last executing test programs: 1m14.496040702s ago: executing program 2 (id=185): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xb, 0x4) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000080)) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x7, 0x8, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f00000001c0)="7e3aef406d75b8e74a0ca6f3a1963abc88070b85518a7fd87107e76e5648be9043b0462adec85e7f1e462afefd773a9874bb1a33516973571b1ac7", 0x3b) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+60000}, {r7, r8/1000+10000}}) linkat(r0, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x400) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='./file0\x00', r0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x40, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}, {@cache_fscache}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'wg2\x00'}}, {@audit}, {@seclabel}]}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000680)=0xf) msgget$private(0x0, 0x622) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x10, &(0x7f0000000780)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xd8a}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@allow_other}], [{@appraise}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r14 = syz_open_dev$vcsu(&(0x7f0000000900), 0x1, 0x14803) ppoll(&(0x7f0000000940)=[{r12, 0xc0}, {r13}, {r2}, {r9, 0x14}, {r14, 0x6000}], 0x5, &(0x7f0000000980)={0x77359400}, &(0x7f00000009c0)={[0x5]}, 0x8) accept4(r1, &(0x7f0000000a00)=@ax25={{0x3, @bcast}, [@default, @rose, @bcast, @null, @netrom, @bcast, @bcast, @null]}, &(0x7f0000000a80)=0x80, 0x80800) r15 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0x800, 0x40) faccessat2(r15, &(0x7f0000000b00)='./file0\x00', 0x0, 0x1000) 1m13.945385567s ago: executing program 2 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000680)={@can, {&(0x7f0000000580)=""/255, 0xff}, &(0x7f0000000340), 0xa}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setregid(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0x3c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x3, 0x6}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005393562f99b75852df8b1bafe25d652ab08b232426c0b15dd2129485ceabf08d83d6aa7a8da6044d2c9b73e1a5fac714e7a13cd7d5ea48ba2ca2e8676c78ead909cdc7f5ebd80e8720a70d4a8b6040e852823db265d98b7aec202bf7f3266fbc57c16d485260130bd141747f55ae020c4af603f4d36ccb499ca71cc407e52c1691d1db70ebe2ef04c11f3cf81b7c948f696242182b4eb734658e865908b4f11d63c43467e210e48b3cee65c33be1d65e871b147dd3027cf07f8df522"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000080), 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80, 0x2a, 0x2, 0xfffffffc}) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r3, &(0x7f00000000c0), 0x0) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x84040) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) shutdown(r3, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) 1m12.480163952s ago: executing program 2 (id=193): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)="0e5e036c704237ff7d", 0x9}, {0x0}, {&(0x7f00000003c0)="ebec19a6a9a73ff13fd4c8b81d7b84762c8859a5ae83d12b15234fc6637bb5474e5e2be15de4fdfa579a3e62b7c32a770bfa94566b2563f5ccd5128383245a0b7f19ddfb20d91409905b1d876b0bb710bb966de76e26ad8411e9c4be7750f1a339506e1037cacec0897e7eacbf4e9c689f8190b72d81e6cc78bb796aeaad54587cbaa923a8cb128dcc482d1242a897cacbdbc934c4a262c8b6d9ec4c128f65c13b8baedab19a4ec7b3c3b60c1716bacd66936acff817041ec28c4c2887b5e5be991067719c07d642d9994c0f5720ef89334861e3193e30f1150483dabb4c080a82a82d", 0xe3}, {&(0x7f0000000180)="cdd5a08cc2b388f81e3be4d3659e38e9b2fa65450005f93083e0f7e532a44c59b4d8eef00c0baa55edffcbe9466d77a8772ae6ab814092d8bc0f9c8c52f90f", 0x3f}, {&(0x7f00000005c0)="8e26e81e5f572a84656a1ac53bf3b24aabfe544c275f9a86aec93a67ca1e7bbb71ea73df2dbdac3b12ed2f56f9fdc2497bf81f8df4c5f2536861ed61877f386d635f9c8aebf60955e461c8c87c0aebd9a9225ad733c3e3d9bf56ec6c68200949abd35462a3675384ee55063a6e592a59e89a8100070310caa1614e49ddf42703d1a3bf7c687ff744dab9a04d0542c4ff711a29cac625371178abedb5bceaf823484a13eaa6f3280ddf3e7114", 0xac}], 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000740)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x149000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000780)=0x87) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000800)) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6b0, 0xd0, 0x438, 0xd0, 0x0, 0x300, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xfe}, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'tunl0\x00', {}, 'bond_slave_0\x00', {}, 0xe}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) 1m11.340715732s ago: executing program 2 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x4, 0x5, 0x9}}, 0x30) dup2(r5, r1) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xd41, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) 1m10.094480567s ago: executing program 2 (id=206): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000001, 0xfffffffffffffffe}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64) openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001340)={0x76, 0x1000, {0x0}, {0xee00}, 0x40, 0x8000000000000001}) (rerun: 64) ptrace$poke(0x4, r4, &(0x7f0000001380), 0x3) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) recvmmsg(r1, &(0x7f0000004ec0), 0x0, 0x2002, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300), 0x800, 0x0) (async, rerun: 64) fcntl$lock(r3, 0x24, &(0x7f0000001400)={0x0, 0x2, 0x9, 0x2, r4}) writev(r6, &(0x7f0000001f00), 0x55) (async, rerun: 64) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xd577, 0x9, 0x6, 0x101, 0xa, 0x0}) setpriority(0x2, r9, 0x537) (async) write$binfmt_misc(r8, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa, 0x1, 0x47524247, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}}) (async) ioctl$EVIOCGABS2F(r7, 0x8018456f, &(0x7f00000013c0)=""/16) (async) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x2000, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc038563c, &(0x7f00000012c0)={0x1, 0x0, {0x1, 0x8, 0x30b, 0x9}}) 1m8.879292338s ago: executing program 2 (id=214): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0xfe}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) mbind(&(0x7f000047f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x400) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x1000, 0x0, 0x208}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) 53.732828599s ago: executing program 32 (id=214): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0xfe}], 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) mbind(&(0x7f000047f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x400) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x1000, 0x0, 0x208}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) 5.728394892s ago: executing program 1 (id=421): r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) 4.692128781s ago: executing program 1 (id=432): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20040004) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x2, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.252680872s ago: executing program 1 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000180)=""/68, 0x0, 0x44, 0x1, 0x3}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) 3.816588252s ago: executing program 1 (id=442): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40200) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 3.476178801s ago: executing program 1 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @pid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 3.14015799s ago: executing program 1 (id=452): r0 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 2.516155655s ago: executing program 3 (id=456): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\a\x00', 0x9, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 2.373166098s ago: executing program 5 (id=458): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f000000ce40)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0x6, 0x7}, {0x6, 0x4}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp={{0x9}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x24040010) 2.204226702s ago: executing program 3 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbeb, {0x0, 0x0, 0x0, 0x0, 0x42d95, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x216b6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.192313981s ago: executing program 5 (id=460): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000700)={0x41, ""/65}) 2.072095958s ago: executing program 5 (id=461): syz_open_dev$loop(&(0x7f0000000240), 0x400000007, 0x44842) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc01, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b200097ea2d", @ANYBLOB='\b\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x0) 1.972249414s ago: executing program 4 (id=462): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 1.971994429s ago: executing program 3 (id=463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000580)='devpts\x00', 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.901381011s ago: executing program 4 (id=464): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000a40)="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", 0x56b, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0xfb12, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c) 1.869259355s ago: executing program 0 (id=465): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1", 0x25}], 0x1}}], 0x1, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x22}) 1.760353665s ago: executing program 3 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000040000000000000000008500000060000000950000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2e, 0x25dfdbff}, 0x14}}, 0x2400c810) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x602, 0x0, 0x0, 0x0, 0x7a}, 0x94) 1.749570586s ago: executing program 4 (id=467): openat$tun(0xffffffffffffff9c, 0x0, 0x6acc40, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000880)={'rose0\x00', 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x4, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}, &(0x7f0000000a80)) 1.681828661s ago: executing program 3 (id=468): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.512308344s ago: executing program 0 (id=469): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 1.414696967s ago: executing program 0 (id=470): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x40000000) 844.653707ms ago: executing program 3 (id=471): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) read(r0, &(0x7f0000000180)=""/170, 0xaa) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 652.289255ms ago: executing program 4 (id=472): socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 651.945731ms ago: executing program 5 (id=473): r0 = memfd_create(&(0x7f0000000040)='\x02A\xfbp\xe4\xa9\xc1\x9d\xe0\xe2~\xb1Yo[\xaf\xcd\xc8\xff\x00', 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000c, 0x13, r0, 0x0) utimes(0x0, &(0x7f0000000dc0)={{}, {0x0, 0xea60}}) 643.945813ms ago: executing program 0 (id=474): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 523.655595ms ago: executing program 5 (id=475): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 432.210248ms ago: executing program 0 (id=476): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x109480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 393.531648ms ago: executing program 4 (id=477): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 146.881063ms ago: executing program 5 (id=478): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xe, 0x0, 0x0, 0xb, 0x19, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x7, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/fscaps', 0x40000, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 292.007µs ago: executing program 0 (id=479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 0s ago: executing program 4 (id=480): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x88, 0xee}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 78.775785][ T5822] cgroup: Unknown subsys name 'net' [ 78.906313][ T5822] cgroup: Unknown subsys name 'cpuset' [ 78.915121][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.308243][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.919792][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.932512][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.940381][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.948685][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.956768][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.965088][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.979613][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.979956][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.997149][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.004414][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.012843][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.021357][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.030948][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.039326][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.046464][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.121840][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.130632][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.147896][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.156954][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.171102][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.178730][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.183318][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.193182][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.202083][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.210014][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.681466][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 85.916617][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.990122][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 86.000951][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.029732][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 86.111189][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.119011][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.126739][ T5842] bridge_slave_0: entered allmulticast mode [ 86.134452][ T5842] bridge_slave_0: entered promiscuous mode [ 86.187056][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.194663][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.202010][ T5842] bridge_slave_1: entered allmulticast mode [ 86.209436][ T5842] bridge_slave_1: entered promiscuous mode [ 86.305565][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.315218][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.323226][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.330553][ T5838] bridge_slave_0: entered allmulticast mode [ 86.338059][ T5838] bridge_slave_0: entered promiscuous mode [ 86.373007][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.382860][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.390033][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.397335][ T5838] bridge_slave_1: entered allmulticast mode [ 86.404498][ T5838] bridge_slave_1: entered promiscuous mode [ 86.506961][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.514268][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.521446][ T5846] bridge_slave_0: entered allmulticast mode [ 86.529609][ T5846] bridge_slave_0: entered promiscuous mode [ 86.540620][ T5842] team0: Port device team_slave_0 added [ 86.550175][ T5842] team0: Port device team_slave_1 added [ 86.580445][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.587792][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.595315][ T5856] bridge_slave_0: entered allmulticast mode [ 86.603929][ T5856] bridge_slave_0: entered promiscuous mode [ 86.611788][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.619184][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.627098][ T5852] bridge_slave_0: entered allmulticast mode [ 86.634315][ T5852] bridge_slave_0: entered promiscuous mode [ 86.641551][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.649259][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.656579][ T5846] bridge_slave_1: entered allmulticast mode [ 86.665296][ T5846] bridge_slave_1: entered promiscuous mode [ 86.684918][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.698519][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.706422][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.713876][ T5856] bridge_slave_1: entered allmulticast mode [ 86.720951][ T5856] bridge_slave_1: entered promiscuous mode [ 86.727653][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.735367][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.742647][ T5852] bridge_slave_1: entered allmulticast mode [ 86.749672][ T5852] bridge_slave_1: entered promiscuous mode [ 86.813744][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.834501][ T121] cfg80211: failed to load regulatory.db [ 86.871643][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.884552][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.895413][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.902578][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.929318][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.968655][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.981842][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.027885][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.034955][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.061483][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.072665][ T5849] Bluetooth: hci2: command tx timeout [ 87.078496][ T5840] Bluetooth: hci0: command tx timeout [ 87.086146][ T5838] team0: Port device team_slave_0 added [ 87.096961][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.133792][ T5846] team0: Port device team_slave_0 added [ 87.142161][ T5838] team0: Port device team_slave_1 added [ 87.153561][ T5840] Bluetooth: hci1: command tx timeout [ 87.167011][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.191611][ T5852] team0: Port device team_slave_0 added [ 87.200212][ T5846] team0: Port device team_slave_1 added [ 87.222687][ T5840] Bluetooth: hci3: command tx timeout [ 87.263947][ T5852] team0: Port device team_slave_1 added [ 87.273570][ T5856] team0: Port device team_slave_0 added [ 87.302623][ T5840] Bluetooth: hci4: command tx timeout [ 87.316320][ T5842] hsr_slave_0: entered promiscuous mode [ 87.322989][ T5842] hsr_slave_1: entered promiscuous mode [ 87.332203][ T5856] team0: Port device team_slave_1 added [ 87.351297][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.358898][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.385646][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.397466][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.405464][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.431712][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.444430][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.451419][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.477515][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.516796][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.523837][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.550235][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.607881][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.615141][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.641710][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.655117][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.662082][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.688134][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.700712][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.707752][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.734142][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.761653][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.768823][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.794895][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.906555][ T5852] hsr_slave_0: entered promiscuous mode [ 87.913928][ T5852] hsr_slave_1: entered promiscuous mode [ 87.920001][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.927838][ T5852] Cannot create hsr debugfs directory [ 87.989562][ T5846] hsr_slave_0: entered promiscuous mode [ 87.996971][ T5846] hsr_slave_1: entered promiscuous mode [ 88.003257][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.011335][ T5846] Cannot create hsr debugfs directory [ 88.045747][ T5838] hsr_slave_0: entered promiscuous mode [ 88.052690][ T5838] hsr_slave_1: entered promiscuous mode [ 88.059030][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.067013][ T5838] Cannot create hsr debugfs directory [ 88.120669][ T5856] hsr_slave_0: entered promiscuous mode [ 88.127616][ T5856] hsr_slave_1: entered promiscuous mode [ 88.133942][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.141517][ T5856] Cannot create hsr debugfs directory [ 88.628944][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.641322][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.653576][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.666318][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.725610][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.747393][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.759891][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.774700][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.887008][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.914776][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.947464][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.980192][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.001891][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.034506][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.066158][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.098276][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.121149][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.143755][ T5840] Bluetooth: hci0: command tx timeout [ 89.149182][ T5840] Bluetooth: hci2: command tx timeout [ 89.217776][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.234033][ T5840] Bluetooth: hci1: command tx timeout [ 89.240612][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.259388][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.273871][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.281167][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.305794][ T5840] Bluetooth: hci3: command tx timeout [ 89.306002][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.319650][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.331578][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.375477][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.382756][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.392610][ T5840] Bluetooth: hci4: command tx timeout [ 89.459802][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.519415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.526720][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.565015][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.572250][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.604982][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.666826][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.737602][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.748006][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.830294][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.837574][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.866995][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.874305][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.894828][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.902004][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.939803][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.957680][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.965000][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.018812][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.085125][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.141194][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.148355][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.185769][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.192989][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.311822][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.356324][ T5842] veth0_vlan: entered promiscuous mode [ 90.399245][ T5842] veth1_vlan: entered promiscuous mode [ 90.514946][ T5838] veth0_vlan: entered promiscuous mode [ 90.536815][ T5842] veth0_macvtap: entered promiscuous mode [ 90.567078][ T5838] veth1_vlan: entered promiscuous mode [ 90.591244][ T5842] veth1_macvtap: entered promiscuous mode [ 90.657847][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.689264][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.707870][ T5838] veth0_macvtap: entered promiscuous mode [ 90.740394][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.751595][ T5838] veth1_macvtap: entered promiscuous mode [ 90.779895][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.791192][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.800580][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.809716][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.884520][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.920745][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.933150][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.962126][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.976332][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986029][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996203][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.022601][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.041423][ T5846] veth0_vlan: entered promiscuous mode [ 91.127565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.141353][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.189210][ T5846] veth1_vlan: entered promiscuous mode [ 91.222906][ T5840] Bluetooth: hci0: command tx timeout [ 91.222913][ T5849] Bluetooth: hci2: command tx timeout [ 91.266716][ T5856] veth0_vlan: entered promiscuous mode [ 91.293320][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.312631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.320009][ T5849] Bluetooth: hci1: command tx timeout [ 91.369127][ T5856] veth1_vlan: entered promiscuous mode [ 91.390014][ T5849] Bluetooth: hci3: command tx timeout [ 91.395761][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.412404][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.468624][ T5849] Bluetooth: hci4: command tx timeout [ 91.479931][ T5846] veth0_macvtap: entered promiscuous mode [ 91.502846][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.534994][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.536932][ T5846] veth1_macvtap: entered promiscuous mode [ 91.554699][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.671427][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.962195][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.061112][ T5856] veth0_macvtap: entered promiscuous mode [ 92.188715][ T5856] veth1_macvtap: entered promiscuous mode [ 92.210213][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.252419][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.266344][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.276091][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.302096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.310852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.640522][ T5852] veth0_vlan: entered promiscuous mode [ 92.646612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.655291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.664350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.675160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.684051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.692768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.140290][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.152944][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.164553][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173359][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182439][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.193409][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.225263][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 93.242038][ T5852] veth1_vlan: entered promiscuous mode [ 93.307185][ T5849] Bluetooth: hci0: command tx timeout [ 93.309439][ T5840] Bluetooth: hci2: command tx timeout [ 93.382823][ T5840] Bluetooth: hci1: command tx timeout [ 93.462445][ T5840] Bluetooth: hci3: command tx timeout [ 93.544175][ T5840] Bluetooth: hci4: command tx timeout [ 93.614332][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.666489][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.777780][ T5852] veth0_macvtap: entered promiscuous mode [ 93.822048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.832084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.882063][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.907975][ T5852] veth1_macvtap: entered promiscuous mode [ 93.926191][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.936475][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.961828][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.984661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.999346][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.019350][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.088556][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.113149][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.132165][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.153287][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.634752][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.712615][ T5984] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 94.788693][ T5984] macvtap0: entered promiscuous mode [ 94.802604][ T5984] macvtap0: refused to change device tx_queue_len [ 95.160551][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.136899][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.172559][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.218290][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.497038][ T6005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.751282][ T6011] vivid-000: disconnect [ 97.930504][ T5995] vivid-000: reconnect [ 98.567371][ T6022] netlink: 'syz.3.18': attribute type 20 has an invalid length. [ 101.399852][ T6054] tipc: Started in network mode [ 101.438632][ T6054] tipc: Node identity 4, cluster identity 4711 [ 101.539513][ T6054] tipc: Node number set to 4 [ 102.305777][ T6074] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 102.322283][ T6077] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 102.374420][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.383601][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.552979][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.568851][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.598250][ T6081] process 'syz.0.35' launched './file0' with NULL argv: empty string added [ 102.645089][ T6074] team0: Port device bond0 added [ 102.699348][ T6074] syz.1.34 (6074) used greatest stack depth: 18840 bytes left [ 102.702845][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.752796][ T6083] fuse: Unknown parameter '0x0000000000000005' [ 102.754179][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 102.815203][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 102.834553][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 102.844197][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.884922][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 102.927300][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.972095][ T5934] usb 4-1: config 1 has an invalid interface number: 26 but max is 1 [ 102.984950][ T5934] usb 4-1: config 1 has an invalid interface number: 89 but max is 1 [ 103.002912][ T5934] usb 4-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 103.027078][ T5934] usb 4-1: config 1 has no interface number 0 [ 103.050712][ T5934] usb 4-1: config 1 has no interface number 1 [ 103.231204][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 103.249882][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 103.269576][ T5934] usb 4-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.291218][ T9] input: failed to attach handler kbd to device input5, error: -5 [ 103.312498][ T5934] usb 4-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.372756][ T5934] usb 4-1: config 1 interface 26 has no altsetting 0 [ 103.374978][ T9] usb 3-1: USB disconnect, device number 2 [ 103.390009][ T5934] usb 4-1: config 1 interface 89 has no altsetting 0 [ 103.557955][ T5934] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 103.596195][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.636258][ T5934] usb 4-1: Product: syz [ 103.659436][ T5934] usb 4-1: Manufacturer: syz [ 103.687711][ T5934] usb 4-1: SerialNumber: syz [ 103.706667][ T6093] Invalid source name [ 103.714053][ T6093] UBIFS error (pid: 6093): cannot open "./file0", error -22 [ 103.783445][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.087210][ T5934] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 104.094572][ T5934] usb 4-1: 26:2 : does not exist [ 104.108264][ T5934] usb 4-1: unknown interface protocol 0x13, assuming v1 [ 104.122431][ T5934] usb 4-1: 89:2 : does not exist [ 104.132779][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.888883][ T5934] usb 4-1: USB disconnect, device number 2 [ 104.924270][ T5855] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 105.046378][ T5855] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.677267][ T30] audit: type=1326 audit(1755418097.191:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.36" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044778ebe9 code=0x0 [ 105.709187][ T5855] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 105.821449][ T5855] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.878917][ T5855] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.924561][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.936296][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.997387][ T5855] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.014174][ T5855] usb 2-1: invalid MIDI out EP 0 [ 106.083608][ T6112] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.43'. [ 106.261430][ T6118] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 106.340279][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.472992][ T5855] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 106.542741][ T5855] usb 2-1: USB disconnect, device number 2 [ 106.932703][ T5934] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.659724][ T6139] vlan2: entered allmulticast mode [ 107.665216][ T6139] bond0: entered allmulticast mode [ 107.670450][ T6139] bond_slave_0: entered allmulticast mode [ 107.676913][ T6139] bond_slave_1: entered allmulticast mode [ 108.206008][ T6149] vti0: entered promiscuous mode [ 108.865516][ T6151] netlink: 64 bytes leftover after parsing attributes in process `syz.0.51'. [ 108.874810][ T6151] netlink: 64 bytes leftover after parsing attributes in process `syz.0.51'. [ 110.817209][ T6160] ======================================================= [ 110.817209][ T6160] WARNING: The mand mount option has been deprecated and [ 110.817209][ T6160] and is ignored by this kernel. Remove the mand [ 110.817209][ T6160] option from the mount to silence this warning. [ 110.817209][ T6160] ======================================================= [ 111.581898][ T6166] bond0: (slave bond_slave_1): Releasing backup interface [ 111.657197][ T6172] fuse: Bad value for 'user_id' [ 111.669388][ T6172] fuse: Bad value for 'user_id' [ 112.575044][ T6180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.834416][ T30] audit: type=1326 audit(1755418105.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.069404][ T6189] netlink: 165 bytes leftover after parsing attributes in process `syz.0.64'. [ 113.493238][ T30] audit: type=1326 audit(1755418105.359:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.606256][ T30] audit: type=1326 audit(1755418105.359:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.674265][ T30] audit: type=1326 audit(1755418105.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.769679][ T30] audit: type=1326 audit(1755418105.359:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.781133][ T6198] capability: warning: `syz.0.65' uses 32-bit capabilities (legacy support in use) [ 113.818128][ T30] audit: type=1326 audit(1755418105.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.868732][ T6200] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 113.969332][ T30] audit: type=1326 audit(1755418105.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 113.980107][ T6204] fuse: Unknown parameter 'fd0x0000000000000005' [ 114.004676][ T30] audit: type=1326 audit(1755418105.379:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 114.030227][ T30] audit: type=1326 audit(1755418105.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 114.083242][ T30] audit: type=1326 audit(1755418105.379:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 114.154073][ T6208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.235717][ T6208] kvm: user requested TSC rate below hardware speed [ 119.505880][ T6239] No control pipe specified [ 119.598380][ T6246] libceph: resolve '4' (ret=-3): failed [ 119.631644][ T6228] netlink: 'syz.3.72': attribute type 3 has an invalid length. [ 120.386917][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 120.386934][ T30] audit: type=1326 audit(1755418112.899:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 120.562550][ T30] audit: type=1326 audit(1755418112.939:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 120.701516][ T30] audit: type=1326 audit(1755418112.939:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 120.762596][ T30] audit: type=1326 audit(1755418112.939:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 120.798220][ T30] audit: type=1326 audit(1755418114.119:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 120.985948][ T30] audit: type=1326 audit(1755418114.119:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 121.060276][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.143855][ T30] audit: type=1326 audit(1755418114.119:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 121.152183][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.243180][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.488619][ T30] audit: type=1326 audit(1755418114.179:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 121.517711][ T5855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.527758][ T30] audit: type=1326 audit(1755418114.179:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 121.558032][ T30] audit: type=1326 audit(1755418114.179:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6226 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80c78ebe9 code=0x7ffc0000 [ 121.619715][ T9] usb 5-1: device descriptor read/64, error -71 [ 121.636622][ T6264] 9pnet_fd: Insufficient options for proto=fd [ 121.720684][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 121.736824][ T5855] usb 2-1: device descriptor read/all, error -71 [ 121.940402][ T6269] netlink: 165 bytes leftover after parsing attributes in process `syz.0.84'. [ 122.058171][ T6275] warning: `syz.1.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.082684][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.234755][ T6279] fuse: Unknown parameter 'fd0x0000000000000005' [ 122.255727][ T6277] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 122.283028][ T9] usb 5-1: device descriptor read/64, error -71 [ 122.403123][ T9] usb usb5-port1: attempt power cycle [ 122.624769][ T6285] pim6reg: entered allmulticast mode [ 122.641450][ T6287] pim6reg: left allmulticast mode [ 122.774227][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.834178][ T9] usb 5-1: device descriptor read/8, error -71 [ 123.184668][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.225350][ T9] usb 5-1: device descriptor read/8, error -71 [ 123.383697][ T9] usb usb5-port1: unable to enumerate USB device [ 124.026449][ T6308] unknown channel width for channel at 909000KHz? [ 124.214159][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.332808][ T6302] sctp: failed to load transform for md5: -2 [ 124.402814][ T5952] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.522464][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 124.531244][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.557632][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.568592][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.609496][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 124.632694][ T9] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 124.657842][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.666557][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.679827][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 124.703473][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.733928][ T9] usb 2-1: config 0 descriptor?? [ 124.749555][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.788857][ T5952] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 124.812485][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.867944][ T5952] usb 5-1: SerialNumber: syz [ 124.935679][ T5952] usb 5-1: config 0 descriptor?? [ 125.245841][ T5952] hso 5-1:0.0: Can't find BULK IN endpoint [ 125.406789][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 125.446234][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.472072][ T9] usb 2-1: USB disconnect, device number 5 [ 125.481427][ T24] usb 5-1: USB disconnect, device number 6 [ 125.645273][ T6327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 126.034983][ T6333] netlink: 165 bytes leftover after parsing attributes in process `syz.2.102'. [ 126.395949][ T5855] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.817902][ T5855] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 126.839526][ T5855] usb 1-1: config 0 has no interface number 0 [ 126.926539][ T5855] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 126.968633][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.018283][ T5855] usb 1-1: Product: syz [ 127.079145][ T5855] usb 1-1: Manufacturer: syz [ 127.157386][ T5855] usb 1-1: SerialNumber: syz [ 127.357691][ T5855] usb 1-1: config 0 descriptor?? [ 128.329291][ T5855] usb 1-1: Firmware: major: 236, minor: 221, hardware type: UNKNOWN (48) [ 128.623249][ T5855] usb 1-1: Firmware: build [ 129.225214][ T6371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.428483][ T5855] usb 1-1: failed to fetch extended address, random address set [ 129.469100][ T5855] usb 1-1: atusb_probe: initialization failed, error = -524 [ 129.483998][ T5855] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 129.503377][ T5855] usb 1-1: USB disconnect, device number 3 [ 130.587340][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 130.587358][ T30] audit: type=1326 audit(1755418125.841:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.1.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x0 [ 130.614602][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.669359][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.432489][ T5952] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.648601][ T5952] usb 5-1: device descriptor read/64, error -71 [ 132.452669][ T5952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.622628][ T5952] usb 5-1: device descriptor read/64, error -71 [ 132.732883][ T5952] usb usb5-port1: attempt power cycle [ 132.782855][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.907272][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.914023][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932535][ T5923] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.942472][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 132.950130][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 132.962540][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 132.973815][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 132.984499][ T5930] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.992134][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.003919][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.015913][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.030897][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 133.040135][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.048322][ T10] usb 2-1: Product: syz [ 133.052641][ T10] usb 2-1: Manufacturer: syz [ 133.057250][ T10] usb 2-1: SerialNumber: syz [ 133.065956][ T10] usb 2-1: config 0 descriptor?? [ 133.072741][ T5952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.103449][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 133.105606][ T5952] usb 5-1: device descriptor read/8, error -71 [ 133.110468][ T5923] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 133.129043][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x88 has an invalid bInterval 71, changing to 7 [ 133.141520][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x88 has invalid maxpacket 32773, setting to 1024 [ 133.153806][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.160538][ T5923] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 133.162605][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 133.169768][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.186398][ T5930] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 133.189380][ T5923] usb 3-1: config 0 descriptor?? [ 133.204394][ T5930] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.204556][ T5923] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 133.219713][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.241413][ T5930] usb 4-1: Product: syz [ 133.245744][ T5930] usb 4-1: Manufacturer: syz [ 133.250362][ T5930] usb 4-1: SerialNumber: syz [ 133.257456][ T5930] usb 4-1: config 0 descriptor?? [ 133.267049][ T5930] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.277366][ T5930] usb 4-1: setting power ON [ 133.282545][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 133.296807][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.302769][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 133.309313][ T5930] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.319267][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 133.324921][ T5930] usb 4-1: media controller created [ 133.362519][ T5952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.379434][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.390301][ T5952] usb 5-1: device descriptor read/8, error -71 [ 133.414753][ T10] usb 2-1: USB disconnect, device number 6 [ 133.426992][ T5930] usb 4-1: selecting invalid altsetting 6 [ 133.437742][ T5930] usb 4-1: digital interface selection failed (-22) [ 133.447516][ T5930] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 133.461208][ T5930] usb 4-1: setting power OFF [ 133.466906][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 133.473428][ T5930] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 133.477003][ T6416] dvb-usb: bulk message failed: -22 (3/0) [ 133.483056][ T5930] (NULL device *): no alternate interface [ 133.492865][ T6416] cxusb: i2c wr: len=80 is too big! [ 133.492865][ T6416] [ 133.502781][ T5952] usb usb5-port1: unable to enumerate USB device [ 133.932513][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.203136][ T6424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.226164][ T6424] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 134.656982][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.669651][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.679887][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.689839][ T10] usb 1-1: config 0 descriptor?? [ 134.794296][ T6426] netlink: 46 bytes leftover after parsing attributes in process `syz.4.127'. [ 134.804749][ T6421] ALSA: mixer_oss: invalid OSS volume '' [ 134.830749][ T6426] netlink: 46 bytes leftover after parsing attributes in process `syz.4.127'. [ 134.908167][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 134.915847][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.931085][ T10] usb 1-1: USB disconnect, device number 4 [ 136.673356][ T5930] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 136.760574][ T121] usb 3-1: USB disconnect, device number 3 [ 136.802177][ T5930] usb 4-1: USB disconnect, device number 3 [ 139.121300][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.133'. [ 139.299729][ T6471] batadv0: entered promiscuous mode [ 140.461645][ T6487] Zero length message leads to an empty skb [ 141.873067][ T5952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.940474][ T6503] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.146'. [ 141.950385][ T6503] netlink: get zone limit has 8 unknown bytes [ 142.037809][ T5952] usb 2-1: device descriptor read/64, error -71 [ 142.322644][ T5952] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.452509][ T121] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.482469][ T5952] usb 2-1: device descriptor read/64, error -71 [ 142.635734][ T5952] usb usb2-port1: attempt power cycle [ 142.646724][ T6531] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 142.656653][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 142.725503][ T121] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.796500][ T121] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 142.806375][ T121] usb 4-1: config 0 has no interface number 0 [ 142.813225][ T121] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 142.825218][ T121] usb 4-1: config 0 interface 88 has no altsetting 0 [ 142.983306][ T121] usb 4-1: string descriptor 0 read error: -22 [ 143.035926][ T121] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 143.038991][ T5952] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.077846][ T121] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 143.103184][ T5952] usb 2-1: device descriptor read/8, error -71 [ 143.124991][ T121] usb 4-1: config 0 descriptor?? [ 143.197372][ T121] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 143.224893][ T30] audit: type=1326 audit(2000000004.526:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.2.150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf0ed8ebe9 code=0x0 [ 143.352471][ T5952] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.403166][ T5952] usb 2-1: device descriptor read/8, error -71 [ 143.522528][ T121] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.522794][ T5952] usb usb2-port1: unable to enumerate USB device [ 143.682834][ T121] usb 5-1: device descriptor read/64, error -71 [ 143.963174][ T121] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.164913][ T121] usb 5-1: device descriptor read/64, error -71 [ 144.429288][ T121] usb usb5-port1: attempt power cycle [ 144.792483][ T121] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.818108][ T5952] usb 4-1: USB disconnect, device number 4 [ 145.006858][ T121] usb 5-1: device descriptor read/8, error -71 [ 145.839608][ T30] audit: type=1326 audit(2000000006.966:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839663][ T30] audit: type=1326 audit(2000000006.966:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839704][ T30] audit: type=1326 audit(2000000006.966:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839746][ T30] audit: type=1326 audit(2000000006.966:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839787][ T30] audit: type=1326 audit(2000000006.966:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839829][ T30] audit: type=1326 audit(2000000006.966:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839870][ T30] audit: type=1326 audit(2000000006.966:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.839911][ T30] audit: type=1326 audit(2000000006.966:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x7ffc0000 [ 145.879902][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.967580][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.153894][ T121] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.198383][ T121] usb 5-1: device descriptor read/8, error -71 [ 146.488263][ T121] usb usb5-port1: unable to enumerate USB device [ 147.322755][ T121] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.343636][ T6580] netlink: 96 bytes leftover after parsing attributes in process `syz.0.164'. [ 147.582311][ T121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.606147][ T121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.756097][ T121] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.771349][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.787919][ T121] usb 4-1: SerialNumber: syz [ 148.028804][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.046014][ T6586] Device name cannot be null; rc = [-22] [ 148.083251][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.194638][ T121] usb 4-1: 0:2 : does not exist [ 148.235590][ T121] usb 4-1: USB disconnect, device number 5 [ 148.395209][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.946090][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.174'. [ 148.959111][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.967801][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.979649][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 148.998497][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 149.785385][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz.3.177'. [ 149.853964][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.033455][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 150.051459][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.062522][ T10] usb 3-1: config 254 has an invalid interface number: 48 but max is 0 [ 150.070813][ T10] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 150.082199][ T10] usb 3-1: config 254 has no interface number 0 [ 150.090186][ T10] usb 3-1: too many endpoints for config 254 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 150.111615][ T10] usb 3-1: config 254 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 150.167015][ T10] usb 3-1: config 254 interface 48 has no altsetting 0 [ 150.195725][ T10] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=29.43 [ 150.206174][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.217062][ T10] usb 3-1: Product: syz [ 150.221361][ T10] usb 3-1: Manufacturer: syz [ 150.227271][ T10] usb 3-1: SerialNumber: syz [ 150.449470][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.471966][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.749693][ T10] usb 3-1: USB disconnect, device number 4 [ 150.896201][ T5952] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.073773][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 151.091234][ T6641] Smack: duplicate mount options [ 151.097170][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.219076][ T5952] usb 2-1: config index 0 descriptor too short (expected 19512, got 27) [ 151.244868][ T5952] usb 2-1: config 110 has too many interfaces: 189, using maximum allowed: 32 [ 151.270597][ T5952] usb 2-1: config 110 has an invalid descriptor of length 118, skipping remainder of the config [ 151.284068][ T5952] usb 2-1: config 110 has 0 interfaces, different from the descriptor's value: 189 [ 151.305218][ T5952] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc [ 151.316804][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.386772][ T5952] usb 2-1: Product: syz [ 151.412109][ T5952] usb 2-1: Manufacturer: syz [ 151.469486][ T5952] usb 2-1: SerialNumber: syz [ 151.768668][ T5952] usb 2-1: USB disconnect, device number 11 [ 151.889577][ T6646] syzkaller1: entered allmulticast mode [ 152.858811][ T30] audit: type=1800 audit(2000000015.158:91): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.187" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 153.129380][ T6654] sctp: failed to load transform for md5: -4 [ 153.245114][ T6673] block device autoloading is deprecated and will be removed. [ 153.749858][ T5952] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.343729][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 154.365744][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 154.382472][ T5952] usb 1-1: config 0 has no interface number 0 [ 155.096827][ T5952] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.096860][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.096880][ T5952] usb 1-1: Product: syz [ 155.096904][ T5952] usb 1-1: Manufacturer: syz [ 155.096918][ T5952] usb 1-1: SerialNumber: syz [ 155.099789][ T5952] usb 1-1: config 0 descriptor?? [ 155.102984][ T5952] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.308134][ T6698] 9pnet_fd: Insufficient options for proto=fd [ 155.335208][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 155.350622][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 155.361507][ T6694] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 155.541410][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.604264][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.652926][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 155.858528][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.868323][ T5952] usb 1-1: USB disconnect, device number 5 [ 155.965188][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.024702][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.049300][ T6720] loop6: detected capacity change from 0 to 63 [ 156.064246][ T6720] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.065243][ T5952] quatech2 1-1:0.51: device disconnected [ 156.083430][ T6720] Buffer I/O error on dev loop6, logical block 1, async page read [ 156.091410][ T6720] Buffer I/O error on dev loop6, logical block 2, async page read [ 156.099656][ T6729] input: syz0 as /devices/virtual/input/input7 [ 156.140943][ T6720] Buffer I/O error on dev loop6, logical block 3, async page read [ 156.171983][ T6723] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.188676][ T6723] Buffer I/O error on dev loop6, logical block 1, async page read [ 156.219057][ T6723] Buffer I/O error on dev loop6, logical block 2, async page read [ 156.235640][ T6723] Buffer I/O error on dev loop6, logical block 3, async page read [ 156.247834][ T5848] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.272565][ T5848] Buffer I/O error on dev loop6, logical block 1, async page read [ 156.669647][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 156.803035][ T6749] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 157.596919][ T6750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.604105][ T6750] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.618471][ T6750] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.628864][ T6750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.640824][ T6750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.647919][ T6750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.656443][ T6750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.663192][ T6750] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.678078][ T6750] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.688478][ T6750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.694670][ T6750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.705780][ T6750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.714021][ T6750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.720077][ T6750] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 157.729983][ T6750] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 157.989570][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 158.002867][ T121] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.040236][ T6787] Invalid option length (1048467) for dns_resolver key [ 158.069487][ T6787] trusted_key: syz.4.215 sent an empty control message without MSG_MORE. [ 158.225391][ T121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.261120][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.289906][ T121] usb 4-1: Product: syz [ 158.310127][ T121] usb 4-1: Manufacturer: syz [ 158.321359][ T121] usb 4-1: SerialNumber: syz [ 158.341284][ T121] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.498037][ T5934] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.982908][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.032510][ T5904] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.283002][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 159.357788][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.369343][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.379523][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.389037][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.400459][ T5904] usb 2-1: config 0 descriptor?? [ 159.408772][ T5904] hub 2-1:0.0: USB hub found [ 159.428697][ T6804] capability: warning: `syz.0.219' uses deprecated v2 capabilities in a way that may be insecure [ 159.547873][ T121] usb 4-1: USB disconnect, device number 6 [ 159.621707][ T5904] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 159.690526][ T5934] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 159.771482][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.778744][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.784956][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.786046][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.797555][ T5934] ath9k_htc: Failed to initialize the device [ 159.811073][ T121] usb 4-1: ath9k_htc: USB layer deinitialized [ 160.400767][ T5904] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 160.427353][ T5904] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 160.855454][ T5930] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 161.063579][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.103899][ T5904] usb 2-1: USB disconnect, device number 12 [ 161.131812][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 161.145642][ T6830] IPVS: Error joining to the multicast group [ 161.155988][ T5930] usb 1-1: config 0 has an invalid interface number: 220 but max is 3 [ 161.182515][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.202456][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 161.217881][ T5930] usb 1-1: config 0 has no interface number 0 [ 161.250663][ T5930] usb 1-1: config 0 interface 220 altsetting 167 endpoint 0xF has an invalid bInterval 58, changing to 4 [ 161.282853][ T5930] usb 1-1: config 0 interface 220 altsetting 167 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.303527][ T5930] usb 1-1: config 0 interface 220 has no altsetting 0 [ 161.333334][ T5930] usb 1-1: New USB device found, idVendor=2e24, idProduct=5d52, bcdDevice=15.da [ 161.361574][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.380090][ T5930] usb 1-1: Product: syz [ 161.387444][ T5930] usb 1-1: Manufacturer: syz [ 161.392093][ T5930] usb 1-1: SerialNumber: syz [ 161.419345][ T5930] usb 1-1: config 0 descriptor?? [ 161.820470][ T6845] lo speed is unknown, defaulting to 1000 [ 161.835521][ T6845] lo speed is unknown, defaulting to 1000 [ 161.847963][ T6845] lo speed is unknown, defaulting to 1000 [ 162.329320][ T30] audit: type=1326 audit(2000000024.920:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe80c78ebe9 code=0x0 [ 162.341498][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.357351][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.365915][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.373146][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.381906][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.388248][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.394412][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.401227][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.424134][ T6846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.603076][ T6845] infiniband syz0: set active [ 162.608026][ T6845] infiniband syz0: added lo [ 162.617962][ T6845] syz0: rxe_create_cq: returned err = -12 [ 162.624292][ T6845] infiniband syz0: Couldn't create ib_mad CQ [ 162.630549][ T6845] infiniband syz0: Couldn't open port 1 [ 162.646784][ T5934] lo speed is unknown, defaulting to 1000 [ 162.689823][ T6845] RDS/IB: syz0: added [ 162.694495][ T6845] smc: adding ib device syz0 with port count 1 [ 162.700929][ T6845] smc: ib device syz0 port 1 has pnetid [ 162.710782][ T6845] lo speed is unknown, defaulting to 1000 [ 162.904284][ T5934] lo speed is unknown, defaulting to 1000 [ 162.916674][ T6845] lo speed is unknown, defaulting to 1000 [ 163.156047][ T6845] lo speed is unknown, defaulting to 1000 [ 163.329608][ T6845] lo speed is unknown, defaulting to 1000 [ 163.506569][ T6845] lo speed is unknown, defaulting to 1000 [ 163.677830][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.953722][ T5930] usb 1-1: USB disconnect, device number 6 [ 164.241155][ T6879] fuse: Unknown parameter '0x0000000000000005' [ 164.522396][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.530210][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.536581][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.542932][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.435397][ T5934] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.524206][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.775542][ T5934] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.813244][ T5934] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 165.827473][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.836920][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.857412][ T5934] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.907717][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.922874][ T5934] usb 5-1: Product: syz [ 165.976265][ T5934] usb 5-1: Manufacturer: syz [ 166.016406][ T5934] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 166.288873][ T5930] usb 5-1: USB disconnect, device number 15 [ 167.866118][ T6922] xt_connbytes: Forcing CT accounting to be enabled [ 167.873631][ T6922] set match dimension is over the limit! [ 167.894696][ T6922] set match dimension is over the limit! [ 167.912248][ T6922] set match dimension is over the limit! [ 167.931596][ T6922] set match dimension is over the limit! [ 167.967253][ T6922] set match dimension is over the limit! [ 169.204972][ T6937] input: syz0 as /devices/virtual/input/input8 [ 169.362463][ T5930] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.248833][ T6950] 9pnet: Could not find request transport: fd0x0000000000000005 [ 170.712686][ T121] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.872484][ T121] usb 4-1: device descriptor read/64, error -71 [ 171.122480][ T121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.122492][ T5930] usb 5-1: device descriptor read/64, error -71 [ 171.282668][ T121] usb 4-1: device descriptor read/64, error -71 [ 171.362849][ T5930] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.401535][ T121] usb usb4-port1: attempt power cycle [ 171.480121][ T6998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.258'. [ 171.543490][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 171.556091][ T5930] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 171.569430][ T5930] usb 5-1: config 0 has no interface number 0 [ 171.577473][ T5930] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 171.601026][ T5930] usb 5-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b [ 171.617752][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.630818][ T5930] usb 5-1: Product: syz [ 171.637715][ T5930] usb 5-1: Manufacturer: syz [ 171.645909][ T5930] usb 5-1: SerialNumber: syz [ 171.664216][ T5930] usb 5-1: config 0 descriptor?? [ 171.752479][ T121] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.773194][ T121] usb 4-1: device descriptor read/8, error -71 [ 171.884368][ T5930] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 171.941715][ T5930] usb 5-1: USB disconnect, device number 17 [ 172.012970][ T121] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.063206][ T121] usb 4-1: device descriptor read/8, error -71 [ 172.183390][ T121] usb usb4-port1: unable to enumerate USB device [ 173.038959][ T7014] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.106454][ T7014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.731467][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.740436][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.748507][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.758221][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.769928][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.899842][ T7032] lo speed is unknown, defaulting to 1000 [ 173.970550][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.191305][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.222023][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.233177][ T5930] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 174.272863][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.306003][ T5930] usb 4-1: config 0 descriptor?? [ 174.736128][ T5930] kone 0003:1E7D:2CED.0002: unknown main item tag 0x4 [ 174.813691][ T5930] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 174.968526][ T5930] usb 4-1: USB disconnect, device number 11 [ 175.020968][ T7051] netlink: 256 bytes leftover after parsing attributes in process `syz.1.272'. [ 175.083518][ T7050] mmap: syz.1.272 (7050): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 175.372564][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 175.862499][ T5840] Bluetooth: hci5: command tx timeout [ 175.975572][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.019237][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.096367][ T7032] bridge_slave_0: entered allmulticast mode [ 176.205711][ T7032] bridge_slave_0: entered promiscuous mode [ 176.357083][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.434848][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.532649][ T7032] bridge_slave_1: entered allmulticast mode [ 176.662131][ T7032] bridge_slave_1: entered promiscuous mode [ 176.902327][ T7064] syz_tun: entered allmulticast mode [ 177.015408][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.032645][ T5952] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.055811][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.198935][ T5952] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.248952][ T7032] team0: Port device team_slave_0 added [ 177.255671][ T5952] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.280862][ T7032] team0: Port device team_slave_1 added [ 177.286913][ T5952] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.307206][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.511218][ T7070] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.573973][ T7082] binder: 7076:7082 ioctl 40107446 200000000240 returned -22 [ 177.574207][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.584601][ T7077] binder: 7076:7077 ioctl c0306201 200000000380 returned -14 [ 177.632655][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.668388][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.712784][ T7082] syz.1.277 uses old SIOCAX25GETINFO [ 177.729416][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.742697][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.750045][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.811017][ T5952] usb 5-1: USB disconnect, device number 18 [ 177.842697][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.879048][ T7060] syz_tun: left allmulticast mode [ 177.942578][ T5840] Bluetooth: hci5: command tx timeout [ 178.276333][ T7032] hsr_slave_0: entered promiscuous mode [ 178.285125][ T7032] hsr_slave_1: entered promiscuous mode [ 178.291645][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.299584][ T7032] Cannot create hsr debugfs directory [ 178.446536][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 178.465088][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 178.751158][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 179.351150][ T7032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.398831][ T7032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.439210][ T7032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.484700][ T7032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.757224][ T5923] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 179.802157][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.888769][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.911111][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.918412][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.959588][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.966816][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.023223][ T5840] Bluetooth: hci5: command tx timeout [ 180.029640][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.043850][ T5923] usb 4-1: not running at top speed; connect to a high speed hub [ 180.060814][ T5923] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 180.082773][ T5923] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 180.096991][ T5923] usb 4-1: config 8 interface 0 has no altsetting 0 [ 180.106457][ T5923] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 180.116334][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.122964][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.126899][ T5923] usb 4-1: Product: syz [ 180.137210][ T5923] usb 4-1: Manufacturer: syz [ 180.141910][ T5923] usb 4-1: SerialNumber: syz [ 180.156080][ T7032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.339720][ T7115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.348494][ T7129] netlink: 165 bytes leftover after parsing attributes in process `syz.1.288'. [ 180.352930][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 180.485330][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.505797][ T5904] usb 1-1: Product: syz [ 180.510011][ T5904] usb 1-1: Manufacturer: syz [ 180.522516][ T5904] usb 1-1: SerialNumber: syz [ 180.543480][ T5904] usb 1-1: config 0 descriptor?? [ 180.551949][ T5904] pwc: Logitech/Cisco VT Camera webcam detected. [ 180.586208][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.615154][ T5923] usb 4-1: selecting invalid altsetting 0 [ 180.733575][ T5923] usb 4-1: USB disconnect, device number 12 [ 180.865272][ T6779] udevd[6779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.112814][ T5840] Bluetooth: hci5: command tx timeout [ 183.936198][ T30] audit: type=1804 audit(2000000048.235:93): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.293" name="/newroot/64/bus" dev="tmpfs" ino=353 res=1 errno=0 [ 183.980730][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.052044][ T7161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.295'. [ 184.255521][ T7171] batman_adv: batadv0: Adding interface: dummy0 [ 184.261864][ T7171] batman_adv: batadv0: Interface activated: dummy0 [ 184.322694][ T5904] pwc: Failed to set LED on/off time (-71) [ 184.336476][ T7171] batadv0: mtu less than device minimum [ 184.343249][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.354582][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.365744][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.376883][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.388041][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.399202][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.410373][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.421510][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.432769][ T7171] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.493216][ T5904] pwc: send_video_command error -71 [ 184.498569][ T5904] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 184.524185][ T5904] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 184.590625][ T5904] usb 1-1: USB disconnect, device number 8 [ 185.616632][ T7190] netlink: 165 bytes leftover after parsing attributes in process `syz.1.299'. [ 185.694364][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 186.095118][ T7032] veth0_vlan: entered promiscuous mode [ 186.162151][ T7032] veth1_vlan: entered promiscuous mode [ 186.239342][ T7032] veth0_macvtap: entered promiscuous mode [ 186.265363][ T7032] veth1_macvtap: entered promiscuous mode [ 186.417154][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.244289][ T7220] FAULT_INJECTION: forcing a failure. [ 187.244289][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.258067][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.4.304 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 187.258092][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.258111][ T7220] Call Trace: [ 187.258124][ T7220] [ 187.258134][ T7220] dump_stack_lvl+0x189/0x250 [ 187.258171][ T7220] ? __pfx____ratelimit+0x10/0x10 [ 187.258191][ T7220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.258213][ T7220] ? __pfx__printk+0x10/0x10 [ 187.258237][ T7220] ? __might_fault+0xb0/0x130 [ 187.258268][ T7220] should_fail_ex+0x414/0x560 [ 187.258293][ T7220] _copy_from_user+0x2d/0xb0 [ 187.258320][ T7220] memdup_user+0x5e/0xd0 [ 187.258345][ T7220] strndup_user+0x68/0xd0 [ 187.258369][ T7220] __se_sys_mount+0x9c/0x410 [ 187.258391][ T7220] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.258415][ T7220] ? __pfx___se_sys_mount+0x10/0x10 [ 187.258443][ T7220] ? __x64_sys_mount+0x20/0xc0 [ 187.258466][ T7220] do_syscall_64+0xfa/0x3b0 [ 187.258489][ T7220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.258507][ T7220] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 187.258525][ T7220] ? clear_bhb_loop+0x60/0xb0 [ 187.258548][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.258567][ T7220] RIP: 0033:0x7f044778ebe9 [ 187.258588][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.258610][ T7220] RSP: 002b:00007f044858a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.258637][ T7220] RAX: ffffffffffffffda RBX: 00007f04479b6180 RCX: 00007f044778ebe9 [ 187.258651][ T7220] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 187.258664][ T7220] RBP: 00007f044858a090 R08: 0000000000000000 R09: 0000000000000000 [ 187.258675][ T7220] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 187.258686][ T7220] R13: 00007f04479b6218 R14: 00007f04479b6180 R15: 00007ffde7f08f98 [ 187.258717][ T7220] [ 188.113763][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.297876][ T7223] netlink: 'syz.3.306': attribute type 8 has an invalid length. [ 188.299020][ T7032] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.791548][ T7032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.800812][ T7032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.809767][ T7032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.268450][ T7238] netlink: 96 bytes leftover after parsing attributes in process `syz.1.308'. [ 189.356703][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.380510][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.392537][ T121] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.540451][ T6874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.555389][ T121] usb 5-1: Using ep0 maxpacket: 32 [ 189.560788][ T6874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.576527][ T121] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 189.586755][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.628763][ T121] usb 5-1: Product: syz [ 189.651385][ T121] usb 5-1: Manufacturer: syz [ 189.671788][ T121] usb 5-1: SerialNumber: syz [ 189.707242][ T121] usb 5-1: config 0 descriptor?? [ 189.918162][ T7241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.263'. [ 189.933026][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.309'. [ 189.944650][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.953516][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.076184][ T121] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 190.098949][ T121] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 190.785054][ T121] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 190.878054][ T121] usb 5-1: USB disconnect, device number 19 [ 191.809333][ T7258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.312'. [ 192.176318][ T7260] syz.5.313: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.251299][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.5.313 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 192.251328][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.251337][ T7260] Call Trace: [ 192.251342][ T7260] [ 192.251348][ T7260] dump_stack_lvl+0x189/0x250 [ 192.251366][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.251377][ T7260] ? __pfx__printk+0x10/0x10 [ 192.251392][ T7260] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 192.251407][ T7260] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 192.251420][ T7260] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 192.251434][ T7260] warn_alloc+0x214/0x310 [ 192.251450][ T7260] ? __pfx_warn_alloc+0x10/0x10 [ 192.251466][ T7260] ? __get_vm_area_node+0x28f/0x300 [ 192.251477][ T7260] ? xskq_create+0xbf/0x170 [ 192.251490][ T7260] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 192.251517][ T7260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.251537][ T7260] ? __kasan_kmalloc+0x93/0xb0 [ 192.251549][ T7260] vmalloc_user_noprof+0xad/0xf0 [ 192.251560][ T7260] ? xskq_create+0xbf/0x170 [ 192.251570][ T7260] xskq_create+0xbf/0x170 [ 192.251582][ T7260] xsk_init_queue+0xb0/0x110 [ 192.251593][ T7260] xsk_setsockopt+0x4de/0x710 [ 192.251611][ T7260] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.251628][ T7260] ? __fget_files+0x2a/0x420 [ 192.251641][ T7260] ? __fget_files+0x2a/0x420 [ 192.251651][ T7260] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 192.251661][ T7260] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.251677][ T7260] do_sock_setsockopt+0x179/0x1b0 [ 192.251696][ T7260] __x64_sys_setsockopt+0x13f/0x1b0 [ 192.251713][ T7260] do_syscall_64+0xfa/0x3b0 [ 192.251724][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.251735][ T7260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.251745][ T7260] ? clear_bhb_loop+0x60/0xb0 [ 192.251757][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.251767][ T7260] RIP: 0033:0x7f5a7338ebe9 [ 192.251777][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.251786][ T7260] RSP: 002b:00007f5a74171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.251797][ T7260] RAX: ffffffffffffffda RBX: 00007f5a735b5fa0 RCX: 00007f5a7338ebe9 [ 192.251805][ T7260] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 192.251811][ T7260] RBP: 00007f5a73411e19 R08: 0000000000000004 R09: 0000000000000000 [ 192.251817][ T7260] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 192.251823][ T7260] R13: 00007f5a735b6038 R14: 00007f5a735b5fa0 R15: 00007ffd4428ff28 [ 192.251839][ T7260] [ 192.282505][ T7260] Mem-Info: [ 192.842531][ T7260] active_anon:1956 inactive_anon:6113 isolated_anon:0 [ 192.842531][ T7260] active_file:5432 inactive_file:36158 isolated_file:0 [ 192.842531][ T7260] unevictable:768 dirty:160 writeback:0 [ 192.842531][ T7260] slab_reclaimable:10532 slab_unreclaimable:102542 [ 192.842531][ T7260] mapped:36252 shmem:3067 pagetables:1296 [ 192.842531][ T7260] sec_pagetables:0 bounce:0 [ 192.842531][ T7260] kernel_misc_reclaimable:0 [ 192.842531][ T7260] free:1297132 free_pcp:18764 free_cma:0 [ 193.117158][ T7260] Node 0 active_anon:1108kB inactive_anon:24456kB active_file:21528kB inactive_file:144872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145028kB dirty:632kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12688kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.291661][ T7260] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.330834][ T7260] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.369581][ T7260] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 193.384941][ T7260] Node 0 DMA32 free:1289596kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1024kB inactive_anon:24296kB active_file:19760kB inactive_file:144804kB unevictable:1536kB writepending:624kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:47836kB local_pcp:24736kB free_cma:0kB [ 193.444483][ T7260] lowmem_reserve[]: 0 0 1 1 1 [ 193.449692][ T7260] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1768kB inactive_file:68kB unevictable:0kB writepending:8kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 193.487315][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 193.496784][ T7260] Node 1 Normal free:3893780kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24788kB local_pcp:11972kB free_cma:0kB [ 193.535241][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 193.558461][ T7260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.571895][ T7260] Node 0 DMA32: 217*4kB (UME) 139*8kB (ME) 110*16kB (M) 81*32kB (UM) 75*64kB (UME) 30*128kB (UME) 24*256kB (UME) 14*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 305*4096kB (M) = 1288828kB [ 193.590861][ T7260] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 193.606398][ T7260] Node 1 Normal: 177*4kB (UM) 38*8kB (UME) 42*16kB (UME) 78*32kB (UME) 31*64kB (UME) 10*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 946*4096kB (M) = 3893780kB [ 193.643278][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 193.656075][ T7260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.686621][ T7260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.703774][ T7260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.885169][ T7260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.074664][ T7260] 42966 total pagecache pages [ 194.117310][ T7260] 0 pages in swap cache [ 194.205890][ T7260] Free swap = 124996kB [ 194.272500][ T7260] Total swap = 124996kB [ 194.322275][ T7260] 2097051 pages RAM [ 194.330522][ T7260] 0 pages HighMem/MovableOnly [ 194.359741][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372586][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.392636][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 194.402438][ T7260] 424695 pages reserved [ 194.406646][ T7260] 0 pages cma reserved [ 194.496193][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 194.524802][ T7280] netlink: 'syz.1.318': attribute type 13 has an invalid length. [ 194.963677][ T10] IPVS: starting estimator thread 0... [ 194.970013][ T7294] net_ratelimit: 10 callbacks suppressed [ 194.970027][ T7294] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 195.000931][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.060356][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.232822][ T7295] IPVS: using max 49 ests per chain, 117600 per kthread [ 195.322523][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.182325][ T5206] udevd[5206]: worker [5841] terminated by signal 33 (Unknown signal 33) [ 196.212296][ T5206] udevd[5206]: worker [5841] failed while handling '/devices/virtual/block/loop5' [ 196.709030][ T7323] FAULT_INJECTION: forcing a failure. [ 196.709030][ T7323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.723549][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.4.329 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 196.723574][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.723586][ T7323] Call Trace: [ 196.723593][ T7323] [ 196.723601][ T7323] dump_stack_lvl+0x189/0x250 [ 196.723628][ T7323] ? __pfx____ratelimit+0x10/0x10 [ 196.723649][ T7323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.723670][ T7323] ? __pfx__printk+0x10/0x10 [ 196.723695][ T7323] ? __might_fault+0xb0/0x130 [ 196.723725][ T7323] should_fail_ex+0x414/0x560 [ 196.723768][ T7323] _copy_from_user+0x2d/0xb0 [ 196.723795][ T7323] memdup_user+0x5e/0xd0 [ 196.723820][ T7323] strndup_user+0x68/0xd0 [ 196.723844][ T7323] __se_sys_mount+0xde/0x410 [ 196.723866][ T7323] ? ksys_write+0x22a/0x250 [ 196.723887][ T7323] ? __pfx___se_sys_mount+0x10/0x10 [ 196.723905][ T7323] ? rcu_is_watching+0x15/0xb0 [ 196.723931][ T7323] ? do_syscall_64+0xbe/0x3b0 [ 196.723951][ T7323] ? __x64_sys_mount+0x20/0xc0 [ 196.723974][ T7323] do_syscall_64+0xfa/0x3b0 [ 196.723994][ T7323] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.724013][ T7323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.724032][ T7323] ? clear_bhb_loop+0x60/0xb0 [ 196.724054][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.724073][ T7323] RIP: 0033:0x7f044778ebe9 [ 196.724090][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.724105][ T7323] RSP: 002b:00007f044858a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.724125][ T7323] RAX: ffffffffffffffda RBX: 00007f04479b6180 RCX: 00007f044778ebe9 [ 196.724139][ T7323] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 196.724158][ T7323] RBP: 00007f044858a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.724170][ T7323] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 196.724181][ T7323] R13: 00007f04479b6218 R14: 00007f04479b6180 R15: 00007ffde7f08f98 [ 196.724212][ T7323] [ 197.847508][ T7329] netlink: 'syz.1.330': attribute type 10 has an invalid length. [ 198.912809][ T5952] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.994220][ T7334] all: renamed from bridge_slave_0 (while UP) [ 199.097917][ T5952] usb 4-1: config 0 has no interfaces? [ 199.112058][ T5952] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 199.141745][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.183943][ T5952] usb 4-1: config 0 descriptor?? [ 199.252558][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 199.394811][ T10] usb 1-1: device descriptor read/64, error -71 [ 199.502258][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.598192][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.702825][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 199.810529][ T5930] usb 4-1: USB disconnect, device number 13 [ 199.923323][ T10] usb 1-1: device descriptor read/64, error -71 [ 200.157440][ T10] usb usb1-port1: attempt power cycle [ 200.586689][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 200.691874][ T10] usb 1-1: device descriptor read/8, error -71 [ 201.172698][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 201.194105][ T10] usb 1-1: device descriptor read/8, error -71 [ 201.307345][ T10] usb usb1-port1: unable to enumerate USB device [ 202.255410][ T7349] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.257684][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.279571][ T7349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.315728][ T7349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.327364][ T7349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.337503][ T7349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.381518][ T7349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 202.393755][ T7349] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 202.411276][ T7349] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 202.647225][ T7383] x_tables: duplicate underflow at hook 1 [ 202.682894][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 203.129911][ T7390] sp0: Synchronizing with TNC [ 203.196201][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.236860][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.281026][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.300334][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.323787][ T10] usb 1-1: SerialNumber: syz [ 203.409302][ T7390] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 203.555791][ T7378] fuse: Unknown parameter 'fsmagic' [ 203.578421][ T7390] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 203.645090][ T7390] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.701850][ T10] usb 1-1: 0:2 : does not exist [ 203.774567][ T10] usb 1-1: USB disconnect, device number 13 [ 204.347991][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.354427][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.357526][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.367121][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.422508][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 206.184622][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.457978][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 206.513543][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 206.532834][ T10] usb 4-1: config 14 has an invalid interface number: 137 but max is 3 [ 206.626115][ T10] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 206.849233][ T10] usb 4-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 206.922418][ T10] usb 4-1: config 14 has no interface number 1 [ 206.938977][ T10] usb 4-1: config 14 interface 0 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0 [ 206.971099][ T10] usb 4-1: config 14 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.017440][ T7427] lo speed is unknown, defaulting to 1000 [ 207.029843][ T10] usb 4-1: config 14 interface 137 has no altsetting 0 [ 207.052433][ T10] usb 4-1: config 14 interface 0 has no altsetting 0 [ 207.083099][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 207.111886][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.131934][ T10] usb 4-1: Product: syz [ 207.153061][ T10] usb 4-1: Manufacturer: syz [ 207.230991][ T10] usb 4-1: SerialNumber: syz [ 207.812971][ T10] ati_remote2 4-1:14.0: ati_remote2_probe(): need 2 interfaces, found 2 [ 207.858882][ T10] usb 4-1: USB disconnect, device number 14 [ 208.162600][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.199366][ T7444] 9pnet_fd: Insufficient options for proto=fd [ 208.234375][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.352634][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 208.366048][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 208.374058][ T10] usb 4-1: device descriptor read/64, error -71 [ 208.381993][ T5897] usb 2-1: can't read configurations, error -61 [ 208.429745][ T30] audit: type=1326 audit(2000000073.723:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.0.351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c038ebe9 code=0x0 [ 208.450528][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.522494][ T5897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.584439][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 208.612564][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.676564][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 208.685030][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 208.693679][ T5897] usb 2-1: can't read configurations, error -61 [ 208.701770][ T5897] usb usb2-port1: attempt power cycle [ 208.748323][ T10] usb 4-1: device descriptor read/64, error -71 [ 208.874852][ T10] usb usb4-port1: attempt power cycle [ 209.042551][ T5897] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 209.083558][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 209.114359][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 209.131445][ T5897] usb 2-1: can't read configurations, error -61 [ 209.233061][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.265821][ T5934] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 209.292700][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 209.304862][ T10] usb 4-1: device descriptor read/8, error -71 [ 209.343183][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 209.368915][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 209.389114][ T5897] usb 2-1: can't read configurations, error -61 [ 209.401753][ T5897] usb usb2-port1: unable to enumerate USB device [ 209.476872][ T5934] usb 5-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 209.490714][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.527019][ T5934] usb 5-1: config 0 descriptor?? [ 209.541934][ T5934] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 209.562604][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.584507][ T10] usb 4-1: device descriptor read/8, error -71 [ 209.694174][ T10] usb usb4-port1: unable to enumerate USB device [ 209.744504][ T5934] gspca_sn9c20x: Write register 1000 failed -71 [ 209.752138][ T5934] gspca_sn9c20x: Device initialization failed [ 209.768492][ T5934] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 209.798523][ T5934] usb 5-1: USB disconnect, device number 20 [ 211.047715][ T7479] 9pnet_fd: Insufficient options for proto=fd [ 211.652517][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 211.852566][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 211.876902][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 211.916948][ T10] usb 4-1: config 0 has no interface number 0 [ 211.968755][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 212.009984][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.041122][ T10] usb 4-1: Product: syz [ 212.593701][ T10] usb 4-1: Manufacturer: syz [ 212.610066][ T10] usb 4-1: SerialNumber: syz [ 212.617844][ T10] usb 4-1: config 0 descriptor?? [ 212.637052][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.001749][ T7510] mkiss: ax0: crc mode is auto. [ 213.260264][ T7508] /dev/nullb0: Can't open blockdev [ 213.380980][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.423895][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.694330][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.720118][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.241113][ T7525] netlink: 'syz.5.377': attribute type 10 has an invalid length. [ 216.631896][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.812494][ T5897] usb 6-1: device descriptor read/64, error -71 [ 217.172631][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.239896][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.249831][ T10] usb 4-1: USB disconnect, device number 19 [ 217.267599][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.308972][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.326839][ T5897] usb 6-1: device descriptor read/64, error -71 [ 217.348547][ T10] quatech2 4-1:0.51: device disconnected [ 217.449972][ T7587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.458065][ T5897] usb usb6-port1: attempt power cycle [ 217.967351][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.998558][ T5897] usb 6-1: device descriptor read/8, error -71 [ 218.169783][ T10] libceph: connect (1)[c::]:6789 error -101 [ 218.185184][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 218.222743][ T10] libceph: connect (1)[c::]:6789 error -101 [ 218.229043][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 218.252489][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.273242][ T5897] usb 6-1: device descriptor read/8, error -71 [ 218.384714][ T5897] usb usb6-port1: unable to enumerate USB device [ 218.447702][ T30] audit: type=1326 audit(2000000083.743:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.1.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc9f8ebe9 code=0x0 [ 218.509677][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 218.537799][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 218.558910][ T7596] ceph: No mds server is up or the cluster is laggy [ 218.651271][ T7615] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 220.098844][ T7649] batman_adv: batadv0: Adding interface: dummy0 [ 220.116554][ T7649] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.187365][ T7649] batman_adv: batadv0: Interface activated: dummy0 [ 220.296964][ T7666] netlink: 'syz.0.406': attribute type 29 has an invalid length. [ 220.323835][ T7670] netlink: 'syz.0.406': attribute type 29 has an invalid length. [ 220.489655][ T7679] netlink: 'syz.5.411': attribute type 10 has an invalid length. [ 220.499782][ T7679] netlink: 152 bytes leftover after parsing attributes in process `syz.5.411'. [ 220.598766][ T7684] netlink: 14 bytes leftover after parsing attributes in process `syz.3.413'. [ 220.621324][ T7684] hsr_slave_0: left promiscuous mode [ 220.628963][ T7684] hsr_slave_1: left promiscuous mode [ 220.640480][ T7686] Driver unsupported XDP return value 0 on prog (id 106) dev N/A, expect packet loss! [ 220.888272][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.417'. [ 220.908209][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.417'. [ 221.747101][ T7727] netlink: 180 bytes leftover after parsing attributes in process `syz.3.431'. [ 221.802561][ T7727] netlink: 180 bytes leftover after parsing attributes in process `syz.3.431'. [ 222.971315][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 223.039765][ T7750] vlan2: entered allmulticast mode [ 225.127573][ T7803] lo speed is unknown, defaulting to 1000 [ 226.165550][ T7825] netlink: 'syz.4.472': attribute type 3 has an invalid length. [ 226.215547][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 226.754592][ T7841] [ 226.756985][ T7841] ====================================================== [ 226.764018][ T7841] WARNING: possible circular locking dependency detected [ 226.771058][ T7841] 6.16.0-syzkaller #0 Not tainted [ 226.776090][ T7841] ------------------------------------------------------ [ 226.783120][ T7841] syz.5.478/7841 is trying to acquire lock: [ 226.789023][ T7841] ffff88801b2fca20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xb3/0x500 [ 226.799374][ T7841] [ 226.799374][ T7841] but task is already holding lock: [ 226.806756][ T7841] ffff888142f2e278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1d56/0x2410 [ 226.816567][ T7841] [ 226.816567][ T7841] which lock already depends on the new lock. [ 226.816567][ T7841] [ 226.826987][ T7841] [ 226.826987][ T7841] the existing dependency chain (in reverse order) is: [ 226.836016][ T7841] [ 226.836016][ T7841] -> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 226.844765][ T7841] lock_acquire+0x120/0x360 [ 226.849793][ T7841] blk_alloc_queue+0x538/0x620 [ 226.855080][ T7841] __blk_mq_alloc_disk+0x162/0x340 [ 226.860742][ T7841] loop_add+0x41b/0xad0 [ 226.865441][ T7841] loop_init+0x173/0x230 [ 226.870216][ T7841] do_one_initcall+0x233/0x820 [ 226.875508][ T7841] do_initcall_level+0x137/0x1f0 [ 226.880976][ T7841] do_initcalls+0x69/0xd0 [ 226.885829][ T7841] kernel_init_freeable+0x3d9/0x570 [ 226.891547][ T7841] kernel_init+0x1d/0x1d0 [ 226.896399][ T7841] ret_from_fork+0x3fc/0x770 [ 226.901506][ T7841] ret_from_fork_asm+0x1a/0x30 [ 226.906818][ T7841] [ 226.906818][ T7841] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 226.914041][ T7841] lock_acquire+0x120/0x360 [ 226.919063][ T7841] fs_reclaim_acquire+0x72/0x100 [ 226.924584][ T7841] kmem_cache_alloc_noprof+0x44/0x3c0 [ 226.930482][ T7841] __kernfs_iattrs+0x93/0x280 [ 226.935682][ T7841] kernfs_iop_setattr+0xea/0x3f0 [ 226.941136][ T7841] notify_change+0xb36/0xe40 [ 226.946345][ T7841] do_truncate+0x1a4/0x220 [ 226.951274][ T7841] path_openat+0x306c/0x3830 [ 226.956472][ T7841] do_filp_open+0x1fa/0x410 [ 226.961502][ T7841] do_sys_openat2+0x121/0x1c0 [ 226.966703][ T7841] __x64_sys_openat+0x138/0x170 [ 226.972087][ T7841] do_syscall_64+0xfa/0x3b0 [ 226.977109][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.983522][ T7841] [ 226.983522][ T7841] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 226.990826][ T7841] lock_acquire+0x120/0x360 [ 226.995842][ T7841] __mutex_lock+0x182/0xe80 [ 227.000866][ T7841] __kernfs_iattrs+0x2a/0x280 [ 227.006406][ T7841] kernfs_iop_setattr+0xea/0x3f0 [ 227.011874][ T7841] notify_change+0xb36/0xe40 [ 227.017007][ T7841] do_truncate+0x1a4/0x220 [ 227.021941][ T7841] path_openat+0x306c/0x3830 [ 227.027054][ T7841] do_filp_open+0x1fa/0x410 [ 227.032080][ T7841] do_sys_openat2+0x121/0x1c0 [ 227.037281][ T7841] __x64_sys_openat+0x138/0x170 [ 227.042653][ T7841] do_syscall_64+0xfa/0x3b0 [ 227.047673][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.054082][ T7841] [ 227.054082][ T7841] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 227.062604][ T7841] validate_chain+0xb9b/0x2140 [ 227.067895][ T7841] __lock_acquire+0xab9/0xd20 [ 227.073095][ T7841] lock_acquire+0x120/0x360 [ 227.078174][ T7841] down_read+0x46/0x2e0 [ 227.082850][ T7841] kernfs_iop_getattr+0xb3/0x500 [ 227.088307][ T7841] vfs_getattr_nosec+0x2e1/0x430 [ 227.093766][ T7841] loop_assign_backing_file+0x222/0x400 [ 227.099833][ T7841] lo_ioctl+0x1dc1/0x2410 [ 227.104694][ T7841] blkdev_ioctl+0x5a8/0x6d0 [ 227.109716][ T7841] __se_sys_ioctl+0xfc/0x170 [ 227.114827][ T7841] do_syscall_64+0xfa/0x3b0 [ 227.119849][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.126286][ T7841] [ 227.126286][ T7841] other info that might help us debug this: [ 227.126286][ T7841] [ 227.136535][ T7841] Chain exists of: [ 227.136535][ T7841] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 227.136535][ T7841] [ 227.150987][ T7841] Possible unsafe locking scenario: [ 227.150987][ T7841] [ 227.158430][ T7841] CPU0 CPU1 [ 227.163798][ T7841] ---- ---- [ 227.169153][ T7841] lock(&q->q_usage_counter(io)#24); [ 227.174530][ T7841] lock(fs_reclaim); [ 227.181025][ T7841] lock(&q->q_usage_counter(io)#24); [ 227.188937][ T7841] rlock(&root->kernfs_iattr_rwsem); [ 227.194312][ T7841] [ 227.194312][ T7841] *** DEADLOCK *** [ 227.194312][ T7841] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 227.202445][ T7841] 3 locks held by syz.5.478/7841: [ 227.207464][ T7841] #0: ffff888024e61400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x1247/0x2410 [ 227.216522][ T7841] #1: ffff888142f2e278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1d56/0x2410 [ 227.226713][ T7841] #2: ffff888142f2e2b0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: lo_ioctl+0x1d56/0x2410 [ 227.237172][ T7841] [ 227.237172][ T7841] stack backtrace: [ 227.243057][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.5.478 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 227.243077][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.243088][ T7841] Call Trace: [ 227.243094][ T7841] [ 227.243102][ T7841] dump_stack_lvl+0x189/0x250 [ 227.243125][ T7841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.243143][ T7841] ? __pfx__printk+0x10/0x10 [ 227.243166][ T7841] ? print_lock_name+0xde/0x100 [ 227.243187][ T7841] print_circular_bug+0x2ee/0x310 [ 227.243208][ T7841] check_noncircular+0x134/0x160 [ 227.243230][ T7841] validate_chain+0xb9b/0x2140 [ 227.243257][ T7841] __lock_acquire+0xab9/0xd20 [ 227.243275][ T7841] ? kernfs_iop_getattr+0xb3/0x500 [ 227.243294][ T7841] lock_acquire+0x120/0x360 [ 227.243308][ T7841] ? kernfs_iop_getattr+0xb3/0x500 [ 227.243332][ T7841] down_read+0x46/0x2e0 [ 227.243352][ T7841] ? kernfs_iop_getattr+0xb3/0x500 [ 227.243370][ T7841] kernfs_iop_getattr+0xb3/0x500 [ 227.243391][ T7841] vfs_getattr_nosec+0x2e1/0x430 [ 227.243412][ T7841] loop_assign_backing_file+0x222/0x400 [ 227.243433][ T7841] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 227.243450][ T7841] ? schedule+0x91/0x360 [ 227.243471][ T7841] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 227.243495][ T7841] lo_ioctl+0x1dc1/0x2410 [ 227.243516][ T7841] ? __pfx_lo_ioctl+0x10/0x10 [ 227.243530][ T7841] ? ima_match_policy+0x10b/0x2150 [ 227.243553][ T7841] ? ima_match_policy+0x20c3/0x2150 [ 227.243576][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.243592][ T7841] ? bpf_trace_run4+0x19c/0x4a0 [ 227.243617][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.243634][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.243653][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.243672][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.243694][ T7841] ? is_bpf_text_address+0x26/0x2b0 [ 227.243712][ T7841] ? is_bpf_text_address+0x292/0x2b0 [ 227.243727][ T7841] ? is_bpf_text_address+0x26/0x2b0 [ 227.243744][ T7841] ? kernel_text_address+0xa5/0xe0 [ 227.243768][ T7841] ? __kernel_text_address+0xd/0x40 [ 227.243791][ T7841] ? unwind_get_return_address+0x4d/0x90 [ 227.243808][ T7841] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 227.243830][ T7841] ? arch_stack_walk+0xfc/0x150 [ 227.243852][ T7841] ? stack_trace_save+0x9c/0xe0 [ 227.243873][ T7841] ? stack_depot_save_flags+0x40/0x900 [ 227.243894][ T7841] ? kasan_save_track+0x4f/0x80 [ 227.243917][ T7841] ? kasan_save_track+0x3e/0x80 [ 227.243939][ T7841] ? kasan_save_free_info+0x46/0x50 [ 227.243959][ T7841] ? __kasan_slab_free+0x62/0x70 [ 227.243973][ T7841] ? kfree+0x18e/0x440 [ 227.243996][ T7841] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 227.244012][ T7841] ? security_file_ioctl+0xcb/0x2d0 [ 227.244033][ T7841] ? __se_sys_ioctl+0x47/0x170 [ 227.244055][ T7841] ? do_syscall_64+0xfa/0x3b0 [ 227.244073][ T7841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.244098][ T7841] ? do_vfs_ioctl+0xf37/0x1990 [ 227.244123][ T7841] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.244148][ T7841] ? kasan_quarantine_put+0xdd/0x220 [ 227.244175][ T7841] ? blkdev_common_ioctl+0xfc3/0x2450 [ 227.244195][ T7841] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 227.244212][ T7841] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 227.244228][ T7841] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 227.244246][ T7841] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 227.244262][ T7841] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 227.244279][ T7841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.244302][ T7841] ? __lock_acquire+0xab9/0xd20 [ 227.244318][ T7841] ? __asan_memset+0x22/0x50 [ 227.244339][ T7841] ? smack_file_ioctl+0x24a/0x340 [ 227.244355][ T7841] ? __pfx_smack_file_ioctl+0x10/0x10 [ 227.244370][ T7841] ? __pfx_lo_ioctl+0x10/0x10 [ 227.244386][ T7841] blkdev_ioctl+0x5a8/0x6d0 [ 227.244406][ T7841] ? __pfx_blkdev_ioctl+0x10/0x10 [ 227.244423][ T7841] ? __fget_files+0x2a/0x420 [ 227.244442][ T7841] ? bpf_lsm_file_ioctl+0x9/0x20 [ 227.244460][ T7841] ? __pfx_blkdev_ioctl+0x10/0x10 [ 227.244479][ T7841] __se_sys_ioctl+0xfc/0x170 [ 227.244503][ T7841] do_syscall_64+0xfa/0x3b0 [ 227.244519][ T7841] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.244536][ T7841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.244551][ T7841] ? clear_bhb_loop+0x60/0xb0 [ 227.244569][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.244585][ T7841] RIP: 0033:0x7f5a7338ebe9 [ 227.244600][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.244614][ T7841] RSP: 002b:00007f5a74171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.244632][ T7841] RAX: ffffffffffffffda RBX: 00007f5a735b5fa0 RCX: 00007f5a7338ebe9 [ 227.244644][ T7841] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003 [ 227.244654][ T7841] RBP: 00007f5a73411e19 R08: 0000000000000000 R09: 0000000000000000 [ 227.244664][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.244674][ T7841] R13: 00007f5a735b6038 R14: 00007f5a735b5fa0 R15: 00007ffd4428ff28 [ 227.244692][ T7841] [ 228.627478][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.710533][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.776524][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.821065][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.889410][ T13] bridge_slave_1: left allmulticast mode [ 228.895219][ T13] bridge_slave_1: left promiscuous mode [ 228.901323][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.910150][ T13] bridge_slave_0: left allmulticast mode [ 228.916094][ T13] bridge_slave_0: left promiscuous mode [ 228.921775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.026869][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.039880][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.053637][ T13] bond0 (unregistering): Released all slaves [ 229.290755][ T13] hsr_slave_0: left promiscuous mode [ 229.296717][ T13] hsr_slave_1: left promiscuous mode [ 229.302531][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.309940][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.317846][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.325420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.337824][ T13] veth1_vlan: left promiscuous mode [ 229.343274][ T13] veth0_vlan: left promiscuous mode [ 229.438857][ T13] team0 (unregistering): Port device team_slave_1 removed [ 229.465298][ T13] team0 (unregistering): Port device team_slave_0 removed [ 229.812182][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.867915][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.948584][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.046754][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.102242][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.156145][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.196381][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.248012][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.301917][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.346262][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.416393][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.456770][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.512881][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.576457][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.636339][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.676844][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.748824][ T13] bridge_slave_1: left allmulticast mode [ 230.754719][ T13] bridge_slave_1: left promiscuous mode [ 230.760376][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.768799][ T13] bridge_slave_0: left allmulticast mode [ 230.774795][ T13] bridge_slave_0: left promiscuous mode [ 230.780437][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.789283][ T13] bridge_slave_1: left allmulticast mode [ 230.795081][ T13] bridge_slave_1: left promiscuous mode [ 230.800696][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.808994][ T13] bridge_slave_0: left promiscuous mode [ 230.815792][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.826287][ T13] bridge_slave_1: left allmulticast mode [ 230.831938][ T13] bridge_slave_1: left promiscuous mode [ 230.838006][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.846308][ T13] bridge_slave_0: left allmulticast mode [ 230.852045][ T13] bridge_slave_0: left promiscuous mode [ 230.858068][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.866816][ T13] bridge_slave_1: left allmulticast mode [ 230.872647][ T13] bridge_slave_1: left promiscuous mode [ 230.878287][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.886557][ T13] bridge_slave_0: left allmulticast mode [ 230.892193][ T13] bridge_slave_0: left promiscuous mode [ 230.898244][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.098256][ T13] team0: Port device bond0 removed [ 231.104829][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.113877][ T13] bond_slave_0: left allmulticast mode [ 231.121450][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.130331][ T13] bond_slave_1: left allmulticast mode [ 231.136983][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 231.146058][ T13] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 231.155236][ T13] bond0 (unregistering): Released all slaves [ 231.232552][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.242482][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.251935][ T13] bond0 (unregistering): Released all slaves [ 231.346870][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.357110][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.366815][ T13] bond0 (unregistering): Released all slaves [ 231.447049][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.457204][ T13] bond0 (unregistering): Released all slaves [ 231.527962][ T13] tipc: Left network mode [ 232.181688][ T13] hsr_slave_0: left promiscuous mode [ 232.187963][ T13] hsr_slave_1: left promiscuous mode [ 232.194508][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 232.201234][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 232.208614][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.216198][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.225010][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.232741][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.243258][ T13] hsr_slave_0: left promiscuous mode [ 232.249090][ T13] hsr_slave_1: left promiscuous mode [ 232.255529][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.263347][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.270911][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.278504][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.288035][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 232.294908][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 232.301767][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.309239][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.317495][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.324968][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.334713][ T13] hsr_slave_0: left promiscuous mode [ 232.340933][ T13] hsr_slave_1: left promiscuous mode [ 232.346989][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.354764][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.362467][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.369911][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.384537][ T13] veth1_vlan: left promiscuous mode [ 232.389805][ T13] veth0_vlan: left promiscuous mode [ 232.395932][ T13] veth1_macvtap: left promiscuous mode [ 232.401413][ T13] veth0_macvtap: left promiscuous mode [ 232.407096][ T13] veth1_vlan: left promiscuous mode [ 232.412337][ T13] veth0_vlan: left promiscuous mode [ 232.418343][ T13] veth1_macvtap: left promiscuous mode [ 232.423886][ T13] veth0_macvtap: left promiscuous mode [ 232.429404][ T13] veth1_vlan: left promiscuous mode [ 232.435278][ T13] veth0_vlan: left promiscuous mode [ 232.446755][ T13] veth1_vlan: left promiscuous mode [ 232.453378][ T13] veth0_vlan: left promiscuous mode [ 232.658903][ T13] team0 (unregistering): Port device team_slave_1 removed [ 232.682287][ T13] team0 (unregistering): Port device team_slave_0 removed [ 232.855287][ T13] team0 (unregistering): Port device team_slave_1 removed [ 232.876249][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.039772][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.062929][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.141776][ T6009] smc: removing ib device syz0 [ 233.327962][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.349523][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.454551][ T5897] infiniband syz1: ib_query_port failed (-19) [ 233.460701][ T5952] lo speed is unknown, defaulting to 1000 [ 233.466567][ T5952] syz0: Port: 1 Link DOWN [ 234.325299][ T13] IPVS: stop unused estimator thread 0...