last executing test programs: 2m30.340413818s ago: executing program 32 (id=36): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad", 0x1}], 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m29.176067269s ago: executing program 2 (id=48): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) 2m28.077503869s ago: executing program 2 (id=50): syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m27.742474828s ago: executing program 2 (id=52): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x808, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x808, @udp={{0x5, 0x4, 0x2, 0x39, 0x20, 0x65, 0x0, 0xd8, 0x11, 0x0, @empty, @loopback}, {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x83, 0x0, @void}}}}}}}, 0x0) 2m27.542282497s ago: executing program 2 (id=54): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x7ff, 0x0, {0x2, 0x8000000, 0x6, 0x0, 0xffffffff, 0x3, 0x201, 0x2, 0x42, 0xc000, 0x0, 0x0, r2, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', 0x0, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 2m27.168255242s ago: executing program 2 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 2m26.887447218s ago: executing program 2 (id=56): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r1, 0x4b30, 0x8000000000000001) 2m11.678561131s ago: executing program 33 (id=56): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r1, 0x4b30, 0x8000000000000001) 2m5.192747484s ago: executing program 5 (id=175): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) prlimit64(0x0, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x52534000) dup3(r1, r0, 0x0) 2m3.42592588s ago: executing program 5 (id=185): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4eb) 2m2.339751422s ago: executing program 5 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 2m1.144025481s ago: executing program 5 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m0.925407776s ago: executing program 5 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x800}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m0.491381759s ago: executing program 5 (id=198): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x8, 0x7}) r3 = eventfd2(0x500, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/155, 0x9b}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 2m0.156431241s ago: executing program 34 (id=198): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x8, 0x7}) r3 = eventfd2(0x500, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/155, 0x9b}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 1m50.034322379s ago: executing program 7 (id=257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 1m48.287721001s ago: executing program 7 (id=266): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 1m48.151116631s ago: executing program 7 (id=267): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1m47.767568257s ago: executing program 7 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 1m47.585096149s ago: executing program 7 (id=276): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m47.086863566s ago: executing program 7 (id=281): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r1) 1m46.78954961s ago: executing program 35 (id=281): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r1) 1m31.994644611s ago: executing program 1 (id=369): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) 1m31.422461817s ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m14.571489163s ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m10.889809332s ago: executing program 6 (id=488): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$pid(0x1, r0, 0x4000) 1m9.901757706s ago: executing program 6 (id=495): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1m9.291896149s ago: executing program 6 (id=501): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) pread64(r0, &(0x7f0000000100)=""/78, 0x4e, 0x0) 1m9.069899391s ago: executing program 6 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m8.946234952s ago: executing program 6 (id=504): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 1m8.260230215s ago: executing program 6 (id=507): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0], 0x0) 1m7.380140758s ago: executing program 36 (id=507): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0], 0x0) 57.350193862s ago: executing program 8 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 57.190576414s ago: executing program 8 (id=553): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 56.247265215s ago: executing program 8 (id=555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000300)="12", &(0x7f0000000040)=@udp6=r0, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000002100)=ANY=[], 0x0) 56.14514259s ago: executing program 8 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 55.139421305s ago: executing program 8 (id=560): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/5, 0x5}, {0x0}, {0x0}], 0x3}, 0x7bfd}], 0x1, 0x40010000, &(0x7f0000001540)={0x77359400}) bind$tipc(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 54.691754558s ago: executing program 8 (id=563): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x2000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) 54.298887105s ago: executing program 37 (id=563): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x2000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) 52.285495961s ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 32.392467615s ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13.06079376s ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.105971911s ago: executing program 0 (id=753): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1298c0, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 7.791465289s ago: executing program 0 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 7.475414936s ago: executing program 0 (id=760): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) 4.932207552s ago: executing program 0 (id=774): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.131864277s ago: executing program 9 (id=778): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000580)}) close_range(r0, 0xffffffffffffffff, 0x0) 4.087363487s ago: executing program 0 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 3.846023999s ago: executing program 9 (id=781): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.571962625s ago: executing program 9 (id=782): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(r1, r1, r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') getdents(r4, 0x0, 0x0) 3.571705716s ago: executing program 3 (id=783): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 3.466669681s ago: executing program 0 (id=784): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = dup(r0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f00000000c0)={0x0, 0x6fa8, 0x80}) close_range(r4, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0x8a002) 2.834205286s ago: executing program 9 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x11}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.833957351s ago: executing program 3 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 2.623731902s ago: executing program 3 (id=787): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r4, 0x0, 0x0, r5], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b}) 2.556431512s ago: executing program 9 (id=788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xffffffff, 0x57, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 2.550846792s ago: executing program 4 (id=789): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) write(r2, 0x0, 0x0) 2.425832221s ago: executing program 3 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.078621316s ago: executing program 3 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) 1.199966452s ago: executing program 4 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x40000003, 0x1, 0x1, "910f87a5bb5de06185cd000000000000000000001800", 0x51424752}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.15489936s ago: executing program 3 (id=793): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 881.275006ms ago: executing program 4 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0a2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 664.229784ms ago: executing program 9 (id=795): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 440.821696ms ago: executing program 4 (id=796): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r4, 0x0, 0x1fffffffffff, 0x0) 128.33698ms ago: executing program 4 (id=797): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r0 = timerfd_create(0x0, 0x800) r1 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 0s ago: executing program 4 (id=798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 105.776012][ T5822] Bluetooth: hci3: command tx timeout [ 105.903289][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.938336][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.022761][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.057749][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.065023][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.138650][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.531040][ T6057] hsr_slave_0: entered promiscuous mode [ 106.542655][ T6057] hsr_slave_1: entered promiscuous mode [ 106.550087][ T6057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.579102][ T6057] Cannot create hsr debugfs directory [ 106.756115][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.915873][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 106.935394][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.945830][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 106.954240][ T10] usb 5-1: can't read configurations, error -71 [ 107.404493][ T30] audit: type=1326 audit(1751144725.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.1.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850a98e929 code=0x0 [ 107.643208][ T6057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.688931][ T6057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.704520][ T6057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.742041][ T6057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.855824][ T5822] Bluetooth: hci3: command tx timeout [ 107.968627][ T6232] mmap: syz.3.87 (6232) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.010912][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.047736][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.101324][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.123277][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.132035][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.185758][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 108.229193][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.236599][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.343580][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.401191][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.426925][ T10] usb 5-1: can't read configurations, error -71 [ 108.458918][ T10] usb usb5-port1: attempt power cycle [ 108.800408][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.809630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.818454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.827371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.959715][ T6057] veth0_vlan: entered promiscuous mode [ 110.093519][ T6057] veth1_vlan: entered promiscuous mode [ 110.184906][ T10] IPVS: starting estimator thread 0... [ 110.318631][ T6057] veth0_macvtap: entered promiscuous mode [ 110.334647][ T6057] veth1_macvtap: entered promiscuous mode [ 110.416454][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.425863][ T6281] IPVS: using max 32 ests per chain, 76800 per kthread [ 110.508592][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.571692][ T6057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.614285][ T6057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.664628][ T6057] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.696055][ T6057] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.083005][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.113841][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 111.145699][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.303509][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.345794][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.935759][ T2153] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.120194][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.170584][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.328652][ T2153] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.368676][ T2153] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.389546][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.408848][ T2153] usb 6-1: config 0 descriptor?? [ 112.837774][ T2153] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 112.891964][ T2153] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 113.140860][ T2153] usb 6-1: USB disconnect, device number 2 [ 113.149196][ T6313] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 113.259920][ T6332] fido_id[6332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 113.980418][ T6355] kvm: apic: phys broadcast and lowest prio [ 115.503831][ T6394] process 'syz.1.123' launched './file0' with NULL argv: empty string added [ 116.305901][ T2153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.486524][ T2153] usb 2-1: Using ep0 maxpacket: 16 [ 116.532293][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.573025][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.603629][ T2153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.648424][ T2153] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.686718][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.717035][ T2153] usb 2-1: config 0 descriptor?? [ 117.175491][ T2153] HID 045e:07da: Invalid code 65791 type 1 [ 117.236885][ T2153] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5 [ 117.340984][ T2153] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 117.460538][ T30] audit: type=1804 audit(1751144735.527:4): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.128" name="/newroot/5/file0" dev="tmpfs" ino=43 res=1 errno=0 [ 117.476205][ T2153] usb 2-1: USB disconnect, device number 2 [ 117.714374][ T6426] fido_id[6426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 119.252248][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.268666][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.279374][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.290272][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.299642][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.142203][ T6482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.238082][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.292348][ T4878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.446010][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.498896][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.544932][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.615193][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.687450][ T24] usb 5-1: SerialNumber: syz [ 120.782461][ T4878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.044306][ T24] usb 5-1: 0:2 : does not exist [ 121.105025][ T24] usb 5-1: unit 255 not found! [ 121.144560][ T24] usb 5-1: 5:0: cannot get min/max values for control 1 (id 5) [ 121.145746][ T4878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.284522][ T24] usb 5-1: USB disconnect, device number 5 [ 121.382205][ T5138] Bluetooth: hci5: command tx timeout [ 121.386468][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.403163][ T4878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.724697][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 122.291868][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.300552][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.320917][ T6459] bridge_slave_0: entered allmulticast mode [ 122.357959][ T6459] bridge_slave_0: entered promiscuous mode [ 122.377905][ T4878] bridge_slave_1: left allmulticast mode [ 122.385835][ T4878] bridge_slave_1: left promiscuous mode [ 122.392046][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.506702][ T4878] bridge_slave_0: left allmulticast mode [ 122.512957][ T4878] bridge_slave_0: left promiscuous mode [ 122.556120][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.458746][ T5138] Bluetooth: hci5: command tx timeout [ 123.637557][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.653574][ T4878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.671852][ T4878] bond0 (unregistering): Released all slaves [ 123.762291][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.790522][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.827081][ T6459] bridge_slave_1: entered allmulticast mode [ 123.838640][ T6459] bridge_slave_1: entered promiscuous mode [ 124.225315][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.331100][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.072322][ T6459] team0: Port device team_slave_0 added [ 125.110469][ T6459] team0: Port device team_slave_1 added [ 125.199960][ T4878] hsr_slave_0: left promiscuous mode [ 125.227779][ T4878] hsr_slave_1: left promiscuous mode [ 125.245074][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.436591][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.455012][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.473676][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.535763][ T5138] Bluetooth: hci5: command tx timeout [ 125.559324][ T4878] veth1_macvtap: left promiscuous mode [ 125.570274][ T4878] veth0_macvtap: left promiscuous mode [ 125.576301][ T4878] veth1_vlan: left promiscuous mode [ 125.581756][ T4878] veth0_vlan: left promiscuous mode [ 127.106090][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.121506][ T4878] team0 (unregistering): Port device team_slave_1 removed [ 127.168139][ T4878] team0 (unregistering): Port device team_slave_0 removed [ 127.275815][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 127.291345][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.307155][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 127.319372][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.331477][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 127.341836][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.358543][ T5911] usb 5-1: config 0 descriptor?? [ 127.375493][ T6636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.406959][ T5911] hub 5-1:0.0: USB hub found [ 127.610639][ T5911] hub 5-1:0.0: 2 ports detected [ 127.626116][ T5138] Bluetooth: hci5: command tx timeout [ 128.002370][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.026861][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.070261][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.130438][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.161117][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.250298][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.254517][ T6657] capability: warning: `syz.3.194' uses 32-bit capabilities (legacy support in use) [ 128.398595][ T6459] hsr_slave_0: entered promiscuous mode [ 128.414641][ T6459] hsr_slave_1: entered promiscuous mode [ 128.434928][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.455347][ T5911] usb 5-1: USB disconnect, device number 6 [ 128.477144][ T6459] Cannot create hsr debugfs directory [ 128.797637][ T4878] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.950301][ T4878] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.085000][ T4878] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.199375][ T4878] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.391415][ T30] audit: type=1326 audit(1751144747.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6660 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71858e929 code=0x7fc00000 [ 129.427196][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.464849][ T6459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.555908][ T6459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.574658][ T6459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.590268][ T6459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.625957][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 129.651874][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 129.681371][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.716629][ T10] usb 5-1: Product: syz [ 129.720975][ T10] usb 5-1: Manufacturer: syz [ 129.745691][ T10] usb 5-1: SerialNumber: syz [ 129.760941][ T4878] bridge_slave_1: left allmulticast mode [ 129.766949][ T4878] bridge_slave_1: left promiscuous mode [ 129.773833][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.782187][ T10] usb 5-1: config 0 descriptor?? [ 129.801664][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.812494][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.822212][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.831966][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.840571][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.873625][ T4878] bridge_slave_0: left allmulticast mode [ 129.880048][ T4878] bridge_slave_0: left promiscuous mode [ 129.886511][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.201513][ T10] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 130.215700][ T10] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 130.293923][ T6695] input: syz0 as /devices/virtual/input/input6 [ 130.422120][ T977] usb 5-1: USB disconnect, device number 7 [ 130.592897][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.614899][ T4878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.629968][ T4878] bond0 (unregistering): Released all slaves [ 131.163726][ T4878] hsr_slave_0: left promiscuous mode [ 131.179033][ T4878] hsr_slave_1: left promiscuous mode [ 131.193482][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.217487][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.242089][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.263005][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.477170][ T4878] veth1_macvtap: left promiscuous mode [ 131.508412][ T4878] veth0_macvtap: left promiscuous mode [ 131.521262][ T4878] veth1_vlan: left promiscuous mode [ 131.543712][ T4878] veth0_vlan: left promiscuous mode [ 131.935699][ T5822] Bluetooth: hci2: command tx timeout [ 132.096773][ T6735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.570241][ T4878] team0 (unregistering): Port device team_slave_1 removed [ 132.613283][ T4878] team0 (unregistering): Port device team_slave_0 removed [ 133.078860][ T5188] udevd[5188]: worker [6060] terminated by signal 33 (Unknown signal 33) [ 133.091770][ T5188] udevd[5188]: worker [6060] failed while handling '/devices/virtual/block/loop1' [ 133.145653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152589][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.258401][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.449997][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.459063][ T30] audit: type=1800 audit(1751144751.527:6): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.221" name="bus" dev="overlay" ino=331 res=0 errno=0 [ 133.572672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.579948][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.590090][ T6758] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 133.603969][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 133.737064][ T6758] team0: Port device geneve0 added [ 133.757242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.764439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.855278][ T6689] chnl_net:caif_netlink_parms(): no params data found [ 134.015861][ T5822] Bluetooth: hci2: command tx timeout [ 134.200437][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.279857][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.287941][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.298872][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.306518][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.314293][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.322663][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.330874][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.338511][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.345885][ T6770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.496598][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.517596][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.534247][ T6689] bridge_slave_0: entered allmulticast mode [ 134.544655][ T6689] bridge_slave_0: entered promiscuous mode [ 134.561479][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.574857][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.599949][ T6689] bridge_slave_1: entered allmulticast mode [ 134.623488][ T6689] bridge_slave_1: entered promiscuous mode [ 134.757632][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.811824][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.002026][ T6689] team0: Port device team_slave_0 added [ 135.049705][ T6689] team0: Port device team_slave_1 added [ 135.381248][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.405472][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.465275][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.510306][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.518296][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.553906][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.591719][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.681437][ T6689] hsr_slave_0: entered promiscuous mode [ 135.692641][ T6689] hsr_slave_1: entered promiscuous mode [ 135.706987][ T6689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.725025][ T6689] Cannot create hsr debugfs directory [ 136.080747][ T6689] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.093442][ T6689] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.101346][ T5822] Bluetooth: hci2: command tx timeout [ 136.110963][ T6459] veth0_vlan: entered promiscuous mode [ 136.120163][ T6689] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 136.131596][ T6689] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 136.163165][ T6459] veth1_vlan: entered promiscuous mode [ 136.233445][ T6459] veth0_macvtap: entered promiscuous mode [ 136.253193][ T6459] veth1_macvtap: entered promiscuous mode [ 136.284075][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.312972][ T6689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.344419][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.411801][ T6459] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.425269][ T6459] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.441648][ T6459] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.451259][ T6459] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.475045][ T6689] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.504097][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.511521][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.542829][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.550903][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.666799][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.673529][ T6689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.694233][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.783507][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.794344][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.113282][ T6829] delete_channel: no stack [ 137.154244][ T6689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.641789][ T6689] veth0_vlan: entered promiscuous mode [ 137.648260][ T977] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 137.665353][ T6689] veth1_vlan: entered promiscuous mode [ 137.703538][ T6689] veth0_macvtap: entered promiscuous mode [ 137.723581][ T6689] veth1_macvtap: entered promiscuous mode [ 137.766562][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.800843][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.822942][ T977] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 137.837727][ T6689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.838333][ T977] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 137.861630][ T6689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.873624][ T6689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.874456][ T977] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 137.886162][ T6689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.902056][ T977] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 137.921209][ T977] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 137.944631][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.959713][ T977] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 137.969607][ T977] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.000346][ T977] usb 2-1: Product: syz [ 138.013458][ T977] usb 2-1: Manufacturer: syz [ 138.033392][ T977] usb 2-1: SerialNumber: syz [ 138.043345][ T977] usb 2-1: config 0 descriptor?? [ 138.058577][ T6842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.070372][ T977] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.106281][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.119664][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.134390][ T977] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.176427][ T5822] Bluetooth: hci2: command tx timeout [ 138.188493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.199288][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.799933][ T977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.975172][ T5861] usb 2-1: USB disconnect, device number 3 [ 139.015680][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 139.039898][ T5861] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 139.078916][ T977] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 139.133712][ T977] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 139.244273][ T977] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 139.315963][ T977] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 139.415656][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.462180][ T977] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 139.524826][ T977] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 139.570938][ T977] usb 4-1: Product: syz [ 139.575170][ T977] usb 4-1: Manufacturer: syz [ 139.606023][ T977] usb 4-1: SerialNumber: syz [ 139.617721][ T977] usb 4-1: config 0 descriptor?? [ 139.636471][ T977] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.668610][ T977] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.858334][ T977] usb 4-1: USB disconnect, device number 3 [ 140.215032][ T977] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 140.443902][ T6893] bridge0: entered allmulticast mode [ 140.451389][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 140.463039][ T6893] bridge_slave_1: left allmulticast mode [ 140.477833][ T6893] bridge_slave_1: left promiscuous mode [ 140.485682][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.501351][ T6893] bridge_slave_0: left allmulticast mode [ 140.513527][ T6893] bridge_slave_0: left promiscuous mode [ 140.520907][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.555382][ T6893] bridge0 (unregistering): left allmulticast mode [ 141.018680][ T6901] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 141.036475][ T6901] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 141.095753][ T977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.275788][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 141.331154][ T977] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 141.352111][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.401250][ T977] usb 4-1: config 0 descriptor?? [ 141.429129][ T977] gspca_main: sunplus-2.14.0 probing 041e:400b [ 141.737501][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 141.951946][ T977] gspca_sunplus: reg_w_riv err -71 [ 141.975916][ T977] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 142.004602][ T977] usb 4-1: USB disconnect, device number 4 [ 142.313983][ T1332] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.427779][ T1332] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.545293][ T1332] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.814321][ T1332] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.198887][ T6952] loop2: detected capacity change from 0 to 7 [ 143.217344][ T1332] bridge_slave_1: left allmulticast mode [ 143.252306][ T1332] bridge_slave_1: left promiscuous mode [ 143.273549][ T6952] Dev loop2: unable to read RDB block 7 [ 143.288610][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.327018][ T6952] loop2: unable to read partition table [ 143.333088][ T6952] loop2: partition table beyond EOD, truncated [ 143.368079][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.382618][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.392300][ T6952] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.403617][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.420928][ T1332] bridge_slave_0: left allmulticast mode [ 143.427571][ T1332] bridge_slave_0: left promiscuous mode [ 143.428403][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.433360][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.460603][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.798753][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.293'. [ 144.421136][ T6972] Bluetooth: MGMT ver 1.23 [ 144.646824][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 144.786223][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.803699][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.824133][ T1332] bond0 (unregistering): Released all slaves [ 144.889429][ T6982] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 144.895738][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.293'. [ 145.375929][ T6985] nbd6: detected capacity change from 0 to 4294967296 [ 145.389316][ T6991] block nbd6: shutting down sockets [ 145.477782][ T55] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.490232][ T55] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.515810][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.535344][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.544300][ T5822] Bluetooth: hci2: command tx timeout [ 145.569924][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.600932][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.645862][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.655964][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.665212][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.675179][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.688411][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.705108][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.716103][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.726855][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.735181][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.745240][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.753367][ T5874] ldm_validate_partition_table(): Disk read failed. [ 145.760713][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.769909][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.788227][ T5874] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.841953][ T5874] Buffer I/O error on dev nbd6, logical block 0, async page read [ 145.851430][ T1332] hsr_slave_0: left promiscuous mode [ 145.864983][ T1332] hsr_slave_1: left promiscuous mode [ 145.892627][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.892946][ T5874] Dev nbd6: unable to read RDB block 0 [ 145.912812][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.938345][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.031678][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.053435][ T5874] nbd6: unable to read partition table [ 146.167050][ T5874] ldm_validate_partition_table(): Disk read failed. [ 146.197426][ T5874] Dev nbd6: unable to read RDB block 0 [ 146.204723][ T5874] nbd6: unable to read partition table [ 146.251104][ T1332] veth1_macvtap: left promiscuous mode [ 146.282111][ T1332] veth0_macvtap: left promiscuous mode [ 146.292442][ T1332] veth1_vlan: left promiscuous mode [ 146.314795][ T1332] veth0_vlan: left promiscuous mode [ 146.632049][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.6.309'. [ 146.782910][ T7011] xt_CT: No such helper "snmp" [ 147.626334][ T5822] Bluetooth: hci2: command tx timeout [ 147.648521][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 147.726649][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 147.859420][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.041492][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 148.049179][ T5823] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 148.062939][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.108864][ T5823] pvrusb2: Hardware description: Terratec Grabster AV400 [ 148.123837][ T5823] pvrusb2: ********** [ 148.130062][ T5823] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 148.141601][ T5823] pvrusb2: Important functionality might not be entirely working. [ 148.151007][ T5823] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 148.163201][ T5823] pvrusb2: ********** [ 148.318440][ T2343] pvrusb2: Invalid write control endpoint [ 148.421938][ T2343] pvrusb2: Invalid write control endpoint [ 148.429194][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.439534][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.451532][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.463713][ T2343] pvrusb2: Device being rendered inoperable [ 148.481460][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.493703][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 148.507721][ T2343] pvrusb2: Attached sub-driver cx25840 [ 148.523715][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.547474][ T7029] pvrusb2: Attempted to execute control transfer when device not ok [ 148.565659][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.584546][ T5861] usb 4-1: USB disconnect, device number 5 [ 148.586682][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 148.974212][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 149.303434][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 149.497368][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.529559][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.540286][ T6958] bridge_slave_0: entered allmulticast mode [ 149.559793][ T6958] bridge_slave_0: entered promiscuous mode [ 149.593167][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.606762][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.638676][ T6958] bridge_slave_1: entered allmulticast mode [ 149.655001][ T6958] bridge_slave_1: entered promiscuous mode [ 149.705794][ T5822] Bluetooth: hci2: command tx timeout [ 149.934270][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.062151][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.216894][ T6958] team0: Port device team_slave_0 added [ 151.408359][ T6958] team0: Port device team_slave_1 added [ 151.761885][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.776042][ T5822] Bluetooth: hci2: command tx timeout [ 151.806421][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.910921][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.970676][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.002253][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.093228][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.517548][ T6958] hsr_slave_0: entered promiscuous mode [ 152.548253][ T6958] hsr_slave_1: entered promiscuous mode [ 152.554894][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.566075][ T6958] Cannot create hsr debugfs directory [ 152.960272][ T7104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 153.280149][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 153.433517][ T6958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 153.464820][ T6958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 153.499456][ T6958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 153.533259][ T6958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 153.825779][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.959530][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.001033][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.010378][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.113737][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.122092][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.183440][ T6958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.198394][ T6958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.804752][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.212800][ T7148] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 155.220925][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.236924][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 155.505647][ T5861] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 155.575695][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 155.592767][ T7159] Bluetooth: hci3: Frame reassembly failed (-90) [ 155.638861][ T49] Bluetooth: hci3: Frame reassembly failed (-84) [ 155.720234][ T6958] veth0_vlan: entered promiscuous mode [ 155.733798][ T6958] veth1_vlan: entered promiscuous mode [ 155.738384][ T10] usb 7-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 155.764032][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.771292][ T6958] veth0_macvtap: entered promiscuous mode [ 155.790502][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.793150][ T6958] veth1_macvtap: entered promiscuous mode [ 155.808093][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.831315][ T10] usb 7-1: config 0 descriptor?? [ 155.836519][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.859440][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.876581][ T6958] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.887100][ T6958] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.897441][ T6958] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.907119][ T6958] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.995049][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.010260][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.040183][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.061012][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.071566][ T7149] usb 45-1: recv xbuf, 0 [ 156.073950][ T10] usb 7-1: USB disconnect, device number 2 [ 156.088674][ T4878] vhci_hcd: stop threads [ 156.097930][ T4878] vhci_hcd: release socket [ 156.109213][ T4878] vhci_hcd: disconnect device [ 156.155761][ T5861] vhci_hcd: vhci_device speed not set [ 156.205735][ T7162] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 156.408044][ T7166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.356'. [ 156.446173][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.456335][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.244299][ T7194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.470149][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 157.487200][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 157.616342][ T5138] Bluetooth: hci3: command 0x1003 tx timeout [ 157.624525][ T5822] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 157.750800][ T7200] warning: `syz.8.370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.977804][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.001324][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 158.062438][ T7205] netlink: 'syz.8.373': attribute type 4 has an invalid length. [ 158.108927][ T7205] netlink: 'syz.8.373': attribute type 4 has an invalid length. [ 158.119963][ T7203] syz.3.372 (7203) used greatest stack depth: 17992 bytes left [ 158.277981][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.346435][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.504081][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.523329][ T30] audit: type=1326 audit(1751144776.587:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7213 comm="syz.4.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x0 [ 158.563586][ T7209] netlink: 136 bytes leftover after parsing attributes in process `syz.8.374'. [ 158.579299][ T7209] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 159.690285][ T49] bridge_slave_1: left allmulticast mode [ 159.705461][ T49] bridge_slave_1: left promiscuous mode [ 159.745823][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.812956][ T49] bridge_slave_0: left allmulticast mode [ 159.826547][ T49] bridge_slave_0: left promiscuous mode [ 159.838138][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.841676][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.854038][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.865812][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.896911][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.906154][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.251216][ T7240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.234481][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.356871][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.369003][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.380190][ T49] bond0 (unregistering): Released all slaves [ 161.498764][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.595810][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.677843][ T5898] usb 5-1: config 0 has no interfaces? [ 161.692676][ T5898] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.705425][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.723119][ T5898] usb 5-1: config 0 descriptor?? [ 161.782715][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.875717][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.901879][ T5823] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 161.923745][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.935764][ T49] hsr_slave_0: left promiscuous mode [ 161.936746][ T5138] Bluetooth: hci3: command tx timeout [ 161.969849][ T5911] usb 5-1: USB disconnect, device number 8 [ 162.030410][ T49] hsr_slave_1: left promiscuous mode [ 162.037185][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.045357][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.056821][ T5823] usb 4-1: config 0 descriptor?? [ 162.065079][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.073558][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.147991][ T49] veth1_macvtap: left promiscuous mode [ 162.156253][ T49] veth0_macvtap: left promiscuous mode [ 162.162116][ T49] veth1_vlan: left promiscuous mode [ 162.168997][ T49] veth0_vlan: left promiscuous mode [ 162.623431][ T5823] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 162.667729][ T5823] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 162.814314][ T5823] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 163.025708][ T10] libceph: connect (1)[c::]:6789 error -101 [ 163.048710][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 163.077260][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 163.083980][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 163.357779][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 163.364454][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 163.450294][ T7265] cp2112 0003:10C4:EA90.0003: Multi-message I2C transactions not supported [ 163.468907][ T5823] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 163.505132][ T5823] usb 4-1: USB disconnect, device number 6 [ 163.559818][ T7279] ceph: No mds server is up or the cluster is laggy [ 164.016231][ T5138] Bluetooth: hci3: command tx timeout [ 164.865470][ T49] team0 (unregistering): Port device team_slave_1 removed [ 165.056864][ T49] team0 (unregistering): Port device team_slave_0 removed [ 165.925642][ T7327] netlink: 'syz.8.412': attribute type 2 has an invalid length. [ 166.106270][ T5138] Bluetooth: hci3: command tx timeout [ 166.145791][ T5861] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.317692][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 166.340409][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 166.365005][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.382361][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.391871][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.403951][ T5861] usb 5-1: Product: syz [ 166.408229][ T5861] usb 5-1: Manufacturer: syz [ 166.415497][ T5861] usb 5-1: SerialNumber: syz [ 166.432192][ T5861] usb 5-1: config 0 descriptor?? [ 166.457274][ T5861] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.467419][ T5861] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 166.621600][ T7232] chnl_net:caif_netlink_parms(): no params data found [ 166.856541][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.870576][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.886574][ T7232] bridge_slave_0: entered allmulticast mode [ 166.904764][ T7232] bridge_slave_0: entered promiscuous mode [ 166.928777][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.956186][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.971893][ T7232] bridge_slave_1: entered allmulticast mode [ 166.982136][ T7232] bridge_slave_1: entered promiscuous mode [ 167.059887][ T5861] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 167.068529][ T5861] em28xx 5-1:0.0: Config register raw data: 0xbc [ 167.081851][ T5861] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 167.101244][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.115606][ T5861] em28xx 5-1:0.0: No AC97 audio processor [ 167.145197][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.375265][ T7232] team0: Port device team_slave_0 added [ 167.412858][ T49] IPVS: stop unused estimator thread 0... [ 167.420697][ T7232] team0: Port device team_slave_1 added [ 167.632631][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.663172][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.700227][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.734658][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.744858][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.779941][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.884268][ T7365] libceph: resolve '.' (ret=-3): failed [ 167.910675][ T5861] usb 5-1: USB disconnect, device number 9 [ 168.002492][ T7232] hsr_slave_0: entered promiscuous mode [ 168.021227][ T7232] hsr_slave_1: entered promiscuous mode [ 168.177718][ T5138] Bluetooth: hci3: command tx timeout [ 169.363496][ T7381] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 170.719097][ T7232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.759139][ T7393] netlink: 96 bytes leftover after parsing attributes in process `syz.3.437'. [ 170.938082][ T7232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.056458][ T7232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.075299][ T7232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.299187][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 171.668892][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.790545][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.843668][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.850936][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.946940][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.954626][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.227086][ T7435] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 172.396984][ T7440] tipc: Started in network mode [ 172.402033][ T7440] tipc: Node identity 4, cluster identity 4711 [ 172.412946][ T7440] tipc: Node number set to 4 [ 172.615234][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.743773][ T7232] veth0_vlan: entered promiscuous mode [ 172.779445][ T7232] veth1_vlan: entered promiscuous mode [ 172.854336][ T7232] veth0_macvtap: entered promiscuous mode [ 172.891303][ T7232] veth1_macvtap: entered promiscuous mode [ 172.901135][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.454'. [ 173.107107][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.154237][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.192761][ T7232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.224787][ T7232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.272258][ T7232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.302441][ T7232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.661613][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.706643][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.742000][ T7467] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.780635][ T7467] overlayfs: failed to set xattr on upper [ 173.806179][ T7467] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.816366][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.6.461'. [ 173.825780][ T7467] overlayfs: ...falling back to metacopy=off. [ 173.825812][ T7467] overlayfs: ...falling back to index=off. [ 173.825821][ T7467] overlayfs: ...falling back to uuid=null. [ 173.827348][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.868698][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.814632][ T6081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.171950][ T6081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.405805][ T7492] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 175.582293][ T6081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.854972][ T7494] bond1: (slave veth3): Enslaving as an active interface with a down link [ 175.997817][ T7496] bond1: (slave veth5): Enslaving as an active interface with a down link [ 176.035565][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.047440][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.055470][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.065117][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.074982][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.223633][ T6081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.393465][ T7528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.412484][ T6081] bridge_slave_1: left allmulticast mode [ 177.422412][ T6081] bridge_slave_1: left promiscuous mode [ 177.461049][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.599784][ T6081] bridge_slave_0: left allmulticast mode [ 177.631565][ T6081] bridge_slave_0: left promiscuous mode [ 177.650637][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.754339][ T7539] 9pnet: p9_errstr2errno: server reported unknown error @íÎ0x0000000000000007 [ 178.096869][ T5822] Bluetooth: hci3: command tx timeout [ 179.030573][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 179.522266][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.540631][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.552166][ T6081] bond0 (unregistering): Released all slaves [ 180.153767][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 180.180370][ T5822] Bluetooth: hci3: command tx timeout [ 180.665618][ T5861] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.955679][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 181.045874][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.101907][ T5861] usb 4-1: config 0 has no interfaces? [ 181.194840][ T5861] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 181.263451][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.276442][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.296495][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.310965][ T7511] bridge_slave_0: entered allmulticast mode [ 181.319094][ T5861] usb 4-1: config 0 descriptor?? [ 181.352339][ T7511] bridge_slave_0: entered promiscuous mode [ 181.363942][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.375811][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.383385][ T7511] bridge_slave_1: entered allmulticast mode [ 181.418602][ T7511] bridge_slave_1: entered promiscuous mode [ 181.621150][ T6081] hsr_slave_0: left promiscuous mode [ 181.634132][ T6081] hsr_slave_1: left promiscuous mode [ 181.647101][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.686574][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.702648][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.716025][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.773268][ T6081] veth1_macvtap: left promiscuous mode [ 181.790136][ T6081] veth0_macvtap: left promiscuous mode [ 181.796294][ T6081] veth1_vlan: left promiscuous mode [ 181.801858][ T6081] veth0_vlan: left promiscuous mode [ 182.275781][ T5822] Bluetooth: hci3: command tx timeout [ 182.943990][ T30] audit: type=1804 audit(1751144801.007:8): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.512" name="/newroot/40/file0" dev="tmpfs" ino=255 res=1 errno=0 [ 183.114531][ T30] audit: type=1800 audit(1751144801.167:9): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.513" name="/" dev="9p" ino=2 res=0 errno=0 [ 183.194532][ T10] usb 4-1: USB disconnect, device number 7 [ 183.358439][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.379169][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.390000][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.411408][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.431947][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.550989][ T7626] evm: overlay not supported [ 183.626391][ T7631] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 183.626391][ T7631] program syz.8.517 not setting count and/or reply_len properly [ 184.336615][ T5138] Bluetooth: hci3: command tx timeout [ 184.830143][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.986104][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 185.016578][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.025180][ T24] usb 5-1: config 0 has no interface number 0 [ 185.034834][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.8.523'. [ 185.061532][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 185.083413][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.100354][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.113603][ T24] usb 5-1: Product: syz [ 185.125175][ T24] usb 5-1: Manufacturer: syz [ 185.146282][ T24] usb 5-1: SerialNumber: syz [ 185.181568][ T24] usb 5-1: config 0 descriptor?? [ 185.194833][ T24] smsc75xx v1.0.0 [ 185.250060][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 185.350962][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 185.536997][ T5138] Bluetooth: hci4: command tx timeout [ 185.807304][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 185.818786][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.150429][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.191446][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.352574][ T7511] team0: Port device team_slave_0 added [ 186.393328][ T7511] team0: Port device team_slave_1 added [ 186.535124][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.552004][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.621378][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.703676][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.722899][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.785252][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.853138][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 186.879744][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 186.903136][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 186.917002][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 186.954954][ T24] usb 5-1: USB disconnect, device number 10 [ 187.012563][ T7511] hsr_slave_0: entered promiscuous mode [ 187.028286][ T7511] hsr_slave_1: entered promiscuous mode [ 187.412827][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.543286][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.616349][ T5138] Bluetooth: hci4: command tx timeout [ 187.781451][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.087803][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.254214][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.293766][ T7622] chnl_net:caif_netlink_parms(): no params data found [ 188.445869][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 188.458395][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.601162][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.682511][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.710385][ T24] usb 5-1: Product: syz [ 188.714809][ T24] usb 5-1: Manufacturer: syz [ 188.729662][ T24] usb 5-1: SerialNumber: syz [ 188.744392][ T24] usb 5-1: config 0 descriptor?? [ 188.784973][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.812896][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 188.959452][ T36] bridge_slave_1: left allmulticast mode [ 188.966563][ T36] bridge_slave_1: left promiscuous mode [ 188.972602][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.983761][ T36] bridge_slave_0: left allmulticast mode [ 188.991045][ T36] bridge_slave_0: left promiscuous mode [ 188.997550][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.419639][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 189.609985][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.641372][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.663783][ T36] bond0 (unregistering): Released all slaves [ 189.703173][ T5138] Bluetooth: hci4: command tx timeout [ 189.752474][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.769626][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.856526][ T7622] bridge_slave_0: entered allmulticast mode [ 189.893055][ T7622] bridge_slave_0: entered promiscuous mode [ 189.910042][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.917917][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.925277][ T7622] bridge_slave_1: entered allmulticast mode [ 189.933464][ T7622] bridge_slave_1: entered promiscuous mode [ 189.961846][ T7711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.053504][ T24] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 190.077876][ T24] em28xx 5-1:0.0: board has no eeprom [ 190.104164][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.158343][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.292540][ T7622] team0: Port device team_slave_0 added [ 190.323373][ T7622] team0: Port device team_slave_1 added [ 190.325839][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 190.332468][ T7511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.346678][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 190.353065][ T5823] em28xx 5-1:0.0: Binding DVB extension [ 190.384323][ T24] usb 5-1: USB disconnect, device number 11 [ 190.398001][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 190.433917][ T7511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.461171][ T7511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.493702][ T5823] em28xx 5-1:0.0: Registering input extension [ 190.513243][ T24] em28xx 5-1:0.0: Closing input extension [ 190.514316][ T7511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.550109][ T36] hsr_slave_0: left promiscuous mode [ 190.571275][ T24] em28xx 5-1:0.0: Freeing device [ 190.580173][ T36] hsr_slave_1: left promiscuous mode [ 190.588916][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.599776][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.611212][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.620788][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.642413][ T36] veth1_macvtap: left promiscuous mode [ 190.649021][ T36] veth0_macvtap: left promiscuous mode [ 190.654645][ T36] veth1_vlan: left promiscuous mode [ 190.661573][ T36] veth0_vlan: left promiscuous mode [ 191.181221][ T36] team0 (unregistering): Port device team_slave_1 removed [ 191.232552][ T36] team0 (unregistering): Port device team_slave_0 removed [ 191.731312][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.746446][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.785706][ T5138] Bluetooth: hci4: command tx timeout [ 191.794431][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.809284][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.816987][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.828592][ T5861] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.844690][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.089606][ T7622] hsr_slave_0: entered promiscuous mode [ 192.098177][ T7622] hsr_slave_1: entered promiscuous mode [ 192.115148][ T7622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.129889][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 192.133180][ T7622] Cannot create hsr debugfs directory [ 192.139725][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 192.150415][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.162896][ T5861] usb 4-1: Product: syz [ 192.167220][ T5861] usb 4-1: Manufacturer: syz [ 192.171829][ T5861] usb 4-1: SerialNumber: syz [ 192.212952][ T5861] usb 4-1: config 0 descriptor?? [ 192.448806][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.487180][ T5861] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.593163][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.653553][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.660792][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.700969][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.708298][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.885038][ T7622] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 192.905983][ T7622] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 192.919813][ T7622] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 192.927789][ T7746] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.554'. [ 192.938127][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 192.979579][ T7622] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 193.249253][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.306138][ T7622] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.326976][ T5861] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 193.344294][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.351549][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.368544][ T5861] usb 4-1: USB disconnect, device number 8 [ 193.403711][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.411122][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.490284][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.589647][ T7511] veth0_vlan: entered promiscuous mode [ 193.611788][ T7511] veth1_vlan: entered promiscuous mode [ 193.692683][ T7511] veth0_macvtap: entered promiscuous mode [ 193.714750][ T7511] veth1_macvtap: entered promiscuous mode [ 193.764531][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.823448][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.842576][ T7511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.853374][ T7511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.870306][ T7511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.882504][ T7511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.913914][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.174283][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.210405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.349923][ T7778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.357684][ T7778] IPv6: NLM_F_CREATE should be set when creating new route [ 194.401443][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.411828][ T7778] lo: entered allmulticast mode [ 194.425461][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.437698][ T7778] tunl0: entered allmulticast mode [ 194.458462][ T5823] IPVS: starting estimator thread 0... [ 194.462700][ T7778] gre0: entered allmulticast mode [ 194.464166][ T7780] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.507266][ T7778] gretap0: entered allmulticast mode [ 194.526075][ T7778] erspan0: entered allmulticast mode [ 194.550963][ T7778] ip_vti0: entered allmulticast mode [ 194.565854][ T7782] IPVS: using max 35 ests per chain, 84000 per kthread [ 194.592429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.648491][ T7778] ip6_vti0: entered allmulticast mode [ 194.687139][ T7778] sit0: entered allmulticast mode [ 194.727518][ T7778] ip6tnl0: entered allmulticast mode [ 194.755635][ T7778] ip6gre0: entered allmulticast mode [ 194.786146][ T7778] ip6gretap0: entered allmulticast mode [ 194.826345][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.835245][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.851157][ T7778] bridge0: entered allmulticast mode [ 194.866365][ T7778] vcan0: entered allmulticast mode [ 194.887177][ T7778] bond0: entered allmulticast mode [ 194.892686][ T7778] bond_slave_0: entered allmulticast mode [ 194.899399][ T7778] bond_slave_1: entered allmulticast mode [ 194.928650][ T7778] team0: entered allmulticast mode [ 194.933833][ T7778] team_slave_0: entered allmulticast mode [ 194.955755][ T7778] team_slave_1: entered allmulticast mode [ 194.961820][ T7778] geneve0: entered allmulticast mode [ 194.989674][ T7778] dummy0: entered allmulticast mode [ 195.031142][ T7778] nlmon0: entered allmulticast mode [ 195.047558][ T7778] caif0: entered allmulticast mode [ 195.062690][ T7778] batadv0: entered allmulticast mode [ 195.087514][ T7778] veth0: entered allmulticast mode [ 195.123338][ T7778] veth1: entered allmulticast mode [ 195.179200][ T7778] wg0: entered allmulticast mode [ 195.207451][ T7778] wg1: entered allmulticast mode [ 195.260350][ T7778] wg2: entered allmulticast mode [ 195.288743][ T7778] veth0_to_bridge: entered allmulticast mode [ 195.337350][ T7778] veth1_to_bridge: entered allmulticast mode [ 195.369747][ T7778] veth0_to_bond: entered allmulticast mode [ 195.410082][ T7778] veth1_to_bond: entered allmulticast mode [ 195.440253][ T7778] veth0_to_team: entered allmulticast mode [ 195.471904][ T7778] veth1_to_team: entered allmulticast mode [ 195.518101][ T7778] veth0_to_batadv: entered allmulticast mode [ 195.544345][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.556442][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.569779][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.578713][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.589448][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.596872][ T7778] batadv_slave_0: entered allmulticast mode [ 195.600408][ T7778] veth1_to_batadv: entered allmulticast mode [ 195.616070][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.662947][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.681864][ T7778] batadv_slave_1: entered allmulticast mode [ 195.694901][ T7778] xfrm0: entered allmulticast mode [ 195.706580][ T7778] veth0_to_hsr: entered allmulticast mode [ 195.722645][ T7778] hsr_slave_0: entered allmulticast mode [ 195.779761][ T7778] veth1_to_hsr: entered allmulticast mode [ 195.797463][ T7778] hsr_slave_1: entered allmulticast mode [ 195.822515][ T7778] hsr0: entered allmulticast mode [ 195.829949][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 195.851285][ T7778] veth0_virt_wifi: entered allmulticast mode [ 195.865304][ T7778] veth1_vlan: entered allmulticast mode [ 195.881853][ T7778] veth0_vlan: entered allmulticast mode [ 195.917080][ T7778] vlan0: entered allmulticast mode [ 195.922520][ T7778] vlan1: entered allmulticast mode [ 195.937789][ T7778] macvlan0: entered allmulticast mode [ 195.962943][ T7778] macvlan1: entered allmulticast mode [ 195.983864][ T7778] ipvlan0: entered allmulticast mode [ 195.995647][ T7778] ipvlan1: entered allmulticast mode [ 196.002297][ T7778] veth1_macvtap: entered allmulticast mode [ 196.034958][ T7778] veth0_macvtap: entered allmulticast mode [ 196.060872][ T7778] macvtap0: entered allmulticast mode [ 196.080085][ T7778] macsec0: entered allmulticast mode [ 196.118962][ T7778] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.139961][ T7778] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.149108][ T7778] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.158300][ T7778] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.171853][ T7778] geneve1: entered allmulticast mode [ 196.187026][ T7778] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 196.211267][ T7778] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 196.235222][ T7778] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 196.253788][ T7778] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 196.290338][ T7778] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 196.320365][ T7778] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 196.333983][ T7778] mac80211_hwsim hwsim7 pimreg: entered allmulticast mode [ 196.345382][ T7778] sit1: entered allmulticast mode [ 196.352128][ T7778] veth2: entered allmulticast mode [ 196.357785][ T7778] veth3: entered allmulticast mode [ 196.543136][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.584786][ T7806] ip6gretap0: left allmulticast mode [ 196.594792][ T7806] netlink: 136 bytes leftover after parsing attributes in process `syz.3.567'. [ 196.703590][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 196.730948][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.860224][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.920956][ T7622] veth0_vlan: entered promiscuous mode [ 197.041318][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.133879][ T7622] veth1_vlan: entered promiscuous mode [ 197.459598][ T7622] veth0_macvtap: entered promiscuous mode [ 197.531937][ T7622] veth1_macvtap: entered promiscuous mode [ 197.590323][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 197.653219][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.701271][ T5822] Bluetooth: hci2: command tx timeout [ 197.769350][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.800487][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.810509][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.820136][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.829807][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.841508][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.873457][ T49] bridge_slave_1: left allmulticast mode [ 197.884970][ T49] bridge_slave_1: left promiscuous mode [ 197.942040][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.962121][ T49] bridge_slave_0: left allmulticast mode [ 197.969204][ T49] bridge_slave_0: left promiscuous mode [ 198.028925][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.909210][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.931631][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.951581][ T49] bond0 (unregistering): Released all slaves [ 199.071669][ T7622] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.223390][ T7622] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.233081][ T7622] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.265709][ T7622] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.578614][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.586733][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.594966][ T7789] bridge_slave_0: entered allmulticast mode [ 199.604670][ T7789] bridge_slave_0: entered promiscuous mode [ 199.615370][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.623468][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.631843][ T7789] bridge_slave_1: entered allmulticast mode [ 199.646418][ T7789] bridge_slave_1: entered promiscuous mode [ 199.710432][ T7841] tipc: Enabled bearer , priority 0 [ 199.751658][ T7839] syzkaller0: entered promiscuous mode [ 199.757491][ T7839] syzkaller0: entered allmulticast mode [ 199.763633][ T7839] tipc: Resetting bearer [ 199.776142][ T5138] Bluetooth: hci2: command tx timeout [ 199.820859][ T7838] tipc: Resetting bearer [ 199.937368][ T5138] Bluetooth: hci3: command tx timeout [ 201.624283][ T7838] tipc: Disabling bearer [ 201.704032][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.734234][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.807307][ T49] hsr_slave_0: left promiscuous mode [ 201.823242][ T49] hsr_slave_1: left promiscuous mode [ 201.842113][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.851465][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.865808][ T5138] Bluetooth: hci2: command tx timeout [ 201.873993][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.883760][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.909387][ T49] veth1_macvtap: left promiscuous mode [ 201.915073][ T49] veth0_macvtap: left promiscuous mode [ 201.921119][ T49] veth1_vlan: left promiscuous mode [ 201.928356][ T49] veth0_vlan: left promiscuous mode [ 202.017845][ T5138] Bluetooth: hci3: command tx timeout [ 203.034170][ T49] team0 (unregistering): Port device team_slave_1 removed [ 203.137143][ T49] team0 (unregistering): Port device team_slave_0 removed [ 203.608118][ T7859] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.945941][ T5138] Bluetooth: hci2: command tx timeout [ 204.078401][ T7789] team0: Port device team_slave_0 added [ 204.105666][ T5138] Bluetooth: hci3: command tx timeout [ 204.136053][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.144240][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.178437][ T7789] team0: Port device team_slave_1 added [ 204.361819][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.380325][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.418273][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.443940][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.454841][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.482495][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.105262][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.141679][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.175319][ T7789] hsr_slave_0: entered promiscuous mode [ 205.202405][ T7789] hsr_slave_1: entered promiscuous mode [ 205.238245][ T7789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.266362][ T7789] Cannot create hsr debugfs directory [ 205.298185][ T7822] chnl_net:caif_netlink_parms(): no params data found [ 205.875093][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.891929][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.900162][ T7822] bridge_slave_0: entered allmulticast mode [ 205.909216][ T7822] bridge_slave_0: entered promiscuous mode [ 205.926808][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.963540][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.020158][ T7822] bridge_slave_1: entered allmulticast mode [ 206.047611][ T7822] bridge_slave_1: entered promiscuous mode [ 206.163004][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.175785][ T5138] Bluetooth: hci3: command tx timeout [ 206.390175][ T7822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.452797][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.499101][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 206.528266][ T7822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.162548][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.247063][ T7822] team0: Port device team_slave_0 added [ 207.257374][ T7822] team0: Port device team_slave_1 added [ 207.303973][ T7909] bond0: (slave bond_slave_0): Releasing backup interface [ 207.324629][ T7909] bond0: (slave bond_slave_1): Releasing backup interface [ 207.351462][ T7909] team0: Port device team_slave_0 removed [ 207.373324][ T7909] team0: Port device team_slave_1 removed [ 207.396382][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.411520][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.439981][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.448816][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.495236][ T7909] team0: Port device geneve0 removed [ 207.523290][ T7909] bond1: (slave veth3): Releasing active interface [ 207.539330][ T7909] bond1: (slave veth3): the permanent HWaddr of slave - fa:03:b5:e8:9a:fb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 207.562725][ T7909] bond1: (slave veth5): Releasing active interface [ 207.633797][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.841603][ T7925] netlink: 64 bytes leftover after parsing attributes in process `syz.9.600'. [ 207.980635][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.992870][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.036128][ T7822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.051036][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.063889][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.098543][ T7822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.438825][ T7822] hsr_slave_0: entered promiscuous mode [ 208.452706][ T7822] hsr_slave_1: entered promiscuous mode [ 208.462584][ T7822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.475701][ T7822] Cannot create hsr debugfs directory [ 208.820244][ T49] bridge_slave_1: left allmulticast mode [ 208.828948][ T49] bridge_slave_1: left promiscuous mode [ 208.834745][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.851724][ T49] bridge_slave_0: left allmulticast mode [ 208.857730][ T49] bridge_slave_0: left promiscuous mode [ 208.863524][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.185904][ T977] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 209.279610][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.291255][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.303833][ T49] bond0 (unregistering): Released all slaves [ 209.344497][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.363141][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.377783][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.388836][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.545806][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805702f800: rx timeout, send abort [ 209.557091][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805702f800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.627452][ T977] usb 5-1: usb_control_msg returned -32 [ 209.633948][ T977] usbtmc 5-1:16.0: can't read capabilities [ 209.904739][ T49] hsr_slave_0: left promiscuous mode [ 209.910960][ T49] hsr_slave_1: left promiscuous mode [ 209.920053][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.928919][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.959133][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.971617][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.018298][ T49] veth1_macvtap: left promiscuous mode [ 210.023875][ T49] veth0_macvtap: left promiscuous mode [ 210.045835][ T49] veth1_vlan: left promiscuous mode [ 210.051487][ T49] veth0_vlan: left promiscuous mode [ 211.473495][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.577198][ T49] team0 (unregistering): Port device team_slave_1 removed [ 211.630234][ T49] team0 (unregistering): Port device team_slave_0 removed [ 211.969574][ T7650] usb 5-1: USB disconnect, device number 12 [ 212.021183][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 212.878178][ T7822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.902703][ T7822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.958979][ T7822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.021600][ T7822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.173744][ T7789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.198264][ T7789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.234295][ T7789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.283383][ T7789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.820842][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.866574][ T7822] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.892979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.900243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.921138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.928372][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.985618][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.025234][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.104974][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.133859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.141174][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.172626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.179877][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.288510][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.302109][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 214.321328][ T9] usb 4-1: can't read configurations, error -71 [ 214.542485][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.602565][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.638821][ T7822] veth0_vlan: entered promiscuous mode [ 214.654986][ T7822] veth1_vlan: entered promiscuous mode [ 214.699413][ T7789] veth0_vlan: entered promiscuous mode [ 214.720812][ T7822] veth0_macvtap: entered promiscuous mode [ 214.734207][ T7789] veth1_vlan: entered promiscuous mode [ 214.744067][ T7822] veth1_macvtap: entered promiscuous mode [ 214.772805][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.805754][ T7789] veth0_macvtap: entered promiscuous mode [ 214.814631][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.848126][ T7822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.861941][ T7822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.871332][ T7822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.884240][ T7822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.908593][ T7789] veth1_macvtap: entered promiscuous mode [ 214.959868][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.004022][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.044543][ T7789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.084569][ T7789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.095856][ T7789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.104918][ T7789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.206013][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.228387][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.426157][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.442956][ T8054] kvm: pic: non byte write [ 215.468804][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.537461][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.558040][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.674855][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.687519][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.009651][ T8064] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.641'. [ 217.246175][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.624234][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.740813][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.918939][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.953883][ T12] bridge_slave_1: left allmulticast mode [ 218.991766][ T12] bridge_slave_1: left promiscuous mode [ 219.003871][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.086723][ T12] bridge_slave_0: left allmulticast mode [ 219.092638][ T12] bridge_slave_0: left promiscuous mode [ 219.153757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.414705][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.425382][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.434152][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.443937][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.452023][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.587445][ T8099] 9pnet_fd: p9_fd_create_tcp (8099): problem connecting socket to 127.0.0.1 [ 219.600395][ T8111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.394349][ T30] audit: type=1804 audit(1751144838.457:10): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.664" name="/newroot/160/file0" dev="tmpfs" ino=863 res=1 errno=0 [ 220.398209][ T8135] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 220.459134][ T8135] ref_ctr increment failed for inode: 0x35f offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888025d47380 [ 220.906591][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.993843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.007505][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.020899][ T12] bond0 (unregistering): Released all slaves [ 221.085417][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.099001][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.116514][ T24] usb 1-1: config 0 descriptor?? [ 221.345215][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 221.354810][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 221.466555][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 221.485699][ T24] [drm] Initialized udl on minor 2 [ 221.494199][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.548909][ T5822] Bluetooth: hci3: command tx timeout [ 221.579295][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 221.601466][ T5882] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.615942][ T24] usb 1-1: USB disconnect, device number 2 [ 221.635931][ T5882] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 223.249068][ T12] hsr_slave_0: left promiscuous mode [ 223.277683][ T12] hsr_slave_1: left promiscuous mode [ 223.292482][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.303225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.316550][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.336276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.394352][ T12] veth1_macvtap: left promiscuous mode [ 223.401724][ T12] veth0_macvtap: left promiscuous mode [ 223.410770][ T12] veth1_vlan: left promiscuous mode [ 223.418484][ T12] veth0_vlan: left promiscuous mode [ 223.620614][ T5822] Bluetooth: hci3: command tx timeout [ 223.875356][ T8194] syz.4.683 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.963311][ T8214] trusted_key: syz.3.690 sent an empty control message without MSG_MORE. [ 225.372934][ T30] audit: type=1326 audit(1751144843.447:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.399143][ T30] audit: type=1326 audit(1751144843.467:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.454754][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.506992][ T30] audit: type=1326 audit(1751144843.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.528762][ T30] audit: type=1326 audit(1751144843.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.567040][ T30] audit: type=1326 audit(1751144843.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.600892][ T30] audit: type=1326 audit(1751144843.467:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.630840][ T30] audit: type=1326 audit(1751144843.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d92f2ab19 code=0x7ffc0000 [ 225.654730][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.705720][ T5822] Bluetooth: hci3: command tx timeout [ 225.711522][ T30] audit: type=1326 audit(1751144843.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d92f2ab19 code=0x7ffc0000 [ 225.733280][ T30] audit: type=1326 audit(1751144843.467:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d92f8e929 code=0x7ffc0000 [ 225.865623][ T30] audit: type=1326 audit(1751144843.507:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d92f2ab19 code=0x7ffc0000 [ 225.965677][ T30] audit: type=1326 audit(1751144843.507:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d92f2ab19 code=0x7ffc0000 [ 225.987180][ T8223] cgroup: fork rejected by pids controller in /syz3 [ 226.738225][ T8108] chnl_net:caif_netlink_parms(): no params data found [ 227.052449][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.064770][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.086892][ T8108] bridge_slave_0: entered allmulticast mode [ 227.113887][ T8108] bridge_slave_0: entered promiscuous mode [ 227.129912][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.144310][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.152594][ T8108] bridge_slave_1: entered allmulticast mode [ 227.163884][ T8108] bridge_slave_1: entered promiscuous mode [ 227.324640][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.367456][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.579688][ T8108] team0: Port device team_slave_0 added [ 227.607735][ T8108] team0: Port device team_slave_1 added [ 227.935727][ T5822] Bluetooth: hci3: command tx timeout [ 227.996387][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.011574][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.024368][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.056578][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.070198][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.272169][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.305219][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.459964][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.475424][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.492916][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.582586][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.817741][ T7650] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 228.858064][ T8108] hsr_slave_0: entered promiscuous mode [ 228.864832][ T8108] hsr_slave_1: entered promiscuous mode [ 228.995952][ T7650] usb 10-1: Using ep0 maxpacket: 32 [ 229.007165][ T7650] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.039182][ T7650] usb 10-1: config 0 has no interface number 0 [ 229.059444][ T7650] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.068992][ T7650] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.077624][ T7650] usb 10-1: Product: syz [ 229.082376][ T7650] usb 10-1: Manufacturer: syz [ 229.087205][ T7650] usb 10-1: SerialNumber: syz [ 229.096781][ T7650] usb 10-1: config 0 descriptor?? [ 229.110601][ T7650] smsc95xx v2.0.0 [ 229.262050][ T1332] bridge_slave_1: left promiscuous mode [ 229.270901][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.281235][ T1332] bridge_slave_0: left promiscuous mode [ 229.288718][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.485038][ T1332] team0: Port device geneve0 removed [ 229.516323][ T7650] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 229.531458][ T7650] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.704636][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.718306][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.728134][ T1332] bond0 (unregistering): Released all slaves [ 229.891341][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 230.021773][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.029837][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.038860][ T8254] bridge_slave_0: entered allmulticast mode [ 230.046553][ T8254] bridge_slave_0: entered promiscuous mode [ 230.065253][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.077170][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.084611][ T8254] bridge_slave_1: entered allmulticast mode [ 230.092749][ T8254] bridge_slave_1: entered promiscuous mode [ 230.137907][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.150677][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.175759][ T5138] Bluetooth: hci0: command tx timeout [ 230.221727][ T8254] team0: Port device team_slave_0 added [ 230.247863][ T8254] team0: Port device team_slave_1 added [ 230.305114][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.313899][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.340189][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.362270][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.369775][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.396032][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.463190][ T8108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.488170][ T8254] hsr_slave_0: entered promiscuous mode [ 230.497018][ T8254] hsr_slave_1: entered promiscuous mode [ 230.503692][ T8254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.522135][ T8254] Cannot create hsr debugfs directory [ 230.528404][ T8108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.573228][ T8108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.589159][ T8108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.774018][ T7650] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.809842][ T7650] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 230.830371][ T7650] usb 10-1: USB disconnect, device number 2 [ 230.973928][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.016248][ T8108] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.033230][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.040500][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.055137][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.062414][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.241538][ T8254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.254956][ T8254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.275997][ T8254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.298711][ T8254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.529945][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.763224][ T1332] hsr_slave_0: left promiscuous mode [ 231.775091][ T1332] hsr_slave_1: left promiscuous mode [ 231.792382][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.801353][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.255901][ T5138] Bluetooth: hci0: command tx timeout [ 233.234825][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 233.411666][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 234.092774][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.185232][ T8108] veth0_vlan: entered promiscuous mode [ 234.228534][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.237064][ T8108] veth1_vlan: entered promiscuous mode [ 234.265170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.272523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.308109][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.315313][ T7541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.337136][ T8108] veth0_macvtap: entered promiscuous mode [ 234.343442][ T5138] Bluetooth: hci0: command tx timeout [ 234.364271][ T8108] veth1_macvtap: entered promiscuous mode [ 234.486503][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.512447][ T8254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.561906][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.608562][ T8108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.703039][ T8108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.744570][ T8108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.786007][ T7784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.914285][ T8108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.966486][ T7784] usb 1-1: Using ep0 maxpacket: 16 [ 235.014953][ T7784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.192249][ T7784] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.237991][ T7784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.286528][ T7784] usb 1-1: Product: syz [ 235.290754][ T7784] usb 1-1: Manufacturer: syz [ 235.326164][ T7784] usb 1-1: SerialNumber: syz [ 235.358743][ T7784] usb 1-1: config 0 descriptor?? [ 235.404839][ T7784] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.436072][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 235.437291][ T7784] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 235.497940][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.517521][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.571842][ T7541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.592109][ T7541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.636806][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 235.656688][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.672897][ T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.677384][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.682351][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.742590][ T9] usb 10-1: config 0 descriptor?? [ 235.892561][ T8254] veth0_vlan: entered promiscuous mode [ 235.893172][ T8364] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.907893][ T8254] veth1_vlan: entered promiscuous mode [ 235.976655][ T9] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 235.989092][ T8254] veth0_macvtap: entered promiscuous mode [ 236.020502][ T8254] veth1_macvtap: entered promiscuous mode [ 236.024253][ T7784] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 236.054096][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.074376][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.097448][ T8254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.107062][ T8254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.115930][ T8254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.128495][ T8254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.267191][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.415885][ T5138] Bluetooth: hci0: command tx timeout [ 236.484253][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.561960][ T24] usb 10-1: USB disconnect, device number 3 [ 236.628050][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.661085][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.662084][ T7784] em28xx 1-1:0.0: board has no eeprom [ 236.688796][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.734130][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.743739][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.764688][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.916236][ T7784] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 236.924343][ T7784] em28xx 1-1:0.0: dvb set to bulk mode. [ 236.930205][ T24] em28xx 1-1:0.0: Binding DVB extension [ 236.962490][ T7784] usb 1-1: USB disconnect, device number 3 [ 236.994047][ T24] em28xx 1-1:0.0: Registering input extension [ 237.006458][ T7784] em28xx 1-1:0.0: Disconnecting em28xx [ 237.013331][ T7784] em28xx 1-1:0.0: Closing input extension [ 237.036226][ T7784] em28xx 1-1:0.0: Freeing device [ 237.200513][ T13] bridge_slave_1: left allmulticast mode [ 237.223545][ T13] bridge_slave_1: left promiscuous mode [ 237.235260][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.285236][ T13] bridge_slave_0: left allmulticast mode [ 237.306814][ T13] bridge_slave_0: left promiscuous mode [ 237.318598][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.328946][ T8378] netlink: 14 bytes leftover after parsing attributes in process `syz.3.698'. [ 237.347572][ T8379] syz.9.733 uses obsolete (PF_INET,SOCK_PACKET) [ 237.804299][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.815040][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.825456][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.833586][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.849240][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.021822][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.032845][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.042938][ T13] bond0 (unregistering): Released all slaves [ 238.058508][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 238.068890][ T8375] tipc: Started in network mode [ 238.073810][ T8375] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 238.087873][ T8375] tipc: Enabled bearer , priority 10 [ 238.142379][ T8378] tipc: Resetting bearer [ 238.161500][ T8378] tipc: Disabling bearer [ 238.317328][ T5138] Bluetooth: hci4: Unknown advertising packet type: 0x19 [ 238.317388][ T5138] Bluetooth: hci4: Unknown advertising packet type: 0x1f [ 238.765728][ T7784] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 238.898007][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.9.743'. [ 239.012898][ T7784] usb 4-1: config 0 has no interfaces? [ 239.048694][ T7784] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 239.058304][ T13] hsr_slave_0: left promiscuous mode [ 239.065799][ T7784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.085134][ T7784] usb 4-1: config 0 descriptor?? [ 239.094318][ T13] hsr_slave_1: left promiscuous mode [ 239.133152][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.158829][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.204636][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.223877][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.255448][ T13] veth1_macvtap: left promiscuous mode [ 239.283098][ T13] veth0_macvtap: left promiscuous mode [ 239.289467][ T13] veth1_vlan: left promiscuous mode [ 239.295238][ T13] veth0_vlan: left promiscuous mode [ 239.332997][ T5822] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 239.891309][ T13] team0 (unregistering): Port device team_slave_1 removed [ 239.937545][ T5822] Bluetooth: hci3: command tx timeout [ 239.951563][ T13] team0 (unregistering): Port device team_slave_0 removed [ 240.697903][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 241.128448][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.167404][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.217659][ T8389] bridge_slave_0: entered allmulticast mode [ 241.260013][ T8389] bridge_slave_0: entered promiscuous mode [ 241.313047][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.339236][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.381330][ T8389] bridge_slave_1: entered allmulticast mode [ 241.426048][ T8389] bridge_slave_1: entered promiscuous mode [ 241.437586][ T10] usb 4-1: USB disconnect, device number 11 [ 241.658896][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.714159][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.932746][ T8389] team0: Port device team_slave_0 added [ 241.970032][ T8389] team0: Port device team_slave_1 added [ 242.017362][ T5822] Bluetooth: hci3: command 0x041b tx timeout [ 242.036947][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.761'. [ 242.047945][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.761'. [ 242.088353][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.100689][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.105754][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.126786][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.128012][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.134611][ T7799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 242.142915][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.225390][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.251676][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.317518][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.345938][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 242.365705][ T10] usb 5-1: config 0 has no interfaces? [ 242.371387][ T7799] usb 1-1: Using ep0 maxpacket: 16 [ 242.393976][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 242.428614][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.442051][ T7799] usb 1-1: config 0 has no interfaces? [ 242.447922][ T7799] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 242.470479][ T10] usb 5-1: Product: syz [ 242.480751][ T10] usb 5-1: Manufacturer: syz [ 242.496124][ T7799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.504361][ T10] usb 5-1: SerialNumber: syz [ 242.512043][ T7799] usb 1-1: config 0 descriptor?? [ 242.539302][ T10] usb 5-1: config 0 descriptor?? [ 242.643505][ T8389] hsr_slave_0: entered promiscuous mode [ 242.662635][ T8389] hsr_slave_1: entered promiscuous mode [ 243.579798][ T10] usb 1-1: USB disconnect, device number 4 [ 243.672824][ T7791] usb 5-1: USB disconnect, device number 13 [ 244.096853][ T5822] Bluetooth: hci3: command 0x041b tx timeout [ 244.545252][ T8389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.581402][ T8389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.894540][ T8504] cgroup: fork rejected by pids controller in /syz0 [ 245.032628][ T8389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.073944][ T8389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.428900][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.9.781'. [ 245.548948][ T8525] 8021q: adding VLAN 0 to HW filter on device team1 [ 246.176228][ T5822] Bluetooth: hci3: command 0x041b tx timeout [ 246.257273][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.415351][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.517549][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.597614][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.644053][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.651275][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.793226][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.877362][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.884552][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.010926][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.280161][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.290744][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.300391][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.309623][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.341532][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.959218][ T49] bridge_slave_1: left allmulticast mode [ 247.964915][ T49] bridge_slave_1: left promiscuous mode [ 248.002231][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.063449][ T49] bridge_slave_0: left allmulticast mode [ 248.102603][ T49] bridge_slave_0: left promiscuous mode [ 248.118850][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.255669][ T5822] Bluetooth: hci3: command 0x041b tx timeout [ 248.519710][ T8575] kvm: pic: non byte write [ 248.966142][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.145583][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.175473][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 354.182539][ C1] rcu: 0-...!: (0 ticks this GP) idle=3c7c/1/0x4000000000000000 softirq=46938/46938 fqs=5 [ 354.193554][ C1] rcu: (detected by 1, t=10502 jiffies, g=38345, q=533 ncpus=2) [ 354.201304][ C1] Sending NMI from CPU 1 to CPUs 0: [ 354.201352][ C0] NMI backtrace for cpu 0 [ 354.201383][ C0] CPU: 0 UID: 0 PID: 8577 Comm: syz.9.795 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 354.201402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.201412][ C0] RIP: 0010:advance_sched+0x7db/0xc90 [ 354.201438][ C0] Code: 39 fe 4c 8b 6c 24 18 0f 8e be 00 00 00 e8 dd d8 40 f8 4c 8b 64 24 38 4c 8b 3c 24 e9 51 01 00 00 e8 ca d8 40 f8 4c 8b 64 24 38 42 01 00 00 e8 bb d8 40 f8 4c 8b 6c 24 18 e9 96 00 00 00 e8 cc [ 354.201451][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00000006 [ 354.201466][ C0] RAX: ffffffff897f74a6 RBX: ffff88802fc07928 RCX: ffff88802f265a00 [ 354.201478][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.201487][ C0] RBP: ffff88802fc07d40 R08: 0000000000000003 R09: 0000000000000004 [ 354.201497][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: ffff888054990340 [ 354.201509][ C0] R13: ffff888054990000 R14: ffff88802fc07d40 R15: ffff88802fc07800 [ 354.201520][ C0] FS: 000055556da6e500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 354.201533][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.201543][ C0] CR2: 0000001b2f817ff8 CR3: 00000000332ce000 CR4: 00000000003526f0 [ 354.201556][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.201565][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.201575][ C0] Call Trace: [ 354.201586][ C0] [ 354.201603][ C0] ? __pfx_advance_sched+0x10/0x10 [ 354.201620][ C0] __hrtimer_run_queues+0x529/0xc60 [ 354.201650][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 354.201667][ C0] ? read_tsc+0x9/0x20 [ 354.201687][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 354.201719][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 354.201740][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 354.201760][ C0] [ 354.201765][ C0] [ 354.201771][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.201787][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 354.201806][ C0] Code: 74 05 e8 7b 74 65 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 5d 2e f6 65 8b 05 ec 5a 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 354.201818][ C0] RSP: 0018:ffffc90003f7fb60 EFLAGS: 00000206 [ 354.201831][ C0] RAX: 3ac36faab4b9ef00 RBX: 0000000000000a02 RCX: 3ac36faab4b9ef00 [ 354.201842][ C0] RDX: 0000000000000000 RSI: ffffffff8d96e760 RDI: 0000000000000001 [ 354.201852][ C0] RBP: ffffc90003f7fbf0 R08: ffffffff8f9fd9f7 R09: 1ffffffff1f3fb3e [ 354.201863][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fb3f R12: dffffc0000000000 [ 354.201874][ C0] R13: ffffc90003f7fd80 R14: ffff8880b8627ac0 R15: 1ffff920007eff6c [ 354.201895][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.201919][ C0] do_nanosleep+0x191/0x600 [ 354.201937][ C0] ? do_nanosleep+0x7f/0x600 [ 354.201952][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 354.201969][ C0] ? __hrtimer_setup+0x187/0x210 [ 354.201986][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 354.202007][ C0] hrtimer_nanosleep+0x169/0x360 [ 354.202028][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 354.202047][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 354.202066][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 354.202088][ C0] __se_sys_clock_nanosleep+0x2ee/0x380 [ 354.202107][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 354.202127][ C0] ? do_syscall_64+0xbe/0x3b0 [ 354.202154][ C0] do_syscall_64+0xfa/0x3b0 [ 354.202171][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.202189][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.202202][ C0] ? clear_bhb_loop+0x60/0xb0 [ 354.202219][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.202232][ C0] RIP: 0033:0x7f50ff3c11e5 [ 354.202251][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 354.202263][ C0] RSP: 002b:00007ffeb5543330 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 354.202279][ C0] RAX: ffffffffffffffda RBX: 00007f50ff5b5fa0 RCX: 00007f50ff3c11e5 [ 354.202289][ C0] RDX: 00007ffeb5543370 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.202299][ C0] RBP: 00007f50ff5b7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 354.202309][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003ce52 [ 354.202318][ C0] R13: 00007ffeb5543490 R14: ffffffffffffffff R15: 00007ffeb55434b0 [ 354.202337][ C0] [ 354.203338][ C1] rcu: rcu_preempt kthread starved for 10492 jiffies! g38345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 354.652275][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 354.662247][ C1] rcu: RCU grace-period kthread stack dump: [ 354.668133][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 354.681639][ C1] Call Trace: [ 354.684920][ C1] [ 354.687870][ C1] __schedule+0x16a2/0x4cb0 [ 354.692407][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 354.697626][ C1] ? schedule+0x165/0x360 [ 354.701966][ C1] ? __lock_acquire+0xab9/0xd20 [ 354.706830][ C1] ? __pfx___schedule+0x10/0x10 [ 354.711728][ C1] ? schedule+0x91/0x360 [ 354.715981][ C1] schedule+0x165/0x360 [ 354.720148][ C1] schedule_timeout+0x12b/0x270 [ 354.725060][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 354.730960][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.736871][ C1] ? __pfx_process_timeout+0x10/0x10 [ 354.742175][ C1] ? prepare_to_swait_event+0x341/0x380 [ 354.747777][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 354.752655][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 354.758824][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 354.764125][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 354.769340][ C1] ? finish_swait+0xcd/0x1f0 [ 354.773947][ C1] rcu_gp_kthread+0x99/0x390 [ 354.778549][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 354.783850][ C1] ? __kthread_parkme+0x7b/0x200 [ 354.788802][ C1] ? __kthread_parkme+0x1a1/0x200 [ 354.793888][ C1] kthread+0x70e/0x8a0 [ 354.798061][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 354.803268][ C1] ? __pfx_kthread+0x10/0x10 [ 354.807866][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.813072][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.818300][ C1] ? __pfx_kthread+0x10/0x10 [ 354.822898][ C1] ret_from_fork+0x3fc/0x770 [ 354.827500][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 354.832627][ C1] ? __switch_to_asm+0x39/0x70 [ 354.837399][ C1] ? __switch_to_asm+0x33/0x70 [ 354.842163][ C1] ? __pfx_kthread+0x10/0x10 [ 354.846759][ C1] ret_from_fork_asm+0x1a/0x30 [ 354.851546][ C1] [ 354.854569][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 354.860894][ C1] CPU: 1 UID: 0 PID: 8592 Comm: modprobe Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 354.872722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.882793][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 354.889493][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 354.909115][ C1] RSP: 0018:ffffc90003e275a0 EFLAGS: 00000293 [ 354.915282][ C1] RAX: ffffffff81b4d830 RBX: ffff8880b873b040 RCX: ffff888030870000 [ 354.923349][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 354.931341][ C1] RBP: ffffc90003e27700 R08: ffffffff8f9fd9f7 R09: 1ffffffff1f3fb3e [ 354.939321][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb3f R12: 1ffff110170c835d [ 354.947300][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 354.955278][ C1] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 354.964233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.970840][ C1] CR2: 00007fd7fca63e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 354.978818][ C1] DR0: 0000000000000000 DR1: 0000000000010000 DR2: 0000000000000000 [ 354.986792][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 354.994765][ C1] Call Trace: [ 354.998054][ C1] [ 355.001012][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 355.007359][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.012135][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 355.017346][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.022214][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 355.027417][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 355.032545][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 355.037663][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 355.042999][ C1] ? free_pgd_range+0x144b/0x14c0 [ 355.048037][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 355.053600][ C1] tlb_flush_mmu+0x1a7/0x680 [ 355.058209][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 355.062809][ C1] ? free_pgd_range+0x144b/0x14c0 [ 355.067846][ C1] free_ldt_pgtables+0x17b/0x320 [ 355.072888][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 355.078377][ C1] ? down_read+0x1ad/0x2e0 [ 355.082803][ C1] exit_mmap+0x17c/0xb50 [ 355.087077][ C1] ? uprobe_clear_state+0x20f/0x290 [ 355.092296][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 355.097077][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 355.102742][ C1] ? __pfx_exit_aio+0x10/0x10 [ 355.107437][ C1] ? uprobe_clear_state+0x274/0x290 [ 355.112642][ C1] ? mm_update_next_owner+0xa7/0x870 [ 355.117936][ C1] __mmput+0x118/0x420 [ 355.122037][ C1] exit_mm+0x1da/0x2c0 [ 355.126142][ C1] ? __pfx_exit_mm+0x10/0x10 [ 355.130747][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 355.136246][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.141076][ C1] do_exit+0x648/0x22e0 [ 355.145273][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.150666][ C1] ? __pfx_do_exit+0x10/0x10 [ 355.155275][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.160482][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.165692][ C1] do_group_exit+0x21c/0x2d0 [ 355.170385][ C1] __x64_sys_exit_group+0x3f/0x40 [ 355.175418][ C1] x64_sys_call+0x21ba/0x21c0 [ 355.180187][ C1] do_syscall_64+0xfa/0x3b0 [ 355.184699][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.189924][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.196004][ C1] ? clear_bhb_loop+0x60/0xb0 [ 355.200693][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.206604][ C1] RIP: 0033:0x7fd7fcbc26c5 [ 355.211025][ C1] Code: Unable to access opcode bytes at 0x7fd7fcbc269b. [ 355.218049][ C1] RSP: 002b:00007ffe7a105a98 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 355.226471][ C1] RAX: ffffffffffffffda RBX: 00007fd7fccc3fe8 RCX: 00007fd7fcbc26c5 [ 355.234445][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 355.242424][ C1] RBP: 0000000000000001 R08: 00007ffe7a105a28 R09: 0000000000000000 [ 355.250491][ C1] R10: 00007ffe7a1058c0 R11: 0000000000000202 R12: 0000000000000000 [ 355.258513][ C1] R13: 0000000000000001 R14: 00007fd7fccc2680 R15: 00007fd7fccc4000 [ 355.266614][ C1]