] usb 5-1: USB disconnect, device number 16 [ 395.421149][ T6350] usb 38-1: device descriptor read/8, error -110 [ 395.515541][T13075] syzkaller0: entered promiscuous mode [ 395.517421][T13075] syzkaller0: entered allmulticast mode [ 395.814201][ T6350] usb usb38-port1: attempt power cycle [ 396.387044][ T6350] usb usb38-port1: unable to enumerate USB device [ 397.007066][T13092] debugfs: 'ttyS3' already exists in 'caif_serial' [ 397.173731][T13113] fuse: Unknown parameter '0x0000000000000003' [ 397.972207][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 398.058352][T13103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 398.061264][T13103] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 398.067055][T13103] vhci_hcd vhci_hcd.0: Device attached [ 398.100994][T13158] fuse: Unknown parameter '0x0000000000000003' [ 398.112261][T13154] vhci_hcd: connection closed [ 398.112496][ T13] vhci_hcd vhci_hcd.3: stop threads [ 398.115801][ T13] vhci_hcd vhci_hcd.3: release socket [ 398.117685][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 398.258374][T13165] syzkaller0: entered promiscuous mode [ 398.260693][T13165] syzkaller0: entered allmulticast mode [ 398.423788][T13173] debugfs: 'ttyS3' already exists in 'caif_serial' [ 398.721939][T13199] netlink: 'syz.0.2031': attribute type 4 has an invalid length. [ 398.725447][T13199] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2031'. [ 399.848155][T13214] fuse: Unknown parameter '0x0000000000000003' [ 400.545653][T13239] kvm: kvm [13238]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000024) [ 401.318226][T13255] fuse: Unknown parameter '0x0000000000000003' [ 401.540428][T13262] input: syz0 as /devices/virtual/input/input17 [ 402.806238][T13297] kvm: kvm [13296]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000024) [ 403.436084][T13335] syzkaller0: entered promiscuous mode [ 403.438339][T13335] syzkaller0: entered allmulticast mode [ 403.982432][T13352] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 403.985478][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 404.159755][T13352] vhci_hcd vhci_hcd.0: Device attached [ 404.293226][T13352] rdma_rxe: rxe_newlink: failed to add wg2 [ 404.421198][ T892] usb 38-1: SetAddress Request (14) to port 0 [ 404.424013][ T892] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 404.597509][T13353] vhci_hcd: connection reset by peer [ 404.611609][ T13] vhci_hcd vhci_hcd.0: stop threads [ 404.614541][ T13] vhci_hcd vhci_hcd.0: release socket [ 404.617435][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 406.277110][T13391] syzkaller0: entered promiscuous mode [ 406.279575][T13391] syzkaller0: entered allmulticast mode [ 406.423710][T13398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 406.425968][T13398] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.441221][T13398] vhci_hcd vhci_hcd.0: Device attached [ 406.784008][T13408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 406.786139][T13408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.797612][T13408] vhci_hcd vhci_hcd.0: Device attached [ 406.811334][ T8132] usb 40-1: SetAddress Request (10) to port 0 [ 406.813648][ T8132] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 407.041176][ T1020] usb 43-1: new low-speed USB device number 21 using vhci_hcd [ 407.447520][T13399] vhci_hcd: connection reset by peer [ 407.455076][ T13] vhci_hcd vhci_hcd.1: stop threads [ 407.456856][ T13] vhci_hcd vhci_hcd.1: release socket [ 407.458789][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 407.524895][T13417] fuse: Unknown parameter '0x0000000000000003' [ 407.686898][T13425] siw: device registration error -23 [ 407.692395][T13425] smc: removing ib device sz1 [ 407.771829][T13409] vhci_hcd: connection reset by peer [ 407.775604][ T13] vhci_hcd vhci_hcd.3: stop threads [ 407.777974][ T13] vhci_hcd vhci_hcd.3: release socket [ 407.793948][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 408.389468][T13439] fuse: Unknown parameter '0x0000000000000003' [ 408.420306][T13442] random: crng reseeded on system resumption [ 408.644591][T13446] syzkaller0: entered promiscuous mode [ 408.646511][T13446] syzkaller0: entered allmulticast mode [ 409.088862][ T40] audit: type=1326 audit(2000000324.159:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2096" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x0 [ 409.614474][ T892] usb 38-1: device descriptor read/8, error -110 [ 409.995442][T13480] syzkaller0: entered promiscuous mode [ 409.997451][T13480] syzkaller0: entered allmulticast mode [ 410.011675][ T892] usb usb38-port1: attempt power cycle [ 410.441310][ T6350] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 410.591609][ T892] usb usb38-port1: unable to enumerate USB device [ 410.602468][ T6350] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 410.605855][ T6350] usb 8-1: config 0 interface 0 has no altsetting 0 [ 410.609890][ T6350] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.613062][ T6350] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 410.615821][ T6350] usb 8-1: Product: syz [ 410.617296][ T6350] usb 8-1: Manufacturer: syz [ 410.618922][ T6350] usb 8-1: SerialNumber: syz [ 410.628686][ T6350] usb 8-1: config 0 descriptor?? [ 410.639169][ T6350] usb 8-1: selecting invalid altsetting 0 [ 410.848908][ T6350] usb 8-1: USB disconnect, device number 20 [ 411.461213][ T892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 411.631588][ T892] usb 5-1: Using ep0 maxpacket: 32 [ 411.644167][ T892] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 411.646964][ T892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.650311][ T892] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 411.661440][ T892] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 411.671894][ T892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.678673][ T892] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 411.686738][ T892] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 411.689574][ T892] usb 5-1: Product: syz [ 411.691003][ T892] usb 5-1: Manufacturer: syz [ 411.701758][ T892] usb 5-1: SerialNumber: syz [ 411.704556][ T892] usb 5-1: config 0 descriptor?? [ 411.710563][ T892] ldusb 5-1:0.0: Interrupt in endpoint not found [ 411.935224][ T8132] usb 40-1: device descriptor read/8, error -110 [ 411.988329][ T24] usb 5-1: USB disconnect, device number 17 [ 412.141256][ T1020] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 412.331602][ T8132] usb usb40-port1: attempt power cycle [ 412.847879][T13556] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 412.850814][T13556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.856493][T13556] vhci_hcd vhci_hcd.0: Device attached [ 412.981746][ T8132] usb usb40-port1: unable to enumerate USB device [ 413.097287][T13564] gfs2: error -5 reading superblock [ 413.150062][T13564] siw: device registration error -23 [ 413.191187][ T1020] usb 43-1: device descriptor read/64, error -110 [ 413.431210][ T1020] usb 43-1: new low-speed USB device number 22 using vhci_hcd [ 413.773715][T13557] vhci_hcd: connection reset by peer [ 413.791121][ T13] vhci_hcd vhci_hcd.3: stop threads [ 413.793095][ T13] vhci_hcd vhci_hcd.3: release socket [ 413.794991][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 414.712190][T13574] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.723865][T13582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 414.727308][T13582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 414.730334][T13582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 414.733928][T13582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 414.736777][T13582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.742537][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 414.747256][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 414.750836][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 414.755894][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 414.761006][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.764949][T13576] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 414.916034][T13574] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.086389][T13580] chnl_net:caif_netlink_parms(): no params data found [ 415.144402][T13574] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.152469][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.156783][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.159757][T13580] bridge_slave_0: entered allmulticast mode [ 415.172613][T13580] bridge_slave_0: entered promiscuous mode [ 415.182861][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.185295][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.187656][T13580] bridge_slave_1: entered allmulticast mode [ 415.190359][T13580] bridge_slave_1: entered promiscuous mode [ 415.205804][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.210168][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.223830][T13574] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.284415][T13580] team0: Port device team_slave_0 added [ 415.291821][T13580] team0: Port device team_slave_1 added [ 415.296903][ T1173] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.342241][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.344572][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.353294][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.357643][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.359900][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.368996][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.394325][ T1160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.397782][ T1160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.417130][ T1173] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.429068][T13580] hsr_slave_0: entered promiscuous mode [ 415.431733][T13580] hsr_slave_1: entered promiscuous mode [ 415.433907][T13580] debugfs: 'hsr0' already exists in 'hsr' [ 415.435804][T13580] Cannot create hsr debugfs directory [ 415.445620][ T1160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.467520][ T6045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.513131][ T1173] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.600445][ T1173] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.721281][ T1173] bridge_slave_1: left allmulticast mode [ 415.723527][ T1173] bridge_slave_1: left promiscuous mode [ 415.726233][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.733843][ T1173] bridge_slave_0: left allmulticast mode [ 415.736225][ T1173] bridge_slave_0: left promiscuous mode [ 415.738627][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.919985][T13617] fuse: Bad value for 'rootmode' [ 416.245786][ T1173] team0: Port device geneve0 removed [ 416.609246][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.632756][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.644697][ T1173] bond0 (unregistering): Released all slaves [ 416.669609][ T1173] bond1 (unregistering): Released all slaves [ 416.697824][ T1173] bond2 (unregistering): (slave veth0_to_bridge): Releasing backup interface [ 416.704763][ T1173] bond2 (unregistering): Released all slaves [ 416.714793][ T1173] bond3 (unregistering): Released all slaves [ 416.723803][ T1173] bond4 (unregistering): Released all slaves [ 416.774784][ T5941] Bluetooth: hci4: command tx timeout [ 417.330486][T13639] tmpfs: Unknown parameter '00000000000000000003' [ 417.346082][T13641] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 417.348311][T13641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.363597][T13641] vhci_hcd vhci_hcd.0: Device attached [ 417.631356][ T6099] usb 37-1: new low-speed USB device number 17 using vhci_hcd [ 417.650708][T13580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.665739][T13580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.678889][T13580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.689366][T13580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.781271][T13580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.797819][T13580] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.810248][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.812709][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.829055][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.832040][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.245189][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.427707][ T1173] tipc: Disabling bearer [ 418.434643][ T1173] tipc: Left network mode [ 418.445205][T13580] veth0_vlan: entered promiscuous mode [ 418.454524][T13580] veth1_vlan: entered promiscuous mode [ 418.477582][T13580] veth0_macvtap: entered promiscuous mode [ 418.481944][T13580] veth1_macvtap: entered promiscuous mode [ 418.491320][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.522324][ T1020] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 418.615919][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.625597][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.630023][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.635073][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.639669][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.680518][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.684312][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.708861][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.713749][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.765453][T13642] vhci_hcd: connection reset by peer [ 418.767522][ T91] vhci_hcd vhci_hcd.0: stop threads [ 418.771891][ T91] vhci_hcd vhci_hcd.0: release socket [ 418.779063][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 418.855271][ T5941] Bluetooth: hci4: command tx timeout [ 418.964990][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.967822][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.975356][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.980579][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.064876][ T1173] veth1_macvtap: left promiscuous mode [ 419.067744][ T1173] veth0_macvtap: left promiscuous mode [ 419.070573][ T1173] veth1_vlan: left promiscuous mode [ 419.073674][ T1173] veth0_vlan: left promiscuous mode [ 419.135478][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'. [ 419.487828][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 419.510583][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 419.884410][T13716] netlink: 'syz.1.2156': attribute type 9 has an invalid length. [ 419.886991][T13716] netlink: 'syz.1.2156': attribute type 11 has an invalid length. [ 419.894513][T13716] netlink: 'syz.1.2156': attribute type 12 has an invalid length. [ 419.897181][T13716] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2156'. [ 419.900260][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 420.359437][ T6832] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 420.399101][ T1173] IPVS: stop unused estimator thread 0... [ 420.668587][ T6832] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.674793][ T6832] usb 7-1: config 0 interface 0 has no altsetting 0 [ 420.680775][ T6832] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.685137][ T6832] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.688760][ T6832] usb 7-1: Product: syz [ 420.690769][ T6832] usb 7-1: Manufacturer: syz [ 420.693620][ T6832] usb 7-1: SerialNumber: syz [ 420.696758][ T6832] usb 7-1: config 0 descriptor?? [ 420.705409][T13732] x_tables: duplicate underflow at hook 1 [ 420.713888][ T6832] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 420.738285][T12183] udevd[12183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.941236][ T5941] Bluetooth: hci4: command tx timeout [ 421.097662][T13740] tipc: Started in network mode [ 421.100012][T13740] tipc: Node identity 080211000001, cluster identity 4711 [ 421.103898][T13740] tipc: Enabled bearer , priority 0 [ 421.140074][T13740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 421.254222][T13741] FAULT_INJECTION: forcing a failure. [ 421.254222][T13741] name failslab, interval 1, probability 0, space 0, times 0 [ 421.259421][T13741] CPU: 1 UID: 0 PID: 13741 Comm: syz.1.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.259447][T13741] Tainted: [L]=SOFTLOCKUP [ 421.259451][T13741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 421.259460][T13741] Call Trace: [ 421.259466][T13741] [ 421.259472][T13741] dump_stack_lvl+0x16c/0x1f0 [ 421.259521][T13741] should_fail_ex+0x512/0x640 [ 421.259558][T13741] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 421.259579][T13741] should_failslab+0xc2/0x120 [ 421.259602][T13741] kmem_cache_alloc_node_noprof+0x86/0x800 [ 421.259619][T13741] ? __alloc_skb+0x156/0x410 [ 421.259640][T13741] ? __alloc_skb+0x156/0x410 [ 421.259653][T13741] __alloc_skb+0x156/0x410 [ 421.259667][T13741] ? __alloc_skb+0x35d/0x410 [ 421.259682][T13741] ? __pfx___alloc_skb+0x10/0x10 [ 421.259698][T13741] ? rtnl_prop_list_size+0x295/0x2d0 [ 421.259718][T13741] ? if_nlmsg_size+0x4a7/0xb30 [ 421.259739][T13741] rtmsg_ifinfo_build_skb+0x81/0x280 [ 421.259766][T13741] rtnetlink_event+0xf3/0x1f0 [ 421.259789][T13741] notifier_call_chain+0xbc/0x3e0 [ 421.259812][T13741] ? __pfx_rtnetlink_event+0x10/0x10 [ 421.259838][T13741] call_netdevice_notifiers_info+0xbe/0x110 [ 421.259863][T13741] netif_set_mtu_ext+0x563/0x7a0 [ 421.259884][T13741] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 421.259906][T13741] ? __lock_acquire+0x436/0x2890 [ 421.259925][T13741] netif_set_mtu+0x98/0x140 [ 421.259943][T13741] ? __pfx_netif_set_mtu+0x10/0x10 [ 421.259968][T13741] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 421.259988][T13741] ? full_name_hash+0xbc/0x110 [ 421.260005][T13741] dev_set_mtu+0xb2/0x260 [ 421.260026][T13741] dev_ifsioc+0xd1f/0x1ee0 [ 421.260046][T13741] ? __pfx_dev_ifsioc+0x10/0x10 [ 421.260062][T13741] ? __pfx___mutex_lock+0x10/0x10 [ 421.260119][T13741] ? dev_load+0x8e/0x240 [ 421.260143][T13741] dev_ioctl+0x223/0x1060 [ 421.260163][T13741] sock_do_ioctl+0x19d/0x280 [ 421.260184][T13741] ? __pfx_sock_do_ioctl+0x10/0x10 [ 421.260206][T13741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.260232][T13741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.260255][T13741] ? unix_ioctl+0x9f/0x580 [ 421.260278][T13741] compat_sock_ioctl+0x301/0x730 [ 421.260294][T13741] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 421.260307][T13741] ? hook_file_ioctl_common+0x144/0x410 [ 421.260329][T13741] ? __fget_files+0x20e/0x3c0 [ 421.260348][T13741] ? __fput_deferred+0x480/0x480 [ 421.260368][T13741] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 421.260381][T13741] __ia32_compat_sys_ioctl+0x242/0x370 [ 421.260402][T13741] __do_fast_syscall_32+0xe8/0x680 [ 421.260427][T13741] do_fast_syscall_32+0x32/0x80 [ 421.260440][T13741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.260459][T13741] RIP: 0023:0xf7fb3579 [ 421.260471][T13741] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 421.260484][T13741] RSP: 002b:00000000f548555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 421.260499][T13741] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 421.260510][T13741] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.260520][T13741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.260530][T13741] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 421.260539][T13741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.260563][T13741] [ 421.399083][T13741] tipc: Resetting bearer [ 422.121441][ T3241] tipc: Node number set to 134418688 [ 422.212422][T13755] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 422.214608][T13755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.221445][T13755] vhci_hcd vhci_hcd.0: Device attached [ 422.436310][T13764] vhci_hcd: connection closed [ 422.436858][ T1173] vhci_hcd vhci_hcd.1: stop threads [ 422.440976][ T1173] vhci_hcd vhci_hcd.1: release socket [ 422.443163][ T1173] vhci_hcd vhci_hcd.1: disconnect device [ 422.481552][ T8132] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 422.527141][T13771] syzkaller0: entered promiscuous mode [ 422.533415][T13771] syzkaller0: entered allmulticast mode [ 422.761223][ T6099] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 422.770309][T13779] syzkaller0: entered promiscuous mode [ 422.774922][T13779] syzkaller0: entered allmulticast mode [ 423.014164][ T5941] Bluetooth: hci4: command tx timeout [ 423.029279][ T892] usb 7-1: USB disconnect, device number 5 [ 423.251378][T13792] 9p: Bad value for 'wfdno' [ 424.161680][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 424.179413][T13798] syzkaller0: entered promiscuous mode [ 424.182400][T13798] syzkaller0: entered allmulticast mode [ 424.438052][T13813] tipc: Enabled bearer , priority 0 [ 424.440910][T13813] syzkaller0: entered promiscuous mode [ 424.445997][T13813] syzkaller0: entered allmulticast mode [ 424.451642][T13813] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 424.551969][T13813] syzkaller0: mtu less than device minimum [ 424.560430][T13812] tipc: Resetting bearer [ 424.570143][T13812] tipc: Disabling bearer [ 424.664994][T13826] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 424.667147][T13826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.673187][T13826] vhci_hcd vhci_hcd.0: Device attached [ 424.739980][T13832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 424.742199][T13832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 424.745366][T13832] vhci_hcd vhci_hcd.0: Device attached [ 424.755468][T13834] vhci_hcd: connection closed [ 424.755731][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 424.762152][ T1144] vhci_hcd vhci_hcd.0: release socket [ 424.765164][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 424.921169][ T8132] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 424.921173][ T24] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 425.072490][ T8132] usb 6-1: config 0 has no interfaces? [ 425.074400][ T8132] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 425.077439][ T8132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.081477][ T8132] usb 6-1: config 0 descriptor?? [ 425.278098][T13827] vhci_hcd: connection reset by peer [ 425.280678][ T13] vhci_hcd vhci_hcd.2: stop threads [ 425.282550][ T13] vhci_hcd vhci_hcd.2: release socket [ 425.284398][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 425.447237][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 425.449998][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 425.718311][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 425.720726][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 426.231266][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 426.233353][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 427.251422][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 427.254160][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 427.367668][T13821] ceph: No mds server is up or the cluster is laggy [ 427.405688][ T54] usb 6-1: USB disconnect, device number 14 [ 430.041403][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 434.360121][T13864] syzkaller0: entered promiscuous mode [ 434.362022][T13864] syzkaller0: entered allmulticast mode [ 436.009533][T13886] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 436.011727][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.038646][T13886] vhci_hcd vhci_hcd.0: Device attached [ 436.281250][ T6099] usb 39-1: new low-speed USB device number 22 using vhci_hcd [ 436.619505][T13888] vhci_hcd: connection reset by peer [ 436.623334][ T1173] vhci_hcd vhci_hcd.1: stop threads [ 436.625183][ T1173] vhci_hcd vhci_hcd.1: release socket [ 436.627091][ T1173] vhci_hcd vhci_hcd.1: disconnect device [ 436.923412][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 437.320134][T13905] syzkaller0: entered promiscuous mode [ 437.323550][T13905] syzkaller0: entered allmulticast mode [ 437.329579][T13909] syzkaller0: entered promiscuous mode [ 437.331631][T13909] syzkaller0: entered allmulticast mode [ 439.129918][T13946] syzkaller0: entered promiscuous mode [ 439.131819][T13946] syzkaller0: entered allmulticast mode [ 439.275210][T13953] syzkaller0: entered promiscuous mode [ 439.277729][T13953] syzkaller0: entered allmulticast mode [ 439.394686][T13958] fuse: Unknown parameter '0x0000000000000003' [ 439.458356][T13960] syzkaller0: entered promiscuous mode [ 439.460859][T13960] syzkaller0: entered allmulticast mode [ 439.493041][T13965] QAT: failed to copy from user. [ 439.711134][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 439.879668][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.883030][ T34] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.887179][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 439.896752][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.900007][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 439.903123][ T34] usb 7-1: Product: syz [ 439.904563][ T34] usb 7-1: Manufacturer: syz [ 439.906109][ T34] usb 7-1: SerialNumber: syz [ 439.952165][ T34] usb 7-1: config 0 descriptor?? [ 439.977614][ T34] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 439.996861][T13890] udevd[13890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.846164][ T1020] usb 7-1: USB disconnect, device number 6 [ 440.873523][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 441.143373][T13981] syzkaller0: entered promiscuous mode [ 441.145211][T13981] syzkaller0: entered allmulticast mode [ 441.302400][T13985] netlink: 'syz.0.2227': attribute type 2 has an invalid length. [ 441.321024][T13985] : entered promiscuous mode [ 441.401200][ T6099] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 442.127548][T14023] syzkaller0: entered promiscuous mode [ 442.130083][T14023] syzkaller0: entered allmulticast mode [ 442.562454][T14033] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 442.566233][T14033] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2238'. [ 442.593656][ T40] audit: type=1326 audit(2000000000.949:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.2.2238" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4579 code=0x0 [ 442.620103][T14041] binder: 14040:14041 unknown command 0 [ 442.622665][T14041] binder: 14040:14041 ioctl c0306201 800001c0 returned -22 [ 442.685434][T14046] syzkaller0: entered promiscuous mode [ 442.687293][T14046] syzkaller0: entered allmulticast mode [ 443.058845][T14054] syzkaller0: entered promiscuous mode [ 443.060646][T14054] syzkaller0: entered allmulticast mode [ 444.041185][ T6019] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 444.191162][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 444.195314][ T6019] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 444.198100][ T6019] usb 8-1: config 0 has no interface number 0 [ 444.200146][ T6019] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.203681][ T6019] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 444.208782][ T6019] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 444.213675][ T6019] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.221170][ T6019] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 444.226429][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.233361][ T6019] usb 8-1: config 0 descriptor?? [ 444.277674][ T6019] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 444.616072][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.618682][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.794497][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 445.552037][T14086] syzkaller0: entered promiscuous mode [ 445.553966][T14086] syzkaller0: entered allmulticast mode [ 445.763075][T14090] input: syz0 as /devices/virtual/input/input20 [ 445.765251][T14090] input: failed to attach handler leds to device input20, error: -6 [ 446.559087][T14106] 9p: Bad value for 'wfdno' [ 446.640904][T14109] syzkaller0: entered promiscuous mode [ 446.643080][T14109] syzkaller0: entered allmulticast mode [ 446.743519][ T6099] usb 8-1: USB disconnect, device number 21 [ 446.745476][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 446.755815][ T6099] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 446.799006][T14115] fuse: Unknown parameter '0x0000000000000003' [ 446.805164][T14118] syzkaller0: entered promiscuous mode [ 446.807151][T14118] syzkaller0: entered allmulticast mode [ 447.598951][ T40] audit: type=1326 audit(2000000005.949:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.3.2266" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x0 [ 447.614942][T14140] openvswitch: netlink: IP tunnel dst address not specified [ 448.133047][T14145] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 448.135783][T14145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.138972][T14145] vhci_hcd vhci_hcd.0: Device attached [ 448.391211][ T6099] usb 37-1: new low-speed USB device number 18 using vhci_hcd [ 448.621256][ T34] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 448.804793][T14146] vhci_hcd: connection reset by peer [ 448.807386][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 448.809320][ T1144] vhci_hcd vhci_hcd.0: release socket [ 448.811193][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 448.812537][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 448.813669][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 448.816194][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.816209][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.816222][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.816234][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.831982][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.834941][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.042557][ T34] usb 8-1: usb_control_msg returned -32 [ 449.052727][ T34] usbtmc 8-1:16.0: can't read capabilities [ 449.405492][T14156] team0: left promiscuous mode [ 449.415505][T14156] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 449.423738][ T6832] usb 8-1: USB disconnect, device number 22 [ 449.484800][T14158] syzkaller0: entered promiscuous mode [ 449.487121][T14158] syzkaller0: entered allmulticast mode [ 450.312774][T14187] overlayfs: failed to resolve './file0': -2 [ 450.319562][T14190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 450.322413][T14190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.332451][ T40] audit: type=1804 audit(2000000008.679:4565): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2279" name="/newroot/531/bus/bus" dev="tmpfs" ino=2778 res=1 errno=0 [ 450.350521][T14190] vhci_hcd vhci_hcd.0: Device attached [ 450.968071][T14191] vhci_hcd: connection closed [ 450.968459][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 450.973936][ T1144] vhci_hcd vhci_hcd.0: release socket [ 450.976518][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 451.037892][T14196] fuse: Unknown parameter '0x0000000000000003' [ 453.501203][ T6099] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 454.583965][T14231] FAULT_INJECTION: forcing a failure. [ 454.583965][T14231] name failslab, interval 1, probability 0, space 0, times 0 [ 454.589456][T14231] CPU: 2 UID: 0 PID: 14231 Comm: syz.1.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.589484][T14231] Tainted: [L]=SOFTLOCKUP [ 454.589490][T14231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.589501][T14231] Call Trace: [ 454.589507][T14231] [ 454.589515][T14231] dump_stack_lvl+0x16c/0x1f0 [ 454.589547][T14231] should_fail_ex+0x512/0x640 [ 454.589568][T14231] ? __kmalloc_noprof+0xca/0x910 [ 454.589591][T14231] should_failslab+0xc2/0x120 [ 454.589618][T14231] __kmalloc_noprof+0xeb/0x910 [ 454.589637][T14231] ? arch_stack_walk+0xa6/0x100 [ 454.589658][T14231] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 454.589695][T14231] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 454.589724][T14231] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 454.589761][T14231] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 454.589791][T14231] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 454.589820][T14231] ? genl_get_cmd+0x194/0x580 [ 454.589852][T14231] ? bpf_lsm_capable+0x9/0x10 [ 454.589876][T14231] ? security_capable+0x7e/0x260 [ 454.589905][T14231] ? ns_capable+0xd7/0x110 [ 454.589929][T14231] genl_rcv_msg+0x55c/0x800 [ 454.589949][T14231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.589967][T14231] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 454.589988][T14231] ? __pfx_nl80211_abort_scan+0x10/0x10 [ 454.590010][T14231] ? __pfx_nl80211_post_doit+0x10/0x10 [ 454.590035][T14231] ? __lock_acquire+0x436/0x2890 [ 454.590063][T14231] netlink_rcv_skb+0x158/0x420 [ 454.590089][T14231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.590107][T14231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.590144][T14231] ? netlink_deliver_tap+0x1ae/0xd30 [ 454.590172][T14231] genl_rcv+0x28/0x40 [ 454.590198][T14231] netlink_unicast+0x5aa/0x870 [ 454.590228][T14231] ? __pfx_netlink_unicast+0x10/0x10 [ 454.590263][T14231] netlink_sendmsg+0x8c8/0xdd0 [ 454.590294][T14231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.590322][T14231] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 454.590356][T14231] ____sys_sendmsg+0xa5d/0xc30 [ 454.590387][T14231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.590413][T14231] ? get_compat_msghdr+0x11a/0x170 [ 454.590447][T14231] ___sys_sendmsg+0x134/0x1d0 [ 454.590471][T14231] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.590506][T14231] ? find_held_lock+0x2b/0x80 [ 454.590545][T14231] __sys_sendmsg+0x16d/0x220 [ 454.590569][T14231] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.590609][T14231] __do_fast_syscall_32+0xe8/0x680 [ 454.590640][T14231] do_fast_syscall_32+0x32/0x80 [ 454.590657][T14231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.590679][T14231] RIP: 0023:0xf7fb3579 [ 454.590693][T14231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 454.590710][T14231] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 454.590728][T14231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 454.590739][T14231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.590750][T14231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.590760][T14231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 454.590771][T14231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.590796][T14231] [ 454.604697][T14237] syzkaller0: entered promiscuous mode [ 454.611552][T14236] 9p: Bad value for 'rfdno' [ 454.613049][T14237] syzkaller0: entered allmulticast mode [ 454.712514][T14248] fuse: Unknown parameter '0x0000000000000003' [ 455.266712][T14262] comedi comedi0: pcl816: I/O port conflict (0x4f27,16) [ 455.299171][T14262] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 455.302190][T14262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.311395][T14262] vhci_hcd vhci_hcd.0: Device attached [ 455.526148][T14262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2297'. [ 455.601199][ T6099] usb 40-1: SetAddress Request (14) to port 0 [ 455.603363][ T6099] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 455.728180][T14267] vhci_hcd: connection reset by peer [ 455.730998][ T13] vhci_hcd vhci_hcd.1: stop threads [ 455.734115][ T13] vhci_hcd vhci_hcd.1: release socket [ 455.736620][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 455.737697][T14265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 455.740653][T14265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.743412][T14265] vhci_hcd vhci_hcd.0: Device attached [ 456.011375][ T6350] usb 44-1: SetAddress Request (10) to port 0 [ 456.014230][ T6350] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 456.078209][T14272] vhci_hcd: connection reset by peer [ 456.085219][ T1140] vhci_hcd vhci_hcd.3: stop threads [ 456.086992][ T1140] vhci_hcd vhci_hcd.3: release socket [ 456.091879][ T1140] vhci_hcd vhci_hcd.3: disconnect device [ 456.134885][T14278] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 456.164828][T14278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.197097][T14280] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 456.199979][T14280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.203571][T14278] bond1: (slave dummy0): making interface the new active one [ 456.206225][T14280] vhci_hcd vhci_hcd.0: Device attached [ 456.208213][T14278] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 456.451525][ T24] usb 37-1: new low-speed USB device number 19 using vhci_hcd [ 456.737823][T14303] fuse: blksize only supported for fuseblk [ 457.081736][T14281] vhci_hcd: connection reset by peer [ 457.084427][ T13] vhci_hcd vhci_hcd.0: stop threads [ 457.086309][ T13] vhci_hcd vhci_hcd.0: release socket [ 457.088280][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 458.204204][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.209439][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.285306][T13582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 458.336910][T13582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 458.347083][T13582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 458.350975][T13582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 458.354886][T13582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 458.625650][T14340] chnl_net:caif_netlink_parms(): no params data found [ 458.687554][T14340] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.689939][T14340] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.692619][T14340] bridge_slave_0: entered allmulticast mode [ 458.695980][T14340] bridge_slave_0: entered promiscuous mode [ 458.699499][T14340] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.702615][T14340] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.705285][T14340] bridge_slave_1: entered allmulticast mode [ 458.708028][T14340] bridge_slave_1: entered promiscuous mode [ 458.726449][T14340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.731641][T14340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.751958][T14340] team0: Port device team_slave_0 added [ 458.757110][T14340] team0: Port device team_slave_1 added [ 458.781385][T14340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.784356][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.795140][T14340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.805544][T14340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.807881][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.817797][T14340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.853898][T14340] hsr_slave_0: entered promiscuous mode [ 458.856280][T14340] hsr_slave_1: entered promiscuous mode [ 458.858623][T14340] debugfs: 'hsr0' already exists in 'hsr' [ 458.860732][T14340] Cannot create hsr debugfs directory [ 459.264272][T14362] 9p: Bad value for 'rfdno' [ 459.435742][T14340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 459.445711][T14340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 459.456986][T14340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 459.475793][T14340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.584328][T14340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.606783][T14340] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.625376][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.628532][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.706366][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.709561][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.899971][T14340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.924367][T14340] veth0_vlan: entered promiscuous mode [ 459.930184][T14340] veth1_vlan: entered promiscuous mode [ 459.947066][T14340] veth0_macvtap: entered promiscuous mode [ 459.951100][T14340] veth1_macvtap: entered promiscuous mode [ 459.960966][T14340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.975114][T14340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.983168][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.018374][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.021459][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.025417][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.068721][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.072561][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.100727][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.104445][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.452210][ T5941] Bluetooth: hci2: command tx timeout [ 460.709987][ T6099] usb 40-1: device descriptor read/8, error -110 [ 460.753510][T14407] can0: slcan on ptm1. [ 460.851840][T14407] can0 (unregistered): slcan off ptm1. [ 461.092174][ T6350] usb 44-1: device descriptor read/8, error -110 [ 461.131552][ T6099] usb usb40-port1: attempt power cycle [ 461.254214][T14364] Set syz1 is full, maxelem 65536 reached [ 461.393210][T14411] syzkaller0: entered promiscuous mode [ 461.395709][T14411] syzkaller0: entered allmulticast mode [ 461.482602][ T6350] usb usb44-port1: attempt power cycle [ 461.571348][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 461.701727][ T6099] usb usb40-port1: unable to enumerate USB device [ 461.815509][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2337'. [ 461.923073][T14437] team0 (unregistering): Port device team_slave_0 removed [ 461.943365][T14439] overlayfs: missing 'lowerdir' [ 461.984033][T14437] team0 (unregistering): Port device team_slave_1 removed [ 461.990981][T14437] team0 (unregistering): Port device geneve0 removed [ 462.051571][ T6350] usb usb44-port1: unable to enumerate USB device [ 462.153968][T14452] : renamed from bond_slave_0 (while UP) [ 462.257164][T14458] syzkaller0: entered promiscuous mode [ 462.259554][T14458] syzkaller0: entered allmulticast mode [ 462.541225][ T5941] Bluetooth: hci2: command tx timeout [ 462.900437][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 463.835404][T14500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 463.838260][T14500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.843338][T14500] vhci_hcd vhci_hcd.0: Device attached [ 463.982925][ T6099] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 464.091201][ T34] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 464.152840][ T6099] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.155997][ T6099] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.160137][ T6099] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.171241][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.394790][ T6099] usb 8-1: GET_CAPABILITIES returned 0 [ 464.396690][ T40] audit: type=1326 audit(2000000022.749:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.1.2357" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 464.403818][ T6099] usbtmc 8-1:16.0: can't read capabilities [ 464.611220][ T5941] Bluetooth: hci2: command tx timeout [ 464.611275][ T6099] usb 8-1: USB disconnect, device number 23 [ 465.268135][T14501] vhci_hcd: connection reset by peer [ 465.270551][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 465.272743][ T1140] vhci_hcd vhci_hcd.2: release socket [ 465.274569][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 466.691315][ T5941] Bluetooth: hci2: command tx timeout [ 468.095182][T14562] No such timeout policy "syz0" [ 468.616189][T14570] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 468.618932][T14570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.628652][T14570] vhci_hcd vhci_hcd.0: Device attached [ 468.871204][T14581] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 468.914482][T14581] 9pnet_virtio: no channels available for device syz [ 469.005105][T14573] vhci_hcd: connection closed [ 469.005295][ T46] vhci_hcd vhci_hcd.2: stop threads [ 469.008885][ T46] vhci_hcd vhci_hcd.2: release socket [ 469.010713][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 469.036415][T14586] syzkaller0: entered promiscuous mode [ 469.038958][T14586] syzkaller0: entered allmulticast mode [ 469.242731][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 469.250989][T14595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 469.254046][T14595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 469.261706][T14595] vhci_hcd vhci_hcd.0: Device attached [ 469.271499][T14595] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.2380'. [ 469.337997][T14599] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2380'. [ 469.847508][ T8132] usb 38-1: SetAddress Request (18) to port 0 [ 469.849859][ T8132] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 469.901192][ T1020] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 470.062560][ T1020] usb 5-1: Using ep0 maxpacket: 8 [ 470.097605][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.104936][ T1020] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.109334][ T1020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.144783][ T1020] usb 5-1: config 0 descriptor?? [ 471.045800][ T1020] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 471.064054][T14596] vhci_hcd: connection reset by peer [ 471.071871][ T1020] usb 5-1: USB disconnect, device number 18 [ 471.076743][ T166] vhci_hcd vhci_hcd.0: stop threads [ 471.078559][ T166] vhci_hcd vhci_hcd.0: release socket [ 471.080465][ T166] vhci_hcd vhci_hcd.0: disconnect device [ 471.210054][T14619] syzkaller0: entered promiscuous mode [ 471.212087][T14619] syzkaller0: entered allmulticast mode [ 471.603999][T14625] netlink: 'syz.3.2387': attribute type 4 has an invalid length. [ 471.619216][T14625] netlink: 'syz.3.2387': attribute type 4 has an invalid length. [ 472.164518][T14634] syzkaller0: entered promiscuous mode [ 472.166594][T14634] syzkaller0: entered allmulticast mode [ 472.708031][T14644] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 472.710220][T14644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.713235][T14644] vhci_hcd vhci_hcd.0: Device attached [ 472.965486][ T34] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 473.116900][T14650] syzkaller0: entered promiscuous mode [ 473.118674][T14650] syzkaller0: entered allmulticast mode [ 473.243351][T14645] vhci_hcd: connection reset by peer [ 473.246901][ T166] vhci_hcd vhci_hcd.2: stop threads [ 473.249358][ T166] vhci_hcd vhci_hcd.2: release socket [ 473.252476][ T166] vhci_hcd vhci_hcd.2: disconnect device [ 473.265441][T14652] syzkaller0: entered promiscuous mode [ 473.267890][T14652] syzkaller0: entered allmulticast mode [ 475.008437][ T8132] usb 38-1: device descriptor read/8, error -110 [ 475.033526][T14683] FAULT_INJECTION: forcing a failure. [ 475.033526][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 475.038686][T14683] CPU: 3 UID: 0 PID: 14683 Comm: syz.2.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.038705][T14683] Tainted: [L]=SOFTLOCKUP [ 475.038708][T14683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 475.038715][T14683] Call Trace: [ 475.038720][T14683] [ 475.038725][T14683] dump_stack_lvl+0x16c/0x1f0 [ 475.038746][T14683] should_fail_ex+0x512/0x640 [ 475.038759][T14683] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 475.038777][T14683] should_failslab+0xc2/0x120 [ 475.038795][T14683] __kmalloc_cache_node_noprof+0x83/0x830 [ 475.038811][T14683] ? __get_vm_area_node+0x101/0x330 [ 475.038829][T14683] ? __lock_acquire+0x436/0x2890 [ 475.038841][T14683] ? __get_vm_area_node+0x101/0x330 [ 475.038857][T14683] __get_vm_area_node+0x101/0x330 [ 475.038876][T14683] __vmalloc_node_range_noprof+0x247/0x16b0 [ 475.038888][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.038901][T14683] ? __pfx___might_resched+0x10/0x10 [ 475.038918][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.038929][T14683] ? __pfx_css_rstat_updated+0x10/0x10 [ 475.038942][T14683] ? translate_compat_table+0x1c3/0x1830 [ 475.038956][T14683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.038966][T14683] ? kasan_save_stack+0x33/0x60 [ 475.038982][T14683] ? __pfx___mutex_lock+0x10/0x10 [ 475.038998][T14683] ? do_ipt_set_ctl+0x5ed/0xbb0 [ 475.039009][T14683] ? nf_setsockopt+0x8d/0xf0 [ 475.039026][T14683] ? ip_setsockopt+0xcb/0xf0 [ 475.039038][T14683] ? smc_setsockopt+0x1b6/0xa00 [ 475.039050][T14683] ? do_sock_setsockopt+0xf3/0x1d0 [ 475.039066][T14683] ? __sys_setsockopt+0x120/0x1a0 [ 475.039078][T14683] ? do_fast_syscall_32+0x32/0x80 [ 475.039090][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.039100][T14683] __vmalloc_node_noprof+0xad/0xf0 [ 475.039110][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.039123][T14683] xt_compat_init_offsets+0xe6/0x1f0 [ 475.039134][T14683] translate_compat_table+0x1fe/0x1830 [ 475.039153][T14683] ? __pfx_translate_compat_table+0x10/0x10 [ 475.039177][T14683] compat_do_replace+0x272/0x510 [ 475.039190][T14683] ? __pfx_compat_do_replace+0x10/0x10 [ 475.039204][T14683] ? __lock_acquire+0x436/0x2890 [ 475.039220][T14683] ? bpf_lsm_capable+0x9/0x10 [ 475.039234][T14683] ? security_capable+0x7e/0x260 [ 475.039254][T14683] do_ipt_set_ctl+0x5ed/0xbb0 [ 475.039265][T14683] ? find_held_lock+0x2b/0x80 [ 475.039280][T14683] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 475.039298][T14683] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 475.039312][T14683] ? sockopt_release_sock+0x52/0x60 [ 475.039327][T14683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.039346][T14683] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 475.039359][T14683] ? smc_setsockopt+0x100/0xa00 [ 475.039373][T14683] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 475.039392][T14683] nf_setsockopt+0x8d/0xf0 [ 475.039411][T14683] ip_setsockopt+0xcb/0xf0 [ 475.039424][T14683] tcp_setsockopt+0xa7/0x100 [ 475.039441][T14683] smc_setsockopt+0x1b6/0xa00 [ 475.039452][T14683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.039471][T14683] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.039491][T14683] ? aa_sock_opt_perm+0xfd/0x1b0 [ 475.039509][T14683] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.039522][T14683] do_sock_setsockopt+0xf3/0x1d0 [ 475.039540][T14683] __sys_setsockopt+0x120/0x1a0 [ 475.039556][T14683] __ia32_sys_setsockopt+0xbc/0x160 [ 475.039569][T14683] ? __do_fast_syscall_32+0x9a/0x680 [ 475.039589][T14683] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.039629][T14683] __do_fast_syscall_32+0xe8/0x680 [ 475.039655][T14683] do_fast_syscall_32+0x32/0x80 [ 475.039665][T14683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.039680][T14683] RIP: 0023:0xf7ff4579 [ 475.039688][T14683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 475.039699][T14683] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 475.039710][T14683] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 475.039717][T14683] RDX: 0000000000000040 RSI: 0000000080000d80 RDI: 0000000000000558 [ 475.039723][T14683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.039729][T14683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 475.039735][T14683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.039749][T14683] [ 475.039755][T14683] syz.2.2406: vmalloc error: size 24, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 475.080098][T14685] syzkaller0: entered promiscuous mode [ 475.083307][T14683] ,cpuset= [ 475.084438][T14685] syzkaller0: entered allmulticast mode [ 475.087340][T14683] /,mems_allowed=0-1 [ 475.234476][T14683] CPU: 2 UID: 0 PID: 14683 Comm: syz.2.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.234494][T14683] Tainted: [L]=SOFTLOCKUP [ 475.234497][T14683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 475.234504][T14683] Call Trace: [ 475.234509][T14683] [ 475.234513][T14683] dump_stack_lvl+0x16c/0x1f0 [ 475.234535][T14683] warn_alloc+0x248/0x3a0 [ 475.234551][T14683] ? __pfx_warn_alloc+0x10/0x10 [ 475.234563][T14683] ? trace_kmalloc+0x2b/0xb0 [ 475.234580][T14683] ? __get_vm_area_node+0x101/0x330 [ 475.234599][T14683] ? __kasan_kmalloc+0x8a/0xb0 [ 475.234614][T14683] ? __get_vm_area_node+0x208/0x330 [ 475.234634][T14683] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 475.234647][T14683] ? __pfx___might_resched+0x10/0x10 [ 475.234665][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.234682][T14683] ? __pfx_css_rstat_updated+0x10/0x10 [ 475.234694][T14683] ? translate_compat_table+0x1c3/0x1830 [ 475.234708][T14683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.234719][T14683] ? kasan_save_stack+0x33/0x60 [ 475.234733][T14683] ? __pfx___mutex_lock+0x10/0x10 [ 475.234750][T14683] ? do_ipt_set_ctl+0x5ed/0xbb0 [ 475.234761][T14683] ? nf_setsockopt+0x8d/0xf0 [ 475.234777][T14683] ? ip_setsockopt+0xcb/0xf0 [ 475.234789][T14683] ? smc_setsockopt+0x1b6/0xa00 [ 475.234801][T14683] ? do_sock_setsockopt+0xf3/0x1d0 [ 475.234817][T14683] ? __sys_setsockopt+0x120/0x1a0 [ 475.234830][T14683] ? do_fast_syscall_32+0x32/0x80 [ 475.234840][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.234851][T14683] __vmalloc_node_noprof+0xad/0xf0 [ 475.234861][T14683] ? xt_compat_init_offsets+0xe6/0x1f0 [ 475.234886][T14683] xt_compat_init_offsets+0xe6/0x1f0 [ 475.234898][T14683] translate_compat_table+0x1fe/0x1830 [ 475.234917][T14683] ? __pfx_translate_compat_table+0x10/0x10 [ 475.234941][T14683] compat_do_replace+0x272/0x510 [ 475.234955][T14683] ? __pfx_compat_do_replace+0x10/0x10 [ 475.234968][T14683] ? __lock_acquire+0x436/0x2890 [ 475.234985][T14683] ? bpf_lsm_capable+0x9/0x10 [ 475.234999][T14683] ? security_capable+0x7e/0x260 [ 475.235019][T14683] do_ipt_set_ctl+0x5ed/0xbb0 [ 475.235030][T14683] ? find_held_lock+0x2b/0x80 [ 475.235045][T14683] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 475.235064][T14683] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 475.235077][T14683] ? sockopt_release_sock+0x52/0x60 [ 475.235092][T14683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.235111][T14683] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 475.235124][T14683] ? smc_setsockopt+0x100/0xa00 [ 475.235138][T14683] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 475.235158][T14683] nf_setsockopt+0x8d/0xf0 [ 475.235176][T14683] ip_setsockopt+0xcb/0xf0 [ 475.235189][T14683] tcp_setsockopt+0xa7/0x100 [ 475.235206][T14683] smc_setsockopt+0x1b6/0xa00 [ 475.235218][T14683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.235236][T14683] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.235250][T14683] ? aa_sock_opt_perm+0xfd/0x1b0 [ 475.235268][T14683] ? __pfx_smc_setsockopt+0x10/0x10 [ 475.235281][T14683] do_sock_setsockopt+0xf3/0x1d0 [ 475.235299][T14683] __sys_setsockopt+0x120/0x1a0 [ 475.235315][T14683] __ia32_sys_setsockopt+0xbc/0x160 [ 475.235327][T14683] ? __do_fast_syscall_32+0x9a/0x680 [ 475.235344][T14683] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.235360][T14683] __do_fast_syscall_32+0xe8/0x680 [ 475.235379][T14683] do_fast_syscall_32+0x32/0x80 [ 475.235389][T14683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.235403][T14683] RIP: 0023:0xf7ff4579 [ 475.235412][T14683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 475.235422][T14683] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 475.235433][T14683] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 475.235440][T14683] RDX: 0000000000000040 RSI: 0000000080000d80 RDI: 0000000000000558 [ 475.235459][T14683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.235465][T14683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 475.235471][T14683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.235485][T14683] [ 475.236180][T14683] Mem-Info: [ 475.400891][T14683] active_anon:3908 inactive_anon:2113 isolated_anon:0 [ 475.400891][T14683] active_file:2411 inactive_file:8669 isolated_file:0 [ 475.400891][T14683] unevictable:1768 dirty:443 writeback:0 [ 475.400891][T14683] slab_reclaimable:6478 slab_unreclaimable:66258 [ 475.400891][T14683] mapped:26269 shmem:4655 pagetables:1136 [ 475.400891][T14683] sec_pagetables:324 bounce:0 [ 475.400891][T14683] kernel_misc_reclaimable:0 [ 475.400891][T14683] free:36061 free_pcp:13727 free_cma:0 [ 475.420424][T14683] Node 0 active_anon:32kB inactive_anon:20kB active_file:272kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:3852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9440kB pagetables:1648kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 475.434440][T14683] Node 1 active_anon:15612kB inactive_anon:8432kB active_file:9464kB inactive_file:34660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105064kB dirty:1780kB writeback:0kB shmem:14720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5216kB pagetables:2920kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB [ 475.441801][ T8132] usb usb38-port1: attempt power cycle [ 475.447897][T14683] Node 0 DMA free:2024kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:52kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 475.464888][T14683] lowmem_reserve[]: 0 289 289 289 289 [ 475.466775][T14683] Node 0 DMA32 free:19728kB boost:6144kB min:19476kB low:22808kB high:26140kB reserved_highatomic:2048KB free_highatomic:16KB active_anon:32kB inactive_anon:20kB active_file:268kB inactive_file:16kB unevictable:3536kB writepending:4kB zspages:108kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:9020kB local_pcp:2424kB free_cma:0kB [ 475.477880][T14683] lowmem_reserve[]: 0 0 0 0 0 [ 475.479931][T14683] Node 1 DMA32 free:122396kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1476KB active_anon:15612kB inactive_anon:8432kB active_file:9464kB inactive_file:34660kB unevictable:3536kB writepending:1780kB zspages:5276kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45572kB local_pcp:12900kB free_cma:0kB [ 475.494067][T14683] lowmem_reserve[]: 0 0 0 0 0 [ 475.496139][T14683] Node 0 DMA: 6*4kB (UM) 6*8kB (UM) 2*16kB (UM) 4*32kB (UM) 2*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2024kB [ 475.502231][T14683] Node 0 DMA32: 598*4kB (UMEH) 161*8kB (UME) 67*16kB (UE) 144*32kB (UE) 66*64kB (UME) 24*128kB (UM) 10*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19728kB [ 475.509057][T14683] Node 1 DMA32: 1407*4kB (UMH) 2612*8kB (UMEH) 1891*16kB (UMEH) 255*32kB (UMEH) 146*64kB (UMEH) 82*128kB (UMH) 31*256kB (UMH) 18*512kB (UM) 10*1024kB (UM) 5*2048kB (UM) 0*4096kB = 122412kB [ 475.516952][T14683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.521150][T14683] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 475.536859][T14683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.539975][T14683] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 475.543387][T14683] 13388 total pagecache pages [ 475.545110][T14683] 486 pages in swap cache [ 475.546862][T14683] Free swap = 106044kB [ 475.548363][T14683] Total swap = 124996kB [ 475.549878][T14683] 524155 pages RAM [ 475.551776][T14683] 0 pages HighMem/MovableOnly [ 475.553953][T14683] 209059 pages reserved [ 475.563180][T14683] 0 pages cma reserved [ 475.642956][T14694] syzkaller0: entered promiscuous mode [ 475.645561][T14694] syzkaller0: entered allmulticast mode [ 476.202009][ T8132] usb usb38-port1: unable to enumerate USB device [ 476.333723][T14719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 476.335946][T14719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.339183][T14719] vhci_hcd vhci_hcd.0: Device attached [ 476.482114][T14723] ipt_ECN: cannot use operation on non-tcp rule [ 476.721312][ T6832] usb 37-1: new low-speed USB device number 20 using vhci_hcd [ 476.980947][T14720] vhci_hcd: connection reset by peer [ 476.983760][ T1160] vhci_hcd vhci_hcd.0: stop threads [ 476.985774][ T1160] vhci_hcd vhci_hcd.0: release socket [ 476.987611][ T1160] vhci_hcd vhci_hcd.0: disconnect device [ 477.507623][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.516675][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.525370][T14730] netlink: 'syz.2.2417': attribute type 16 has an invalid length. [ 477.667082][T14734] syzkaller0: entered promiscuous mode [ 477.669057][T14734] syzkaller0: entered allmulticast mode [ 477.813698][T14739] syzkaller0: entered promiscuous mode [ 477.815574][T14739] syzkaller0: entered allmulticast mode [ 477.855260][T14740] 9p: Bad value for 'rfdno' [ 477.904709][T14742] syzkaller0: entered promiscuous mode [ 477.907140][T14742] syzkaller0: entered allmulticast mode [ 478.041171][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 479.692748][T14777] x_tables: duplicate underflow at hook 1 [ 479.717316][T14767] syzkaller0: entered promiscuous mode [ 479.719758][T14767] syzkaller0: entered allmulticast mode [ 480.834288][T14802] syzkaller0: entered promiscuous mode [ 480.836876][T14802] syzkaller0: entered allmulticast mode [ 481.971195][ T6832] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 482.484636][T14824] syzkaller0: entered promiscuous mode [ 482.486496][T14824] syzkaller0: entered allmulticast mode [ 483.201664][T14852] XFS (nullb0): Invalid superblock magic number [ 484.043094][T14866] tmpfs: Unknown parameter 'ºñq£¼Ã{Šòf¦`¨˜ô7r;ݸRŒñ+ž [ 484.043094][T14866] ±( ë#:ø·´«°„(Ðq¶ãÀôE¡p¥Gïϸ±iÝ«Ž±È’™Tƒ¹G' [ 484.058298][T14868] syzkaller0: entered promiscuous mode [ 484.060278][T14868] syzkaller0: entered allmulticast mode [ 484.239050][T14886] syzkaller0: entered promiscuous mode [ 484.241024][T14886] syzkaller0: entered allmulticast mode [ 484.285020][T14887] syzkaller0: entered promiscuous mode [ 484.287562][T14887] syzkaller0: entered allmulticast mode [ 484.688546][T14895] syzkaller0: entered promiscuous mode [ 484.690381][T14895] syzkaller0: entered allmulticast mode [ 485.149605][T14913] 9pnet_fd: p9_fd_create_tcp (14913): problem connecting socket to 127.0.0.1 [ 485.887247][T14928] syzkaller0: entered promiscuous mode [ 485.889787][T14928] syzkaller0: entered allmulticast mode [ 486.454497][T14950] FAULT_INJECTION: forcing a failure. [ 486.454497][T14950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.462353][T14950] CPU: 3 UID: 0 PID: 14950 Comm: syz.2.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.462382][T14950] Tainted: [L]=SOFTLOCKUP [ 486.462388][T14950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.462399][T14950] Call Trace: [ 486.462406][T14950] [ 486.462413][T14950] dump_stack_lvl+0x16c/0x1f0 [ 486.462445][T14950] should_fail_ex+0x512/0x640 [ 486.462471][T14950] should_fail_alloc_page+0xe7/0x130 [ 486.462502][T14950] prepare_alloc_pages+0x401/0x670 [ 486.462532][T14950] ? rcu_is_watching+0x12/0xc0 [ 486.462559][T14950] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 486.462588][T14950] ? vmx_vcpu_pi_load+0xfc/0x900 [ 486.462611][T14950] ? lock_acquire+0x179/0x330 [ 486.462632][T14950] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.462660][T14950] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 486.462686][T14950] ? __lock_acquire+0x436/0x2890 [ 486.462706][T14950] ? __lock_acquire+0x436/0x2890 [ 486.462722][T14950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.462751][T14950] ? policy_nodemask+0xea/0x4e0 [ 486.462781][T14950] alloc_pages_mpol+0x1fb/0x550 [ 486.462816][T14950] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.462851][T14950] folio_alloc_mpol_noprof+0x36/0x2f0 [ 486.462887][T14950] vma_alloc_folio_noprof+0xed/0x1e0 [ 486.462908][T14950] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 486.462936][T14950] do_anonymous_page+0xc81/0x2190 [ 486.462965][T14950] __handle_mm_fault+0x1ecf/0x2bb0 [ 486.462992][T14950] ? __pfx___handle_mm_fault+0x10/0x10 [ 486.463014][T14950] ? __pte_offset_map_lock+0x174/0x310 [ 486.463041][T14950] ? find_held_lock+0x2b/0x80 [ 486.463074][T14950] ? follow_page_pte+0x5cf/0x1390 [ 486.463107][T14950] handle_mm_fault+0x3fe/0xad0 [ 486.463132][T14950] __get_user_pages+0x54e/0x3590 [ 486.463167][T14950] ? down_read_killable+0x313/0x4c0 [ 486.463188][T14950] ? __pfx___get_user_pages+0x10/0x10 [ 486.463215][T14950] ? __pfx_gup_fast_fallback+0x10/0x10 [ 486.463248][T14950] get_user_pages_unlocked+0x1ca/0x780 [ 486.463280][T14950] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 486.463308][T14950] ? get_user_pages_fast_only+0xae/0xf0 [ 486.463335][T14950] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 486.463363][T14950] ? __pfx___might_resched+0x10/0x10 [ 486.463395][T14950] hva_to_pfn+0x886/0xe60 [ 486.463419][T14950] ? __pfx_hva_to_pfn+0x10/0x10 [ 486.463436][T14950] ? __lock_acquire+0x436/0x2890 [ 486.463454][T14950] ? __lock_acquire+0x436/0x2890 [ 486.463487][T14950] kvm_follow_pfn+0x2d4/0x430 [ 486.463533][T14950] __kvm_faultin_pfn+0x11c/0x1a0 [ 486.463553][T14950] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 486.463573][T14950] ? __pfx_xa_load+0x10/0x10 [ 486.463600][T14950] kvm_mmu_faultin_pfn+0x54a/0x2060 [ 486.463633][T14950] ? __pfx_fast_page_fault+0x10/0x10 [ 486.463659][T14950] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 486.463683][T14950] ? x86_decode_insn+0xfbf/0x6170 [ 486.463710][T14950] ? __kvm_mmu_topup_memory_cache+0x332/0x600 [ 486.463750][T14950] kvm_tdp_page_fault+0x186/0x3f0 [ 486.463773][T14950] kvm_mmu_do_page_fault+0x588/0x6c0 [ 486.463799][T14950] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 486.463824][T14950] ? kvm_multiple_exception+0x379/0x750 [ 486.463858][T14950] kvm_mmu_page_fault+0x225/0x1c60 [ 486.463881][T14950] ? __pfx___kvm_get_msr+0x10/0x10 [ 486.463914][T14950] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 486.463936][T14950] ? __lock_acquire+0x436/0x2890 [ 486.463955][T14950] ? rcu_is_watching+0x12/0xc0 [ 486.463977][T14950] ? __vmx_complete_interrupts+0x111/0x4e0 [ 486.464001][T14950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.464034][T14950] handle_ept_violation+0x2df/0x710 [ 486.464059][T14950] ? __pfx_handle_ept_violation+0x10/0x10 [ 486.464081][T14950] vmx_handle_exit+0x129b/0x1a00 [ 486.464109][T14950] vcpu_run+0x3468/0x5a80 [ 486.464131][T14950] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 486.464167][T14950] ? __pfx_vcpu_run+0x10/0x10 [ 486.464205][T14950] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 486.464228][T14950] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 486.464258][T14950] kvm_vcpu_ioctl+0x76d/0x16d0 [ 486.464289][T14950] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 486.464318][T14950] ? tomoyo_path_number_perm+0x18d/0x580 [ 486.464342][T14950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.464374][T14950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.464403][T14950] ? do_vfs_ioctl+0x128/0x14f0 [ 486.464425][T14950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 486.464459][T14950] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 486.464489][T14950] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 486.464518][T14950] ? __fget_files+0x20e/0x3c0 [ 486.464541][T14950] ? __fput_deferred+0x480/0x480 [ 486.464564][T14950] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 486.464593][T14950] __ia32_compat_sys_ioctl+0x242/0x370 [ 486.464620][T14950] __do_fast_syscall_32+0xe8/0x680 [ 486.464651][T14950] do_fast_syscall_32+0x32/0x80 [ 486.464668][T14950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.464691][T14950] RIP: 0023:0xf7ff4579 [ 486.464706][T14950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.464723][T14950] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 486.464741][T14950] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 486.464753][T14950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.464763][T14950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.464773][T14950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.464783][T14950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.464814][T14950] [ 487.662481][T14962] openvswitch: netlink: Flow key attribute not present in set flow. [ 487.782171][T14966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2468'. [ 487.938731][T14969] syzkaller0: entered promiscuous mode [ 487.942076][T14969] syzkaller0: entered allmulticast mode [ 488.079076][T14973] syzkaller0: entered promiscuous mode [ 488.087150][T14973] syzkaller0: entered allmulticast mode [ 489.127897][T14998] befs: (nullb0): No write support. Marking filesystem read-only [ 489.135261][T14998] befs: (nullb0): invalid magic header [ 489.707328][T14999] netlink: 'syz.3.2476': attribute type 26 has an invalid length. [ 489.724644][T15010] syzkaller0: entered promiscuous mode [ 489.727033][T15010] syzkaller0: entered allmulticast mode [ 489.777401][T15015] 9pnet_fd: p9_fd_create_tcp (15015): problem connecting socket to 127.0.0.1 [ 489.903230][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'. [ 491.257573][T15031] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 491.288448][T15031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.307173][T15034] binder_alloc: 15033: binder_alloc_buf size 16777216 failed, no address space [ 491.310164][T15034] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 491.532317][T15031] bond4: (slave veth0_to_bond): making interface the new active one [ 491.535773][T15031] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 491.665125][T15043] ipt_ECN: cannot use operation on non-tcp rule [ 491.848242][T15049] fuse: Unknown parameter '«' [ 491.856378][ T40] audit: type=1326 audit(2000000050.209:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.872062][ T40] audit: type=1326 audit(2000000050.219:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.881600][ T40] audit: type=1326 audit(2000000050.219:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.889767][ T40] audit: type=1326 audit(2000000050.219:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.899357][ T40] audit: type=1326 audit(2000000050.219:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.907434][ T40] audit: type=1326 audit(2000000050.219:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.916198][ T40] audit: type=1326 audit(2000000050.219:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.924006][ T40] audit: type=1326 audit(2000000050.219:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.930994][ T40] audit: type=1326 audit(2000000050.219:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 491.938379][ T40] audit: type=1326 audit(2000000050.219:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.0.2484" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 492.207554][T15055] syzkaller0: entered promiscuous mode [ 492.209413][T15055] syzkaller0: entered allmulticast mode [ 494.014516][T15078] tls_set_device_offload_rx: netdev not found [ 494.527732][T15088] syzkaller0: entered promiscuous mode [ 494.529555][T15088] syzkaller0: entered allmulticast mode [ 495.694561][T15119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.984896][T15125] fuse: Unknown parameter 'rooV' [ 496.393853][T15144] overlayfs: failed to resolve './file1/file0': -2 [ 496.409745][T15146] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 497.434935][T15160] bridge_slave_0: left allmulticast mode [ 497.437679][T15160] bridge_slave_0: left promiscuous mode [ 497.440097][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.448482][T15160] bridge_slave_1: left promiscuous mode [ 497.452889][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.465541][T15160] bond4: (slave veth0_to_bond): Releasing active interface [ 497.474509][T15160] bond0: (slave bond_slave_0): Releasing backup interface [ 497.481730][T15160] bond0: (slave bond_slave_1): Releasing backup interface [ 497.487812][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.491380][T15160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.496098][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.499425][T15160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.505053][T15160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.524386][T15163] syzkaller0: entered promiscuous mode [ 497.526317][T15163] syzkaller0: entered allmulticast mode [ 497.683963][T15169] syzkaller0: entered promiscuous mode [ 497.686499][T15169] syzkaller0: entered allmulticast mode [ 498.986101][ T53] IPVS: starting estimator thread 0... [ 499.047683][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 499.071352][T15198] IPVS: using max 44 ests per chain, 105600 per kthread [ 499.452998][T15221] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 499.455343][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.460685][T15221] vhci_hcd vhci_hcd.0: Device attached [ 499.701368][ T60] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 499.948128][T15229] syzkaller0: entered promiscuous mode [ 499.950555][T15229] syzkaller0: entered allmulticast mode [ 500.022916][T15222] vhci_hcd: connection reset by peer [ 500.025657][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 500.028004][ T1144] vhci_hcd vhci_hcd.2: release socket [ 500.030524][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 500.571625][T13582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.575942][T13582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.581387][T13582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.598140][T13582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.603576][T13582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.538836][ T8240] syz_tun (unregistering): left allmulticast mode [ 501.776700][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.034475][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.077794][T15236] chnl_net:caif_netlink_parms(): no params data found [ 502.168618][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.176242][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.178817][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.181738][T15236] bridge_slave_0: entered allmulticast mode [ 502.185555][T15236] bridge_slave_0: entered promiscuous mode [ 502.188885][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.192263][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.194728][T15236] bridge_slave_1: entered allmulticast mode [ 502.197840][T15236] bridge_slave_1: entered promiscuous mode [ 502.213481][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.218403][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.226446][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.246077][T15236] team0: Port device team_slave_0 added [ 502.249422][T15236] team0: Port device team_slave_1 added [ 502.263145][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.265768][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.277141][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.282016][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.284478][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.293259][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.337309][T15236] hsr_slave_0: entered promiscuous mode [ 502.340129][T15236] hsr_slave_1: entered promiscuous mode [ 502.342614][T15236] debugfs: 'hsr0' already exists in 'hsr' [ 502.345072][T15236] Cannot create hsr debugfs directory [ 502.402266][ T12] team0: left allmulticast mode [ 502.404180][ T12] geneve0: left allmulticast mode [ 502.406112][ T12] geneve0: left promiscuous mode [ 502.408114][ T12] bridge0: port 1(team0) entered disabled state [ 502.691194][T13582] Bluetooth: hci3: command tx timeout [ 502.945280][ T12] dvmrp6 (unregistering): left allmulticast mode [ 503.386996][ T12] team0: Port device geneve0 removed [ 503.648412][ T12] team0: Port device bridge2 removed [ 504.051771][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 504.099963][ T12] bond0 (unregistering): Released all slaves [ 504.106552][ T12] bond1 (unregistering): Released all slaves [ 504.116998][ T12] bond2 (unregistering): Released all slaves [ 504.127038][ T12] bond3 (unregistering): Released all slaves [ 504.133617][T15291] 9p: Bad value for 'rfdno' [ 504.135915][ T12] bond4 (unregistering): Released all slaves [ 504.317450][ T12] bond5 (unregistering): Released all slaves [ 504.434061][ T12] bond6 (unregistering): Released all slaves [ 504.551700][ T12] bond7 (unregistering): Released all slaves [ 504.641134][ T6942] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 504.641576][ T12] bond8 (unregistering): Released all slaves [ 504.729211][ T12] bond9 (unregistering): Released all slaves [ 504.781393][T13582] Bluetooth: hci3: command tx timeout [ 504.810003][ T12] bond10 (unregistering): Released all slaves [ 504.812333][ T6942] usb 6-1: config 0 has no interfaces? [ 504.814573][ T6942] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 504.817677][ T6942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.828257][ T6942] usb 6-1: config 0 descriptor?? [ 504.861170][ T60] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 504.900168][ T12] bond11 (unregistering): Released all slaves [ 505.020654][ T12] bond12 (unregistering): Released all slaves [ 505.105843][ T12] bond13 (unregistering): Released all slaves [ 505.173784][ T12] bond14 (unregistering): Released all slaves [ 505.239570][ T12] bond15 (unregistering): Released all slaves [ 505.321702][ T12] bond16 (unregistering): Released all slaves [ 505.386623][ T12] bond17 (unregistering): Released all slaves [ 505.462957][ T12] bond18 (unregistering): Released all slaves [ 505.530861][ T12] bond19 (unregistering): Released all slaves [ 505.603777][ T12] bond20 (unregistering): Released all slaves [ 505.681911][ T12] bond21 (unregistering): Released all slaves [ 505.765441][ T12] bond22 (unregistering): Released all slaves [ 505.856672][ T12] bond23 (unregistering): Released all slaves [ 505.930728][ T12] bond24 (unregistering): Released all slaves [ 506.002677][ T12] bond25 (unregistering): Released all slaves [ 506.062884][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.065628][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.089961][ T12] bond26 (unregistering): Released all slaves [ 506.166770][ T12] bond27 (unregistering): Released all slaves [ 506.238709][ T12] bond28 (unregistering): Released all slaves [ 506.275340][T15313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 506.285654][T15313] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 506.686318][T15334] binder_alloc: 15333: binder_alloc_buf size 16777216 failed, no address space [ 506.689438][T15334] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 506.698815][T15334] FAULT_INJECTION: forcing a failure. [ 506.698815][T15334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.704440][T15334] CPU: 2 UID: 0 PID: 15334 Comm: syz.2.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.704458][T15334] Tainted: [L]=SOFTLOCKUP [ 506.704462][T15334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 506.704469][T15334] Call Trace: [ 506.704473][T15334] [ 506.704477][T15334] dump_stack_lvl+0x16c/0x1f0 [ 506.704577][T15334] should_fail_ex+0x512/0x640 [ 506.704613][T15334] _copy_to_user+0x32/0xd0 [ 506.704627][T15334] simple_read_from_buffer+0xcb/0x170 [ 506.704643][T15334] proc_fail_nth_read+0x197/0x240 [ 506.704662][T15334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.704681][T15334] ? rw_verify_area+0xcf/0x6c0 [ 506.704695][T15334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.704713][T15334] vfs_read+0x1e4/0xcf0 [ 506.704729][T15334] ? __pfx___mutex_lock+0x10/0x10 [ 506.704747][T15334] ? __pfx_vfs_read+0x10/0x10 [ 506.704761][T15334] ? find_held_lock+0x2b/0x80 [ 506.704779][T15334] ? __fget_files+0x20e/0x3c0 [ 506.704800][T15334] ksys_read+0x12a/0x250 [ 506.704815][T15334] ? __pfx_ksys_read+0x10/0x10 [ 506.704834][T15334] __do_fast_syscall_32+0xe8/0x680 [ 506.704853][T15334] do_fast_syscall_32+0x32/0x80 [ 506.704863][T15334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.704876][T15334] RIP: 0023:0xf7ff4579 [ 506.704885][T15334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 506.704896][T15334] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 506.704906][T15334] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54e6620 [ 506.704913][T15334] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 506.704919][T15334] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 506.704925][T15334] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 506.704931][T15334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.704944][T15334] [ 506.851197][T13582] Bluetooth: hci3: command tx timeout [ 506.983987][T15236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.988433][T15236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.992706][T15236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.998491][T15236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.062286][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.073904][T15343] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 507.076113][T15343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 507.080764][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.083133][T15343] vhci_hcd vhci_hcd.0: Device attached [ 507.091455][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.091567][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.097235][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.097281][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.200921][T15365] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 507.203123][T15365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.206584][T15365] vhci_hcd vhci_hcd.0: Device attached [ 507.250432][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.285686][T15236] veth0_vlan: entered promiscuous mode [ 507.293974][T15236] veth1_vlan: entered promiscuous mode [ 507.315110][T15236] veth0_macvtap: entered promiscuous mode [ 507.321043][T15236] veth1_macvtap: entered promiscuous mode [ 507.347387][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.361276][ T9] usb 38-1: SetAddress Request (22) to port 0 [ 507.364565][ T9] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 507.364752][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.376309][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.379813][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.383183][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.387128][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.453892][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.457032][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.461347][T15271] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 507.469146][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.472712][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.488909][T15358] vhci_hcd: connection reset by peer [ 507.492576][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 507.494410][ T1140] vhci_hcd vhci_hcd.0: release socket [ 507.496322][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 507.497994][ T24] usb 6-1: USB disconnect, device number 15 [ 507.588612][T15374] binder: BINDER_SET_CONTEXT_MGR already set [ 507.591495][T15374] binder: 15370:15374 ioctl 4018620d 80004a80 returned -16 [ 508.523692][T15366] vhci_hcd: connection reset by peer [ 508.528739][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 508.538633][ T1140] vhci_hcd vhci_hcd.2: release socket [ 508.541415][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 508.941569][T13582] Bluetooth: hci3: command tx timeout [ 509.026546][ T12] hsr_slave_0: left promiscuous mode [ 509.029032][ T12] hsr_slave_1: left promiscuous mode [ 509.038723][ T12] veth1_macvtap: left promiscuous mode [ 509.040636][ T12] veth0_macvtap: left promiscuous mode [ 509.049910][ T12] veth1_vlan: left promiscuous mode [ 509.057515][ T12] veth0_vlan: left promiscuous mode [ 509.108122][ T12] pim6reg (unregistering): left allmulticast mode [ 509.299205][T15244] smc: removing ib device syz2 [ 509.761721][T15389] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 509.764667][T15389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 509.768486][T15389] vhci_hcd vhci_hcd.0: Device attached [ 510.051275][ T892] usb 40-1: SetAddress Request (18) to port 0 [ 510.054550][ T892] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 510.137100][T15397] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2560'. [ 510.322554][T15390] vhci_hcd: connection reset by peer [ 510.324658][T15244] vhci_hcd vhci_hcd.1: stop threads [ 510.326500][T15244] vhci_hcd vhci_hcd.1: release socket [ 510.328333][T15244] vhci_hcd vhci_hcd.1: disconnect device [ 510.358399][T15389] wg2 speed is unknown, defaulting to 1000 [ 510.362174][T15389] wg2 speed is unknown, defaulting to 1000 [ 510.365485][T15389] wg2 speed is unknown, defaulting to 1000 [ 510.389759][T15395] siw: device registration error -23 [ 510.512478][T15389] infiniband syz2: set active [ 510.514128][ T6832] wg2 speed is unknown, defaulting to 1000 [ 510.516151][T15389] infiniband syz2: added wg2 [ 510.541460][T15389] RDS/IB: syz2: added [ 510.546697][T15389] smc: adding ib device syz2 with port count 1 [ 510.549433][T15389] smc: ib device syz2 port 1 has no pnetid [ 510.551213][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 510.552388][ T6832] wg2 speed is unknown, defaulting to 1000 [ 510.563558][T15389] wg2 speed is unknown, defaulting to 1000 [ 510.715001][T15389] wg2 speed is unknown, defaulting to 1000 [ 510.719699][ T10] usb 5-1: config 0 has no interfaces? [ 510.722289][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 510.726379][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.741490][ T10] usb 5-1: config 0 descriptor?? [ 510.827149][ T12] bridge_slave_1: left allmulticast mode [ 510.830089][ T12] bridge_slave_1: left promiscuous mode [ 510.833582][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.838662][ T12] bridge_slave_0: left allmulticast mode [ 510.846588][ T12] bridge_slave_0: left promiscuous mode [ 510.849247][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.441794][T15412] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 511.444597][T15412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.448404][T15412] vhci_hcd vhci_hcd.0: Device attached [ 511.456449][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.477130][T15413] vhci_hcd: connection closed [ 511.477956][ T62] vhci_hcd vhci_hcd.3: stop threads [ 511.485261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.488092][ T62] vhci_hcd vhci_hcd.3: release socket [ 511.501720][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 511.502185][ T12] bond0 (unregistering): Released all slaves [ 511.510989][ T12] bond1 (unregistering): Released all slaves [ 511.533457][T15395] syz.2.2558 (15395) used greatest stack depth: 18904 bytes left [ 511.535382][T15389] wg2 speed is unknown, defaulting to 1000 [ 511.643432][ T12] tipc: Disabling bearer [ 511.665448][ T12] tipc: Left network mode [ 511.732991][ T12] IPVS: stopping backup sync thread 12518 ... [ 511.906057][T15389] wg2 speed is unknown, defaulting to 1000 [ 512.105794][T15420] syzkaller0: entered promiscuous mode [ 512.108220][T15420] syzkaller0: entered allmulticast mode [ 512.117575][T15389] wg2 speed is unknown, defaulting to 1000 [ 512.461401][ T9] usb 38-1: device descriptor read/8, error -110 [ 512.621243][T15271] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 512.641255][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 512.641271][ T40] audit: type=1326 audit(2000000070.989:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.2.2564" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x0 [ 512.653565][ T12] hsr_slave_0: left promiscuous mode [ 512.661903][ T12] hsr_slave_1: left promiscuous mode [ 512.664811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.693275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.756953][T15429] ptrace attach of "/syz-executor exec"[15430] was attempted by "/syz-executor exec"[15429] [ 512.791232][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 512.864228][ T9] usb usb38-port1: attempt power cycle [ 513.022431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 513.046945][ T12] team0 (unregistering): Port device team_slave_0 removed [ 513.431861][ T6350] usb 5-1: USB disconnect, device number 19 [ 513.561200][ T9] usb usb38-port1: unable to enumerate USB device [ 513.890960][T15449] siw: device registration error -23 [ 515.091169][ T892] usb 40-1: device descriptor read/8, error -110 [ 515.344577][T15473] sctp: [Deprecated]: syz.2.2578 (pid 15473) Use of int in maxseg socket option. [ 515.344577][T15473] Use struct sctp_assoc_value instead [ 515.501760][ T892] usb usb40-port1: attempt power cycle [ 515.562807][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 515.566069][T15486] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 515.570531][T15488] netlink: 'syz.2.2585': attribute type 9 has an invalid length. [ 515.577527][T15486] block nbd3: not configured, cannot reconfigure [ 515.579895][T15488] netlink: 'syz.2.2585': attribute type 11 has an invalid length. [ 515.584894][T15488] netlink: 'syz.2.2585': attribute type 12 has an invalid length. [ 515.587946][T15488] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2585'. [ 515.597941][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 515.622999][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.627235][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.630165][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.634416][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.637103][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.683376][T15492] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 515.685530][T15492] [U] J"—e:ÀÆ" [ 515.688861][T15489] wg2 speed is unknown, defaulting to 1000 [ 515.750970][T15495] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2587'. [ 515.969366][T15489] chnl_net:caif_netlink_parms(): no params data found [ 516.048376][T15521] siw: device registration error -23 [ 516.066685][ T892] usb usb40-port1: unable to enumerate USB device [ 516.083581][T14834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.105040][T15489] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.111279][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.114382][T15489] bridge_slave_0: entered allmulticast mode [ 516.118185][T15489] bridge_slave_0: entered promiscuous mode [ 516.129201][T15489] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.144488][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.147660][T15489] bridge_slave_1: entered allmulticast mode [ 516.151387][T15489] bridge_slave_1: entered promiscuous mode [ 516.181904][T14834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.190507][T15489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.195351][T15489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.209695][T15489] team0: Port device team_slave_0 added [ 516.213134][T15489] team0: Port device team_slave_1 added [ 516.226182][T15489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.228471][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.237232][T15489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.242355][T15489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.244633][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.256169][T15489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.269573][T14834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.278091][T15525] netlink: 'syz.3.2593': attribute type 1 has an invalid length. [ 516.280760][T15525] netlink: 'syz.3.2593': attribute type 3 has an invalid length. [ 516.283506][T15525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2593'. [ 516.343273][T15489] hsr_slave_0: entered promiscuous mode [ 516.345623][T15489] hsr_slave_1: entered promiscuous mode [ 516.394509][T15530] 9pnet_virtio: no channels available for device syz [ 516.400887][T14834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.401540][T15530] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 516.407422][T15530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 516.410296][T15530] vhci_hcd vhci_hcd.0: Device attached [ 516.671295][ T892] usb 44-1: SetAddress Request (14) to port 0 [ 516.673934][ T892] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 516.871352][ T6350] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 517.021152][ T6350] usb 8-1: Using ep0 maxpacket: 32 [ 517.024655][ T6350] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 517.028191][ T6350] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 517.032658][ T6350] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.036414][ T6350] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 517.042634][ T6350] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 517.045740][ T6350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.048395][ T6350] usb 8-1: Product: syz [ 517.049816][ T6350] usb 8-1: Manufacturer: syz [ 517.051844][ T6350] usb 8-1: SerialNumber: syz [ 517.059784][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 517.065868][ T6350] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input23 [ 517.146412][T15534] FAULT_INJECTION: forcing a failure. [ 517.146412][T15534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.150894][T15534] CPU: 2 UID: 0 PID: 15534 Comm: syz.2.2596 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.150912][T15534] Tainted: [L]=SOFTLOCKUP [ 517.150916][T15534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.150923][T15534] Call Trace: [ 517.150927][T15534] [ 517.150931][T15534] dump_stack_lvl+0x16c/0x1f0 [ 517.150953][T15534] should_fail_ex+0x512/0x640 [ 517.150968][T15534] _copy_from_user+0x2e/0xd0 [ 517.150994][T15534] get_compat_msghdr+0xa7/0x170 [ 517.151010][T15534] ? __pfx_get_compat_msghdr+0x10/0x10 [ 517.151026][T15534] ? __lock_acquire+0x436/0x2890 [ 517.151039][T15534] ___sys_recvmsg+0x191/0x1a0 [ 517.151054][T15534] ? __pfx____sys_recvmsg+0x10/0x10 [ 517.151070][T15534] ? find_held_lock+0x2b/0x80 [ 517.151089][T15534] ? __pfx___might_resched+0x10/0x10 [ 517.151107][T15534] do_recvmmsg+0x55d/0x750 [ 517.151122][T15534] ? __pfx_do_recvmmsg+0x10/0x10 [ 517.151145][T15534] ? __fget_files+0x20e/0x3c0 [ 517.151163][T15534] __sys_recvmmsg+0x21c/0x280 [ 517.151178][T15534] ? __pfx___sys_recvmmsg+0x10/0x10 [ 517.151193][T15534] ? __pfx_ksys_write+0x10/0x10 [ 517.151211][T15534] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 517.151248][T15534] ? __do_fast_syscall_32+0x9a/0x680 [ 517.151269][T15534] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.151287][T15534] __do_fast_syscall_32+0xe8/0x680 [ 517.151305][T15534] do_fast_syscall_32+0x32/0x80 [ 517.151316][T15534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.151330][T15534] RIP: 0023:0xf7ff4579 [ 517.151339][T15534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.151350][T15534] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 517.151361][T15534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 517.151368][T15534] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 517.151374][T15534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.151380][T15534] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.151386][T15534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.151400][T15534] [ 517.271189][ T6350] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 517.274009][ T6350] (id 0x00) [ 517.296607][T14834] bond0 (unregistering): Released all slaves [ 517.301232][T14834] bond1 (unregistering): Released all slaves [ 517.307388][T14834] bond2 (unregistering): Released all slaves [ 517.313597][T14834] bond3 (unregistering): Released all slaves [ 517.323920][ T6350] rc_core: IR keymap rc-imon-pad not found [ 517.325876][ T6350] Registered IR keymap rc-empty [ 517.327604][ T6350] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 517.330938][ T6350] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 517.495080][T14834] bond4 (unregistering): Released all slaves [ 517.507996][T15539] binder: 15537:15539 ioctl 0 80000040 returned -22 [ 517.652546][ T5941] Bluetooth: hci1: command tx timeout [ 517.665736][ T6350] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 517.669739][T14834] : left promiscuous mode [ 517.670081][ T6350] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input24 [ 517.769554][T14834] tipc: Disabling bearer [ 517.771609][T14834] tipc: Left network mode [ 518.135911][T15489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.175909][T15531] vhci_hcd: connection reset by peer [ 518.179173][ T6350] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:24> initialized [ 518.179631][ T13] vhci_hcd vhci_hcd.3: stop threads [ 518.184835][ T13] vhci_hcd vhci_hcd.3: release socket [ 518.186899][T15489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.186943][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 518.192491][ T6350] usb 8-1: USB disconnect, device number 24 [ 518.213718][T15489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.223776][T15489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.238768][T15558] Cannot find map_set index 2 as target [ 518.342542][T15489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.364918][T15489] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.391125][T14834] hsr_slave_0: left promiscuous mode [ 518.405413][T14834] hsr_slave_1: left promiscuous mode [ 518.418260][T14834] veth1_macvtap: left promiscuous mode [ 518.420680][T14834] veth0_macvtap: left promiscuous mode [ 518.423396][T14834] veth1_vlan: left promiscuous mode [ 518.425778][T14834] veth0_vlan: left promiscuous mode [ 518.995915][ T53] infiniband syz0: ib_query_port failed (-19) [ 518.997161][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.001284][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.008862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.011344][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.155932][T15489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.323638][T15489] veth0_vlan: entered promiscuous mode [ 519.346000][T15489] veth1_vlan: entered promiscuous mode [ 519.356884][T15597] sp0: Synchronizing with TNC [ 519.360528][T15597] sp0: Found TNC [ 519.374944][T15489] veth0_macvtap: entered promiscuous mode [ 519.384417][T15489] veth1_macvtap: entered promiscuous mode [ 519.397880][T15596] [U] è` [ 519.398479][T15489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.424177][T15489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.431050][ T1185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.439532][ T1185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.443447][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.447921][ T1185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.523512][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.526562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.546733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.549630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.556788][T14834] IPVS: stop unused estimator thread 0... [ 519.741210][ T5941] Bluetooth: hci1: command tx timeout [ 519.819956][T15606] binder_alloc: 15604: binder_alloc_buf, no vma [ 520.015265][T15609] rose0: entered promiscuous mode [ 520.987495][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 520.992555][T15629] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 521.002560][T15629] block nbd2: not configured, cannot reconfigure [ 521.053221][T15631] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 521.349224][T15640] rose0: left promiscuous mode [ 521.354509][T15640] rose0: entered promiscuous mode [ 521.400073][T15646] syzkaller0: entered promiscuous mode [ 521.402963][T15646] syzkaller0: entered allmulticast mode [ 521.413804][T15648] fuse: Unknown parameter 'grou00000000000000000000' [ 521.731178][ T892] usb 44-1: device descriptor read/8, error -110 [ 521.811264][ T5941] Bluetooth: hci1: command tx timeout [ 521.831957][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2623'. [ 521.850047][T15656] sctp: [Deprecated]: syz.1.2623 (pid 15656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.850047][T15656] Use struct sctp_sack_info instead [ 521.928143][T15658] FAULT_INJECTION: forcing a failure. [ 521.928143][T15658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.933733][T15658] CPU: 2 UID: 0 PID: 15658 Comm: syz.3.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.933752][T15658] Tainted: [L]=SOFTLOCKUP [ 521.933756][T15658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 521.933762][T15658] Call Trace: [ 521.933766][T15658] [ 521.933770][T15658] dump_stack_lvl+0x16c/0x1f0 [ 521.933790][T15658] should_fail_ex+0x512/0x640 [ 521.933805][T15658] _copy_from_user+0x2e/0xd0 [ 521.933817][T15658] get_compat_msghdr+0xa7/0x170 [ 521.933833][T15658] ? __pfx_get_compat_msghdr+0x10/0x10 [ 521.933851][T15658] ___sys_sendmsg+0x1ae/0x1d0 [ 521.933866][T15658] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.933886][T15658] ? find_held_lock+0x2b/0x80 [ 521.933908][T15658] __sys_sendmsg+0x16d/0x220 [ 521.933923][T15658] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.933941][T15658] ? do_user_addr_fault+0x843/0x1370 [ 521.933957][T15658] __do_fast_syscall_32+0xe8/0x680 [ 521.933976][T15658] do_fast_syscall_32+0x32/0x80 [ 521.933986][T15658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.934001][T15658] RIP: 0023:0xf7f91579 [ 521.934010][T15658] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 521.934021][T15658] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 521.934031][T15658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 521.934038][T15658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.934044][T15658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.934051][T15658] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 521.934057][T15658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.934070][T15658] [ 522.122129][ T892] usb usb44-port1: attempt power cycle [ 522.305568][T15669] fuse: Unknown parameter 'grou00000000000000000000' [ 522.344738][T15670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 522.347059][T15670] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 522.353042][T15670] vhci_hcd vhci_hcd.0: Device attached [ 522.404957][ T40] audit: type=1326 audit(2000000080.749:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.412119][ T40] audit: type=1326 audit(2000000080.749:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.419979][ T40] audit: type=1326 audit(2000000080.749:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.451243][ T40] audit: type=1326 audit(2000000080.759:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.458203][ T40] audit: type=1326 audit(2000000080.759:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.472281][ T40] audit: type=1326 audit(2000000080.759:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.479426][ T40] audit: type=1326 audit(2000000080.759:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.487308][ T40] audit: type=1326 audit(2000000080.759:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.495053][ T40] audit: type=1326 audit(2000000080.759:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.502115][ T40] audit: type=1326 audit(2000000080.759:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.2631" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 522.598345][T15677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.651918][ T60] usb 40-1: SetAddress Request (22) to port 0 [ 522.654754][ T60] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 522.656954][T15694] wg2 speed is unknown, defaulting to 1000 [ 522.681579][ T892] usb usb44-port1: unable to enumerate USB device [ 522.823012][T15271] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 522.824026][T15694] netlink: 'syz.2.2634': attribute type 13 has an invalid length. [ 522.834332][T15694] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 523.416449][T15271] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 523.419461][T15271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 523.422321][T15271] usb 6-1: Product: syz [ 523.423738][T15271] usb 6-1: Manufacturer: syz [ 523.425295][T15271] usb 6-1: SerialNumber: syz [ 523.432298][T15271] usb 6-1: config 0 descriptor?? [ 523.436791][T15271] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 523.517405][T15271] dvb-usb: bulk message failed: -22 (2/0) [ 523.587443][T15271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.621475][T15271] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 523.638793][T15271] usb 6-1: media controller created [ 523.670126][T15271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.710841][T15665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.716359][T15665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.891274][T13582] Bluetooth: hci1: command tx timeout [ 524.022834][T15716] fuse: Unknown parameter 'grou00000000000000000000' [ 524.216158][T15723] FAULT_INJECTION: forcing a failure. [ 524.216158][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.222009][T15723] CPU: 3 UID: 0 PID: 15723 Comm: syz.2.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.222036][T15723] Tainted: [L]=SOFTLOCKUP [ 524.222042][T15723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 524.222054][T15723] Call Trace: [ 524.222060][T15723] [ 524.222068][T15723] dump_stack_lvl+0x16c/0x1f0 [ 524.222099][T15723] should_fail_ex+0x512/0x640 [ 524.222124][T15723] _copy_to_user+0x32/0xd0 [ 524.222147][T15723] do_fb_ioctl+0x567/0x7e0 [ 524.222172][T15723] ? __pfx_do_fb_ioctl+0x10/0x10 [ 524.222200][T15723] ? find_held_lock+0x2b/0x80 [ 524.222257][T15723] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 524.222285][T15723] fb_compat_ioctl+0x55e/0x670 [ 524.222311][T15723] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 524.222334][T15723] ? hook_file_ioctl_common+0x144/0x410 [ 524.222363][T15723] ? __fget_files+0x20e/0x3c0 [ 524.222386][T15723] ? __fput_deferred+0x480/0x480 [ 524.222413][T15723] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 524.222437][T15723] __ia32_compat_sys_ioctl+0x242/0x370 [ 524.222462][T15723] __do_fast_syscall_32+0xe8/0x680 [ 524.222492][T15723] do_fast_syscall_32+0x32/0x80 [ 524.222508][T15723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.222528][T15723] RIP: 0023:0xf7ff4579 [ 524.222544][T15723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 524.222562][T15723] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 524.222578][T15723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 524.222590][T15723] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.222601][T15723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.222613][T15723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 524.222623][T15723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.222646][T15723] [ 524.443603][T15728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 524.445720][T15728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.448425][T15728] vhci_hcd vhci_hcd.0: Device attached [ 524.691692][ T892] usb 43-1: new low-speed USB device number 23 using vhci_hcd [ 524.894455][T15729] vhci_hcd: connection reset by peer [ 524.899363][T15733] rose0: left promiscuous mode [ 524.901406][ T12] vhci_hcd vhci_hcd.3: stop threads [ 524.904507][ T12] vhci_hcd vhci_hcd.3: release socket [ 524.904609][T15733] rose0: entered promiscuous mode [ 524.906883][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 524.952256][T15735] FAULT_INJECTION: forcing a failure. [ 524.952256][T15735] name failslab, interval 1, probability 0, space 0, times 0 [ 524.956467][T15735] CPU: 1 UID: 0 PID: 15735 Comm: syz.2.2645 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.956484][T15735] Tainted: [L]=SOFTLOCKUP [ 524.956488][T15735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 524.956495][T15735] Call Trace: [ 524.956500][T15735] [ 524.956504][T15735] dump_stack_lvl+0x16c/0x1f0 [ 524.956525][T15735] should_fail_ex+0x512/0x640 [ 524.956538][T15735] ? fs_reclaim_acquire+0xae/0x150 [ 524.956557][T15735] should_failslab+0xc2/0x120 [ 524.956587][T15735] __kmalloc_noprof+0xeb/0x910 [ 524.956599][T15735] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 524.956617][T15735] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 524.956632][T15735] tomoyo_realpath_from_path+0xc2/0x6e0 [ 524.956648][T15735] ? tomoyo_profile+0x47/0x60 [ 524.956666][T15735] tomoyo_path_number_perm+0x245/0x580 [ 524.956678][T15735] ? tomoyo_path_number_perm+0x237/0x580 [ 524.956691][T15735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 524.956718][T15735] ? find_held_lock+0x2b/0x80 [ 524.956732][T15735] ? hook_file_ioctl_common+0x144/0x410 [ 524.956748][T15735] ? __fget_files+0x20e/0x3c0 [ 524.956763][T15735] ? __fput_deferred+0x480/0x480 [ 524.956776][T15735] security_file_ioctl_compat+0x9b/0x240 [ 524.956791][T15735] __ia32_compat_sys_ioctl+0xc3/0x370 [ 524.956807][T15735] __do_fast_syscall_32+0xe8/0x680 [ 524.956826][T15735] do_fast_syscall_32+0x32/0x80 [ 524.956836][T15735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.956850][T15735] RIP: 0023:0xf7ff4579 [ 524.956859][T15735] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 524.956870][T15735] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 524.956880][T15735] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0185647 [ 524.956887][T15735] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.956894][T15735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.956900][T15735] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 524.956906][T15735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.956920][T15735] [ 524.956958][T15735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.210682][T15271] cxusb: set interface failed [ 525.212608][T15271] dvb-usb: bulk message failed: -22 (1/0) [ 525.219177][T15671] vhci_hcd: connection reset by peer [ 525.222034][ T12] vhci_hcd vhci_hcd.1: stop threads [ 525.223812][ T12] vhci_hcd vhci_hcd.1: release socket [ 525.231214][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 525.258928][T15271] DVB: Unable to find symbol mt352_attach() [ 525.306872][T15271] dvb-usb: bulk message failed: -22 (5/0) [ 525.345746][T15271] zl10353_read_register: readreg error (reg=127, ret==-121) [ 525.371001][T15271] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 525.431173][T15271] rc_core: IR keymap rc-dvico-mce not found [ 525.433704][T15271] Registered IR keymap rc-empty [ 525.443513][T15271] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 525.450714][T15271] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input25 [ 525.473355][T15271] dvb-usb: schedule remote query interval to 100 msecs. [ 525.475253][T15741] [ 525.477260][T15741] ====================================================== [ 525.479588][T15741] WARNING: possible circular locking dependency detected [ 525.481900][T15741] syzkaller #0 Tainted: G L [ 525.484015][T15741] ------------------------------------------------------ [ 525.486342][T15741] syz.0.2646/15741 is trying to acquire lock: [ 525.488393][T15741] ffff8880133d4468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 525.491478][T15741] [ 525.491478][T15741] but task is already holding lock: [ 525.491655][T15271] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 525.494044][T15741] ffff888028dd9948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 525.494076][T15741] [ 525.494076][T15741] which lock already depends on the new lock. [ 525.494076][T15741] [ 525.494080][T15741] [ 525.494080][T15741] the existing dependency chain (in reverse order) is: [ 525.494084][T15741] [ 525.494084][T15741] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 525.494101][T15741] __mutex_lock+0x1aa/0x1ca0 [ 525.511617][T15741] autofs_notify_daemon+0x4a6/0xd60 [ 525.513496][T15741] autofs_wait+0x10f3/0x1ac0 [ 525.515203][T15741] autofs_mount_wait+0x132/0x3c0 [ 525.517029][T15741] autofs_d_automount+0x4b2/0x960 [ 525.518858][T15741] __traverse_mounts+0x1b9/0x830 [ 525.520688][T15741] step_into_slowpath+0x772/0xf50 [ 525.522529][T15741] path_lookupat+0x627/0xc40 [ 525.524245][T15741] filename_lookup+0x224/0x5f0 [ 525.524306][T15271] usb 6-1: USB disconnect, device number 16 [ 525.525988][T15741] kern_path+0x35/0x50 [ 525.526004][T15741] lookup_bdev+0xd8/0x280 [ 525.526015][T15741] resume_store+0x1d6/0x490 [ 525.526028][T15741] kobj_attr_store+0x58/0x80 [ 525.526045][T15741] sysfs_kf_write+0xf2/0x150 [ 525.537028][T15741] kernfs_fop_write_iter+0x3af/0x570 [ 525.538927][T15741] vfs_write+0x7d3/0x11d0 [ 525.540552][T15741] ksys_write+0x12a/0x250 [ 525.542133][T15741] __do_fast_syscall_32+0xe8/0x680 [ 525.543964][T15741] do_fast_syscall_32+0x32/0x80 [ 525.545735][T15741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.547995][T15741] [ 525.547995][T15741] -> #2 (&of->mutex){+.+.}-{4:4}: [ 525.550332][T15741] __mutex_lock+0x1aa/0x1ca0 [ 525.552093][T15741] kernfs_seq_start+0x4f/0x2a0 [ 525.553837][T15741] seq_read_iter+0x2c1/0x12d0 [ 525.555590][T15741] kernfs_fop_read_iter+0x46c/0x610 [ 525.557704][T15741] copy_splice_read+0x618/0xc20 [ 525.559478][T15741] do_splice_read+0x285/0x370 [ 525.561189][T15741] splice_file_to_pipe+0x109/0x120 [ 525.563061][T15741] do_sendfile+0x400/0xe50 [ 525.564717][T15741] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 525.566772][T15741] __do_fast_syscall_32+0xe8/0x680 [ 525.568633][T15741] do_fast_syscall_32+0x32/0x80 [ 525.570395][T15741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.572615][T15741] [ 525.572615][T15741] -> #1 (&p->lock){+.+.}-{4:4}: [ 525.574874][T15741] __mutex_lock+0x1aa/0x1ca0 [ 525.576628][T15741] seq_read_iter+0xe1/0x12d0 [ 525.578264][T15741] kernfs_fop_read_iter+0x46c/0x610 [ 525.580106][T15741] copy_splice_read+0x618/0xc20 [ 525.582079][T15741] do_splice_read+0x285/0x370 [ 525.584227][T15741] splice_file_to_pipe+0x109/0x120 [ 525.586534][T15741] do_sendfile+0x400/0xe50 [ 525.588591][T15741] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 525.591167][T15741] __do_fast_syscall_32+0xe8/0x680 [ 525.593219][T15741] do_fast_syscall_32+0x32/0x80 [ 525.595459][T15741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.598287][T15741] [ 525.598287][T15741] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 525.601346][T15741] __lock_acquire+0x1669/0x2890 [ 525.603575][T15741] lock_acquire+0x179/0x330 [ 525.605681][T15741] __mutex_lock+0x1aa/0x1ca0 [ 525.607826][T15741] anon_pipe_write+0x15d/0x1bd0 [ 525.609630][T15741] __kernel_write_iter+0x720/0xb10 [ 525.611512][T15741] __kernel_write+0xf5/0x140 [ 525.613122][T15741] autofs_notify_daemon+0x4db/0xd60 [ 525.614970][T15741] autofs_wait+0x10f3/0x1ac0 [ 525.616647][T15741] autofs_mount_wait+0x132/0x3c0 [ 525.618427][T15741] autofs_d_automount+0x4b2/0x960 [ 525.620421][T15741] __traverse_mounts+0x1b9/0x830 [ 525.622690][T15741] step_into_slowpath+0x772/0xf50 [ 525.625029][T15741] path_lookupat+0x627/0xc40 [ 525.627164][T15741] filename_lookup+0x224/0x5f0 [ 525.629337][T15741] kern_path+0x35/0x50 [ 525.631289][T15741] lookup_bdev+0xd8/0x280 [ 525.633333][T15741] resume_store+0x1d6/0x490 [ 525.635454][T15741] kobj_attr_store+0x58/0x80 [ 525.637561][T15741] sysfs_kf_write+0xf2/0x150 [ 525.639648][T15741] kernfs_fop_write_iter+0x3af/0x570 [ 525.642038][T15741] vfs_write+0x7d3/0x11d0 [ 525.644073][T15741] ksys_write+0x12a/0x250 [ 525.646059][T15741] __do_fast_syscall_32+0xe8/0x680 [ 525.648348][T15741] do_fast_syscall_32+0x32/0x80 [ 525.650534][T15741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.653311][T15741] [ 525.653311][T15741] other info that might help us debug this: [ 525.653311][T15741] [ 525.657378][T15741] Chain exists of: [ 525.657378][T15741] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 525.657378][T15741] [ 525.662359][T15741] Possible unsafe locking scenario: [ 525.662359][T15741] [ 525.665408][T15741] CPU0 CPU1 [ 525.667606][T15741] ---- ---- [ 525.669766][T15741] lock(&sbi->pipe_mutex); [ 525.671664][T15741] lock(&of->mutex); [ 525.674285][T15741] lock(&sbi->pipe_mutex); [ 525.677218][T15741] lock(&pipe->mutex); [ 525.678948][T15741] [ 525.678948][T15741] *** DEADLOCK *** [ 525.678948][T15741] [ 525.682228][T15741] 5 locks held by syz.0.2646/15741: [ 525.684394][T15741] #0: ffff8880242de9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 525.688090][T15741] #1: ffff888049994420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 525.691746][T15741] #2: ffff8880729bb488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 525.695702][T15741] #3: ffff888040e990f8 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 525.699096][T15741] #4: ffff888028dd9948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 525.702360][T15741] [ 525.702360][T15741] stack backtrace: [ 525.704287][T15741] CPU: 2 UID: 0 PID: 15741 Comm: syz.0.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.704303][T15741] Tainted: [L]=SOFTLOCKUP [ 525.704306][T15741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.704314][T15741] Call Trace: [ 525.704319][T15741] [ 525.704324][T15741] dump_stack_lvl+0x116/0x1f0 [ 525.704342][T15741] print_circular_bug+0x275/0x340 [ 525.704361][T15741] check_noncircular+0x146/0x160 [ 525.704379][T15741] __lock_acquire+0x1669/0x2890 [ 525.704390][T15741] ? __kasan_check_byte+0x13/0x50 [ 525.704407][T15741] lock_acquire+0x179/0x330 [ 525.704417][T15741] ? anon_pipe_write+0x15d/0x1bd0 [ 525.704433][T15741] ? __pfx___might_resched+0x10/0x10 [ 525.704452][T15741] ? rcu_is_watching+0x12/0xc0 [ 525.704468][T15741] __mutex_lock+0x1aa/0x1ca0 [ 525.704484][T15741] ? anon_pipe_write+0x15d/0x1bd0 [ 525.704499][T15741] ? is_bpf_text_address+0x94/0x1a0 [ 525.704514][T15741] ? kernel_text_address+0x8d/0x100 [ 525.704526][T15741] ? anon_pipe_write+0x15d/0x1bd0 [ 525.704541][T15741] ? unwind_get_return_address+0x59/0xa0 [ 525.704556][T15741] ? __bfs+0x148/0x290 [ 525.704570][T15741] ? __pfx___mutex_lock+0x10/0x10 [ 525.704587][T15741] ? check_irq_usage+0xe8/0xbc0 [ 525.704606][T15741] ? anon_pipe_write+0x15d/0x1bd0 [ 525.704621][T15741] anon_pipe_write+0x15d/0x1bd0 [ 525.704637][T15741] ? lockdep_unlock+0x64/0xd0 [ 525.704651][T15741] ? __lock_acquire+0x12c2/0x2890 [ 525.704661][T15741] ? __pfx_anon_pipe_write+0x10/0x10 [ 525.704677][T15741] ? lock_acquire+0x179/0x330 [ 525.704687][T15741] ? __pfx_anon_pipe_write+0x10/0x10 [ 525.704702][T15741] __kernel_write_iter+0x720/0xb10 [ 525.704719][T15741] ? __pfx___kernel_write_iter+0x10/0x10 [ 525.704734][T15741] ? __mutex_lock+0x27b/0x1ca0 [ 525.704750][T15741] ? __kernel_text_address+0xd/0x40 [ 525.704762][T15741] ? autofs_notify_daemon+0x45a/0xd60 [ 525.704775][T15741] __kernel_write+0xf5/0x140 [ 525.704789][T15741] ? __pfx___kernel_write+0x10/0x10 [ 525.704804][T15741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 525.704824][T15741] autofs_notify_daemon+0x4db/0xd60 [ 525.704836][T15741] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 525.704847][T15741] ? kernfs_fop_write_iter+0x3af/0x570 [ 525.704863][T15741] ? vfs_write+0x7d3/0x11d0 [ 525.704876][T15741] ? ksys_write+0x12a/0x250 [ 525.704896][T15741] ? lockdep_init_map_type+0x5c/0x270 [ 525.704906][T15741] ? lockdep_init_map_type+0x5c/0x270 [ 525.704917][T15741] autofs_wait+0x10f3/0x1ac0 [ 525.704930][T15741] ? __pfx_autofs_wait+0x10/0x10 [ 525.704941][T15741] ? __pfx_path_check_mount+0x10/0x10 [ 525.704951][T15741] ? find_held_lock+0x2b/0x80 [ 525.704964][T15741] ? path_has_submounts+0xcf/0x120 [ 525.704977][T15741] ? do_raw_spin_unlock+0x172/0x230 [ 525.704989][T15741] ? find_held_lock+0x2b/0x80 [ 525.705003][T15741] autofs_mount_wait+0x132/0x3c0 [ 525.705014][T15741] autofs_d_automount+0x4b2/0x960 [ 525.705026][T15741] __traverse_mounts+0x1b9/0x830 [ 525.705038][T15741] step_into_slowpath+0x772/0xf50 [ 525.705052][T15741] ? __up_read+0x2d1/0x700 [ 525.705063][T15741] ? __pfx_step_into_slowpath+0x10/0x10 [ 525.705077][T15741] ? __lookup_slow+0x420/0x460 [ 525.705090][T15741] path_lookupat+0x627/0xc40 [ 525.705104][T15741] filename_lookup+0x224/0x5f0 [ 525.705118][T15741] ? __pfx_filename_lookup+0x10/0x10 [ 525.705137][T15741] ? getname_kernel+0x52/0x370 [ 525.705147][T15741] ? __asan_memcpy+0x3c/0x60 [ 525.705161][T15741] kern_path+0x35/0x50 [ 525.705174][T15741] lookup_bdev+0xd8/0x280 [ 525.705185][T15741] ? __pfx_lookup_bdev+0x10/0x10 [ 525.705196][T15741] ? __asan_memcpy+0x3c/0x60 [ 525.705209][T15741] resume_store+0x1d6/0x490 [ 525.705221][T15741] ? __pfx_resume_store+0x10/0x10 [ 525.705235][T15741] ? find_held_lock+0x2b/0x80 [ 525.705249][T15741] ? __pfx_resume_store+0x10/0x10 [ 525.705262][T15741] kobj_attr_store+0x58/0x80 [ 525.705278][T15741] ? __pfx_kobj_attr_store+0x10/0x10 [ 525.705295][T15741] sysfs_kf_write+0xf2/0x150 [ 525.705305][T15741] kernfs_fop_write_iter+0x3af/0x570 [ 525.705320][T15741] ? __pfx_sysfs_kf_write+0x10/0x10 [ 525.705331][T15741] vfs_write+0x7d3/0x11d0 [ 525.705346][T15741] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 525.705362][T15741] ? __pfx_vfs_write+0x10/0x10 [ 525.705376][T15741] ? find_held_lock+0x2b/0x80 [ 525.705393][T15741] ksys_write+0x12a/0x250 [ 525.705407][T15741] ? __pfx_ksys_write+0x10/0x10 [ 525.705424][T15741] __do_fast_syscall_32+0xe8/0x680 [ 525.705445][T15741] do_fast_syscall_32+0x32/0x80 [ 525.705454][T15741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.705468][T15741] RIP: 0023:0xf7f61579 [ 525.705477][T15741] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 525.705487][T15741] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 525.705498][T15741] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 525.705505][T15741] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.705511][T15741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.705517][T15741] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 525.705523][T15741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.705533][T15741] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 525.932809][T15741] PM: Image not found (code -22) [ 525.948030][T15271] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 525.975724][T13582] Bluetooth: hci1: command 0x0405 tx timeout [ 526.386154][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.446590][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.656390][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.713943][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.840117][ T46] bridge_slave_1: left allmulticast mode [ 526.842027][ T46] bridge_slave_1: left promiscuous mode [ 526.843888][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.847241][ T46] bridge_slave_0: left allmulticast mode [ 526.849688][ T46] bridge_slave_0: left promiscuous mode [ 526.852481][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.959488][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.964508][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.968975][ T46] bond0 (unregistering): Released all slaves [ 527.245042][ T46] hsr_slave_0: left promiscuous mode [ 527.247835][ T46] hsr_slave_1: left promiscuous mode [ 527.250287][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.258317][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.273692][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.276714][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.282207][ T46] veth1_macvtap: left promiscuous mode [ 527.284597][ T46] veth0_macvtap: left promiscuous mode [ 527.287071][ T46] veth1_vlan: left promiscuous mode [ 527.289234][ T46] veth0_vlan: left promiscuous mode [ 527.402360][ T46] team0 (unregistering): Port device team_slave_1 removed [ 527.420722][ T46] team0 (unregistering): Port device team_slave_0 removed [ 527.731237][ T60] usb 40-1: device descriptor read/8, error -110 [ 527.868025][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.954416][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.994764][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.044593][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.096751][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.121531][ T60] usb usb40-port1: attempt power cycle [ 528.143798][ T6021] wg2 speed is unknown, defaulting to 1000 [ 528.145800][ T6021] syz2: Port: 1 Link DOWN [ 528.149487][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.153721][ T6021] wg2 speed is unknown, defaulting to 1000 [ 528.218511][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.296705][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.395422][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.454286][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.523988][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.573282][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.641597][ T46] bridge_slave_1: left allmulticast mode [ 528.643953][ T46] bridge_slave_1: left promiscuous mode [ 528.645939][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.649112][ T46] bridge_slave_0: left allmulticast mode [ 528.650968][ T46] bridge_slave_0: left promiscuous mode [ 528.654487][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.662215][ T46] bridge_slave_1: left allmulticast mode [ 528.664051][ T46] bridge_slave_1: left promiscuous mode [ 528.665963][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.668755][ T46] bridge_slave_0: left allmulticast mode [ 528.670604][ T46] bridge_slave_0: left promiscuous mode [ 528.675281][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.678333][ T46] bridge_slave_1: left allmulticast mode [ 528.680140][ T46] bridge_slave_1: left promiscuous mode [ 528.682533][ T60] usb usb40-port1: unable to enumerate USB device [ 528.684670][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.687696][ T46] bridge_slave_0: left allmulticast mode [ 528.689513][ T46] bridge_slave_0: left promiscuous mode [ 528.692452][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.875779][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.879426][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.882824][ T46] bond0 (unregistering): Released all slaves [ 528.984215][ T46] bond0 (unregistering): (slave 30): Releasing backup interface [ 528.989276][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.993799][ T46] bond0 (unregistering): Released all slaves [ 528.998642][ T46] bond1 (unregistering): (slave dummy0): Releasing active interface [ 529.001927][ T46] bond1 (unregistering): Released all slaves [ 529.107764][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.111952][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.115937][ T46] bond0 (unregistering): Released all slaves [ 529.801139][ T892] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 529.810621][ T46] hsr_slave_0: left promiscuous mode [ 529.821507][ T46] hsr_slave_1: left promiscuous mode [ 529.823465][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.825781][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.828350][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.830681][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.837260][ T46] hsr_slave_0: left promiscuous mode [ 529.839345][ T46] hsr_slave_1: left promiscuous mode [ 529.841267][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.843688][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.846434][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.848931][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.854059][ T46] hsr_slave_0: left promiscuous mode [ 529.856065][ T46] hsr_slave_1: left promiscuous mode [ 529.858084][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.860467][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.863459][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.866054][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.872317][ T46] veth1_macvtap: left promiscuous mode [ 529.874079][ T46] veth0_macvtap: left promiscuous mode [ 529.875843][ T46] veth1_vlan: left promiscuous mode [ 529.877556][ T46] veth0_vlan: left promiscuous mode [ 529.879671][ T46] veth1_macvtap: left promiscuous mode [ 529.881668][ T46] veth0_macvtap: left promiscuous mode [ 529.883398][ T46] veth1_vlan: left promiscuous mode [ 529.885053][ T46] veth0_vlan: left promiscuous mode [ 529.887808][ T46] veth1_macvtap: left promiscuous mode [ 529.890155][ T46] veth0_macvtap: left promiscuous mode [ 529.892657][ T46] veth1_vlan: left promiscuous mode [ 529.894937][ T46] veth0_vlan: left promiscuous mode [ 530.052625][ T46] team0 (unregistering): Port device team_slave_1 removed [ 530.064537][ T46] team0 (unregistering): Port device team_slave_0 removed [ 530.115858][ T12] smc: removing ib device syz2 [ 530.215730][ T46] team0 (unregistering): Port device team_slave_1 removed [ 530.227229][ T46] team0 (unregistering): Port device team_slave_0 removed [ 530.360077][ T46] team0 (unregistering): Port device team_slave_1 removed [ 530.373568][ T46] team0 (unregistering): Port device team_slave_0 removed [ 531.572750][ T46] IPVS: stop unused estimator thread 0...