last executing test programs: 2m37.20398785s ago: executing program 4 (id=417): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@block={'block', 0x3d, 0x800}}, {@showassoc}, {@map_normal}, {@check_relaxed}, {@overriderock}, {@hide}, {@utf8}, {@check_relaxed}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2e8}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@sbsector}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 2m36.866510631s ago: executing program 4 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xff}, 0x14) 2m36.342943719s ago: executing program 4 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 2m36.061448628s ago: executing program 4 (id=428): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r2, &(0x7f0000004c40)={0x2020}, 0x2020) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) umount2(0x0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m35.612278184s ago: executing program 4 (id=432): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m35.201155748s ago: executing program 4 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70b925, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 2m34.83578014s ago: executing program 32 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70b925, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 3.966641335s ago: executing program 5 (id=1364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 3.801857901s ago: executing program 5 (id=1368): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xfffffff9}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xaa}}], 0x30, 0x4048800}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, 0x0, 0x0, 0xe, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.731510773s ago: executing program 0 (id=1369): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11d04b8, 0x0, 0x85, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x4410, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$bind(0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x810001, 0x0) 3.594355118s ago: executing program 2 (id=1371): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.428048443s ago: executing program 5 (id=1373): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x79374f5eb7667e9f) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.408733424s ago: executing program 0 (id=1374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f0000000240)=':]\x00', 0x10241, 0x0, 0xfff7fffe, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24080010}, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.271872549s ago: executing program 3 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.769187286s ago: executing program 2 (id=1378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 2.222673414s ago: executing program 0 (id=1379): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x8, 0x7, 0x1, 0x40, 0x8, 0x7, 0x401, {0x0, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x39de}}, 0x4, 0x8, 0x8, 0x7, 0x6}}, &(0x7f00000000c0)=0xb0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.176162616s ago: executing program 5 (id=1380): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 2.159913477s ago: executing program 3 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x214001, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x20) 2.05604022s ago: executing program 1 (id=1383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.039350771s ago: executing program 1 (id=1384): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) umount2(&(0x7f0000000500)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x7616, 0x6438207, 0x0, 0xffff, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.981096133s ago: executing program 2 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b6, 0x0, 0x25}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000cc0)={0x1, [{0x2, 0x0, 0x76, 0x0}, {0x1, 0x10, 0x4, &(0x7f0000000140)="93d0"}, {0x0, 0x0, 0x7f, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xffff6f56, 0x0}, {0x3, 0x0, 0xffffc5bb, 0x0}, {0x0, 0x0, 0x104, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x2ff, 0x0}, {0x3, 0x0, 0x4ed, 0x0}, {0x0, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xb, 0x0}, {0x2, 0x0, 0x0, 0x0}]}) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000b6b000/0x400000)=nil) memfd_create(&(0x7f0000000280)='\x02A\x9c\xc5U\x1dp\x0e\x13\xc9r\xb7\x1b\x04\'\xc2\aWz\xe4\x01\xd5u\x02\xeb\xd5\x9f\xfd\a\x9d\x9c\x80Nr\xd4\x1b( \xe9\xa2\x9a\xe0\xd3o%\xa2S\aQ\x99\xec7\xe5\x89A\xc4\x06\x9b\xce\xb1\xa5\xe4\x94\xf9\xe8\xa6\x81\xef\xcf\xcf\x87\xb2p\xf1{/\x04\'\x95sS\xae\t\xe1{\b?~\xcb\xa1\xa0\x94\x96\xc0}\xeau\xf6+\xfd\xfe\x93^~1\x0e\x10\xf43\xc7\xca\x88\xfc!n\x10\x81\xf3\x89s\xb7Y\x12=0p\xe8\xe6+k\xce\x0eVu\x80u\xe7\x12@*\b\xa5\f\x9e}\xda\xf7\x9d\x11\x02\xd2\x9eY{\x94p0\x06F\xdcC\x02\v\xe1\x84\xdd\xcd\x92\x16tj\xf6\x19\vg_\xb8\xb7%U\xca\xbe\x1al\x96\xb8%4\vR\xaa\xbb\xf8\x9d\xda\xfa6\xffhE\xdc\'\x0es\x8bs\xf5D\n\x14\xde\xc6\xfe\r\x12IH\x8f5F\x90B\xfeZ<\xe5\xcaw\x18\r\xb6QF\x83\n\x86\xd5\xf7\xf7\xcdW\xd7>\x17\xd7\xd9\xebh]\x89_D\x00i\x86\x9e\xe1Z\xe2F\xf6\xef\xfc`\x9c\xfe_\x8e\f\xb1\xe9\xda|u\xf6\xd2\x9b\xd2\xb1M\xc3U\x97\x90\xc9\x94\x85\x83\x81\xfd1o\xea\xfbN\b2\xb7\xe8\xe6\aLZ\x99\xfb)\x1e\x8c-\xd0\x89\xdf\xdf\xff\\_\xfem9\x00\xb9\x14\x98\x9f|\xef\x97\xa6@I2y\x91\xb9\xac\xe7\xf5\xc9\xe16\xee\xca\x12=\x1c\x90a\x0fi ~\xd1\xe5\xb7\x86\xdf\xa9\xe9|y\x98T0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x280cc02, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 1.420246091s ago: executing program 1 (id=1392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.413744042s ago: executing program 2 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.352980474s ago: executing program 0 (id=1394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.302594666s ago: executing program 3 (id=1395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 1.075153073s ago: executing program 1 (id=1396): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 322.527369ms ago: executing program 3 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x214001, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x20) 208.071383ms ago: executing program 5 (id=1398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b6, 0x0, 0x25}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000cc0)={0x1, [{0x2, 0x0, 0x76, 0x0}, {0x1, 0x10, 0x4, &(0x7f0000000140)="93d0"}, {0x0, 0x0, 0x7f, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xffff6f56, 0x0}, {0x3, 0x0, 0xffffc5bb, 0x0}, {0x0, 0x0, 0x104, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x2ff, 0x0}, {0x3, 0x0, 0x4ed, 0x0}, {0x0, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xb, 0x0}, {0x2, 0x0, 0x0, 0x0}]}) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000b6b000/0x400000)=nil) memfd_create(&(0x7f0000000280)='\x02A\x9c\xc5U\x1dp\x0e\x13\xc9r\xb7\x1b\x04\'\xc2\aWz\xe4\x01\xd5u\x02\xeb\xd5\x9f\xfd\a\x9d\x9c\x80Nr\xd4\x1b( \xe9\xa2\x9a\xe0\xd3o%\xa2S\aQ\x99\xec7\xe5\x89A\xc4\x06\x9b\xce\xb1\xa5\xe4\x94\xf9\xe8\xa6\x81\xef\xcf\xcf\x87\xb2p\xf1{/\x04\'\x95sS\xae\t\xe1{\b?~\xcb\xa1\xa0\x94\x96\xc0}\xeau\xf6+\xfd\xfe\x93^~1\x0e\x10\xf43\xc7\xca\x88\xfc!n\x10\x81\xf3\x89s\xb7Y\x12=0p\xe8\xe6+k\xce\x0eVu\x80u\xe7\x12@*\b\xa5\f\x9e}\xda\xf7\x9d\x11\x02\xd2\x9eY{\x94p0\x06F\xdcC\x02\v\xe1\x84\xdd\xcd\x92\x16tj\xf6\x19\vg_\xb8\xb7%U\xca\xbe\x1al\x96\xb8%4\vR\xaa\xbb\xf8\x9d\xda\xfa6\xffhE\xdc\'\x0es\x8bs\xf5D\n\x14\xde\xc6\xfe\r\x12IH\x8f5F\x90B\xfeZ<\xe5\xcaw\x18\r\xb6QF\x83\n\x86\xd5\xf7\xf7\xcdW\xd7>\x17\xd7\xd9\xebh]\x89_D\x00i\x86\x9e\xe1Z\xe2F\xf6\xef\xfc`\x9c\xfe_\x8e\f\xb1\xe9\xda|u\xf6\xd2\x9b\xd2\xb1M\xc3U\x97\x90\xc9\x94\x85\x83\x81\xfd1o\xea\xfbN\b2\xb7\xe8\xe6\aLZ\x99\xfb)\x1e\x8c-\xd0\x89\xdf\xdf\xff\\_\xfem9\x00\xb9\x14\x98\x9f|\xef\x97\xa6@I2y\x91\xb9\xac\xe7\xf5\xc9\xe16\xee\xca\x12=\x1c\x90a\x0fi ~\xd1\xe5\xb7\x86\xdf\xa9\xe9|y\x98T 1 [ 74.617478][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.626597][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.630372][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.635254][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.642958][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.655975][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.659567][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.666803][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.672627][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.679428][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.687331][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.692651][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.698825][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.706392][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.720545][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.727469][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.728757][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.737155][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.743188][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.756637][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.759529][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.765549][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.772105][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.779259][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.787100][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.793185][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.800489][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.815378][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.874500][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.262666][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 75.371639][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 75.415511][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 75.469663][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 75.535635][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 75.562012][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.570088][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.578835][ T4278] device bridge_slave_0 entered promiscuous mode [ 75.623500][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.634066][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.642178][ T4278] device bridge_slave_1 entered promiscuous mode [ 75.683732][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.691140][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.699902][ T4279] device bridge_slave_0 entered promiscuous mode [ 75.731966][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.741274][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.749821][ T4279] device bridge_slave_1 entered promiscuous mode [ 75.782239][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.795071][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.822154][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.829608][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.838538][ T4270] device bridge_slave_0 entered promiscuous mode [ 75.847925][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.855048][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.866830][ T4269] device bridge_slave_0 entered promiscuous mode [ 75.883314][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.890639][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.902244][ T4269] device bridge_slave_1 entered promiscuous mode [ 75.917216][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.929590][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.939134][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.949319][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.957448][ T4270] device bridge_slave_1 entered promiscuous mode [ 76.006673][ T4278] team0: Port device team_slave_0 added [ 76.030849][ T4279] team0: Port device team_slave_0 added [ 76.047769][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.054892][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.064235][ T4271] device bridge_slave_0 entered promiscuous mode [ 76.073995][ T4278] team0: Port device team_slave_1 added [ 76.082425][ T4279] team0: Port device team_slave_1 added [ 76.090734][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.102225][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.115194][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.123002][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.131557][ T4271] device bridge_slave_1 entered promiscuous mode [ 76.153012][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.171837][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.210485][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.218022][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.244970][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.258921][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.265949][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.292425][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.325126][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.333335][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.359470][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.386551][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.397958][ T4269] team0: Port device team_slave_0 added [ 76.405651][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.415411][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.423341][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.449736][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.464264][ T4270] team0: Port device team_slave_0 added [ 76.472843][ T4270] team0: Port device team_slave_1 added [ 76.480374][ T4269] team0: Port device team_slave_1 added [ 76.528856][ T4271] team0: Port device team_slave_0 added [ 76.544772][ T4271] team0: Port device team_slave_1 added [ 76.572309][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.580815][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.607138][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.626361][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.633367][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.660119][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.672436][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.679571][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.705520][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.723376][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.733193][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.759565][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.776019][ T4279] device hsr_slave_0 entered promiscuous mode [ 76.783406][ T4279] device hsr_slave_1 entered promiscuous mode [ 76.799395][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.808644][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.835073][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.859423][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.866514][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.893699][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 76.900058][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 76.907023][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.950929][ T4278] device hsr_slave_0 entered promiscuous mode [ 76.958166][ T4278] device hsr_slave_1 entered promiscuous mode [ 76.965019][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.972971][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 76.973128][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 76.977054][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 76.984248][ T4278] Cannot create hsr debugfs directory [ 77.065400][ T4270] device hsr_slave_0 entered promiscuous mode [ 77.072230][ T4270] device hsr_slave_1 entered promiscuous mode [ 77.079426][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.087128][ T4270] Cannot create hsr debugfs directory [ 77.117739][ T4269] device hsr_slave_0 entered promiscuous mode [ 77.124743][ T4269] device hsr_slave_1 entered promiscuous mode [ 77.131922][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.140084][ T4269] Cannot create hsr debugfs directory [ 77.165482][ T4271] device hsr_slave_0 entered promiscuous mode [ 77.172307][ T4271] device hsr_slave_1 entered promiscuous mode [ 77.179587][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.187313][ T4271] Cannot create hsr debugfs directory [ 77.540201][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.558562][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.578384][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.588623][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.619668][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.650494][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.660862][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.681328][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.719161][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.753445][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.781039][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.794949][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.853661][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.882841][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.905724][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.917947][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.980421][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.993678][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.004206][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.024092][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.077958][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.088535][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.145426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.155259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.174847][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.197500][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.207182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.220262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.237553][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.250219][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.260155][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.267543][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.292999][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.302131][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.311487][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.323216][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.330575][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.360767][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.368517][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.379604][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.391376][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.400973][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.408164][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.416583][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.425471][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.435168][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.443966][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.451150][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.468793][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.501030][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.514914][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.525016][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.534338][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.543951][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.553307][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.562512][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.601677][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.627801][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.636003][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.646747][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.655368][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.665632][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.673998][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.682721][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.691787][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.700287][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.709375][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.718505][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.727914][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.737646][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.747445][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.754644][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.763059][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.773973][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.783122][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.790567][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.799368][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.809386][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.821579][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.831142][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.853586][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.865268][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.889384][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.902662][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.911271][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.924362][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.934820][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.946051][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.956950][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.965694][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.973845][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 78.973993][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 78.988858][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.005165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.014812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.024189][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.031386][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.046716][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 79.052813][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 79.059490][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 79.067282][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.076796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.101244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.112690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.123062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.149055][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.158338][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.167159][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.174634][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.183006][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.207029][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.215221][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.238829][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.257708][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.282070][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.311298][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.324513][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.348547][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.367578][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.386907][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.406689][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.418887][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.432363][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.441894][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.464183][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.483906][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.503200][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.553919][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.565709][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.587441][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.596678][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.603920][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.646668][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.687275][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.707152][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.718528][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.728467][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.740592][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.750557][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.757846][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.765975][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.777582][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.828199][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.843303][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.866925][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.887197][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.906911][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.923349][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.953088][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.966551][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.001875][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.021450][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.037798][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.065091][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.092510][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.111615][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.126386][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.135037][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.147448][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.155123][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.167828][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.256974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.272317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.322014][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.367654][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.395682][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.421910][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.441993][ T4278] device veth0_vlan entered promiscuous mode [ 80.477449][ T4278] device veth1_vlan entered promiscuous mode [ 80.549044][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.569042][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.607753][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.619666][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.666038][ T4278] device veth0_macvtap entered promiscuous mode [ 80.701485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.718014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.725693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.753013][ T4278] device veth1_macvtap entered promiscuous mode [ 80.774011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.800006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.816415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.828725][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.847485][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.861294][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.874556][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.897835][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.940784][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.961852][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.002485][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.046590][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 81.052680][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 81.078466][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093941][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.105965][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.121984][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.131567][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 81.137981][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 81.144035][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 81.155104][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.166965][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.182121][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.191966][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.210153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.219139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.248483][ T4270] device veth0_vlan entered promiscuous mode [ 81.273334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.282328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.300693][ T4270] device veth1_vlan entered promiscuous mode [ 81.313179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.322494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.332255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.362214][ T4269] device veth0_vlan entered promiscuous mode [ 81.371502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.380143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.389367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.397177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.409851][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.451584][ T4269] device veth1_vlan entered promiscuous mode [ 81.475295][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.490421][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.547585][ T4279] device veth0_vlan entered promiscuous mode [ 81.580588][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.589918][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.604438][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.613905][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.622301][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.631406][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.647009][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.660652][ T4279] device veth1_vlan entered promiscuous mode [ 81.666803][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.676643][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.696691][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.715878][ T4269] device veth0_macvtap entered promiscuous mode [ 81.732197][ T4270] device veth0_macvtap entered promiscuous mode [ 81.764261][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.773823][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.783403][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.792669][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.806722][ T4269] device veth1_macvtap entered promiscuous mode [ 81.816893][ T4270] device veth1_macvtap entered promiscuous mode [ 81.839303][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.851339][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.860678][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.869969][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.879837][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.905712][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.918963][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.933464][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.955600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.964025][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.973917][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.982489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.995431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.004857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.015287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.029966][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.040977][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.053327][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.066740][ T4279] device veth0_macvtap entered promiscuous mode [ 82.077630][ T4279] device veth1_macvtap entered promiscuous mode [ 82.095687][ T4271] device veth0_vlan entered promiscuous mode [ 82.107634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.122059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.132011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.146757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.155924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.172983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.183593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.194855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.207353][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.216885][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.225639][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.234803][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262228][ T4271] device veth1_vlan entered promiscuous mode [ 82.278024][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.292112][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.303245][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.314759][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.326728][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.346345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.354727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.369897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.385446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.413588][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.432795][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.443983][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.460947][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.473610][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.510720][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.523322][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.571532][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.596268][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.609927][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.624729][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.648667][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.667298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.686912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.705243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.714351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.735203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.760368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.773758][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.785532][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.795741][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.811900][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.823283][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.858809][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.874194][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.891143][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.901601][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911091][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.922640][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.937496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.947260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.975830][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995173][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.006231][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.015838][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056623][ T4271] device veth0_macvtap entered promiscuous mode [ 83.099675][ T4363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.121657][ T4271] device veth1_macvtap entered promiscuous mode [ 83.127352][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 83.134174][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 83.206371][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 83.212743][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 83.218985][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 83.278684][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.300670][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.319834][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.333671][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.346365][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.370687][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.389977][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.400801][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.410930][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.421689][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.433723][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.459569][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.478218][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.493920][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.502117][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.515940][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.539049][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.550847][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.562002][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.572600][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.582656][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.600375][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.610588][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.633863][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.652330][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.662027][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.672991][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.687146][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.704496][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.717201][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.730606][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.739803][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.749126][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.758196][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793847][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.816801][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.852406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.908975][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.931751][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.958039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.971942][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.990129][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.047579][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.097912][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143597][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.148889][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.194077][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.218133][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281155][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.408009][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.456310][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.490275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.125104][ T4398] sctp: [Deprecated]: syz.1.16 (pid 4398) Use of int in max_burst socket option. [ 85.125104][ T4398] Use struct sctp_assoc_value instead [ 85.618958][ T4412] process 'syz.2.18' launched './file0' with NULL argv: empty string added [ 85.921013][ T26] audit: type=1326 audit(1774687864.278:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 85.945603][ T4421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 85.962552][ T4421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 85.995878][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.013180][ T26] audit: type=1326 audit(1774687864.338:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.046007][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.102940][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.116195][ T26] audit: type=1326 audit(1774687864.338:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.186530][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.222927][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.242530][ T26] audit: type=1326 audit(1774687864.338:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.286793][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.306413][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.331550][ T26] audit: type=1326 audit(1774687864.338:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.365528][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 86.442112][ T26] audit: type=1326 audit(1774687864.338:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.487872][ T26] audit: type=1326 audit(1774687864.338:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.572901][ T26] audit: type=1326 audit(1774687864.338:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff22359c799 code=0x7ffc0000 [ 86.888092][ T126] cfg80211: failed to load regulatory.db [ 87.207048][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.421559][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.439125][ T22] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.468523][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.523961][ T22] usb 5-1: config 0 descriptor?? [ 87.965025][ T22] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 88.017161][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 88.211281][ T22] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 88.405836][ T22] usb 5-1: USB disconnect, device number 2 [ 88.685104][ T4452] fido_id[4452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 89.335909][ T26] audit: type=1326 audit(1774687867.688:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.4.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4d9c799 code=0x0 [ 91.078223][ T4491] device syzkaller0 entered promiscuous mode [ 91.313072][ T4499] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.467474][ T129] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.696228][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 92.734799][ T129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.764352][ T129] usb 3-1: config 7 has an invalid interface number: 118 but max is 0 [ 92.784299][ T129] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 92.812262][ T129] usb 3-1: config 7 has no interface number 0 [ 92.842129][ T129] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 92.886671][ T129] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 92.920719][ T129] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 92.952041][ T129] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 92.991120][ T129] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 93.008340][ T129] usb 3-1: config 7 interface 118 has no altsetting 0 [ 93.076604][ T129] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 93.105466][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.131075][ T129] usb 3-1: Product: syz [ 93.139880][ T129] usb 3-1: Manufacturer: syz [ 93.148392][ T129] usb 3-1: SerialNumber: syz [ 93.168546][ T4511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.245757][ T4511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.522949][ T4511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.540981][ T4511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.553966][ T4511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.566993][ T4511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.608820][ T129] usb 3-1: BOGUS urb xfer, pipe 1 != type 3 [ 93.618592][ T129] (null): radio-mr800 - initialization failed [ 93.635329][ T129] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 93.646035][ T129] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 93.685956][ T129] usb 3-1: USB disconnect, device number 2 [ 97.052659][ T4585] fuse: Bad value for 'fd' [ 97.554339][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x6000003d [ 97.577850][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x6000003c [ 97.600021][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x600000e0 [ 97.671310][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x60000078 [ 97.701288][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x60000077 [ 97.715015][ T4596] kvm [4594]: vcpu0, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x60000025 [ 98.542660][ T26] audit: type=1326 audit(1774687876.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3f4d9c799 code=0x0 [ 99.105802][ T4622] fuse: Unknown parameter '0x0000000000000004' [ 102.244252][ T4687] kvm: emulating exchange as write [ 102.255570][ T4691] fuse: Unknown parameter '0x0000000000000003' [ 103.409186][ T4718] __nla_validate_parse: 27 callbacks suppressed [ 103.409207][ T4718] netlink: 2 bytes leftover after parsing attributes in process `syz.3.126'. [ 103.586540][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.652318][ T4728] fuse: Unknown parameter '0x0000000000000004' [ 103.804152][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.852190][ T4316] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.875594][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.934952][ T4316] usb 5-1: config 0 descriptor?? [ 104.373159][ T4316] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 104.401144][ T4316] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 104.512979][ T4316] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 104.812870][ T4318] usb 5-1: USB disconnect, device number 3 [ 105.002955][ T4759] fido_id[4759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.203181][ T4771] fuse: Unknown parameter '0x0000000000000004' [ 105.414829][ T4773] device syzkaller0 entered promiscuous mode [ 105.635480][ T4778] fuse: Unknown parameter '0x0000000000000003' [ 107.591095][ T4849] ======================================================= [ 107.591095][ T4849] WARNING: The mand mount option has been deprecated and [ 107.591095][ T4849] and is ignored by this kernel. Remove the mand [ 107.591095][ T4849] option from the mount to silence this warning. [ 107.591095][ T4849] ======================================================= [ 107.632329][ T4849] 9pnet_fd: Insufficient options for proto=fd [ 108.846115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.856128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.866149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 111.382642][ T4908] kvm: pic: non byte write [ 113.153834][ T4943] Disabled LAPIC found during irq injection [ 114.452423][ T26] audit: type=1326 audit(1774687892.808:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.1.203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f286219c799 code=0x0 [ 114.851530][ T4997] kvm [4993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 114.914625][ T4997] kvm [4993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 114.983376][ T4997] kvm [4993]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 117.282125][ T26] audit: type=1326 audit(1774687895.638:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.0.223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b9379c799 code=0x0 [ 117.359126][ T5066] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 118.266803][ T5096] device syzkaller0 entered promiscuous mode [ 118.604530][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 119.769460][ T5148] capability: warning: `syz.0.251' uses 32-bit capabilities (legacy support in use) [ 121.076235][ T4313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.266206][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 121.274078][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.306033][ T4313] usb 5-1: config 7 has an invalid interface number: 118 but max is 0 [ 121.315366][ T4313] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 121.334547][ T4313] usb 5-1: config 7 has no interface number 0 [ 121.342470][ T4313] usb 5-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 121.354098][ T4313] usb 5-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 121.365171][ T4313] usb 5-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 121.384213][ T4313] usb 5-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 121.395553][ T4313] usb 5-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 121.407238][ T4313] usb 5-1: config 7 interface 118 has no altsetting 0 [ 121.411242][ T5204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 121.421945][ T4313] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 121.464433][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.473036][ T4313] usb 5-1: Product: syz [ 121.477743][ T4313] usb 5-1: Manufacturer: syz [ 121.483599][ T4313] usb 5-1: SerialNumber: syz [ 121.504792][ T5189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.552205][ T5189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.809346][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.868993][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.902008][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.921678][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.955826][ T4313] (null): radio-mr800 - initialization failed [ 121.977229][ T4313] radio-mr800: probe of 5-1:7.118 failed with error -71 [ 122.005123][ T4313] usbhid 5-1:7.118: couldn't find an input interrupt endpoint [ 122.025721][ T4313] usb 5-1: USB disconnect, device number 4 [ 122.679833][ T5251] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 122.826272][ T5255] netlink: 'syz.2.287': attribute type 4 has an invalid length. [ 124.782345][ T5336] mmap: syz.3.306 (5336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.978590][ T26] audit: type=1326 audit(1774687903.338:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b9379c799 code=0x0 [ 128.151952][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 128.342633][ T5456] capability: warning: `syz.0.345' uses deprecated v2 capabilities in a way that may be insecure [ 128.690424][ T5469] 9pnet_fd: Insufficient options for proto=fd [ 129.598126][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 129.861549][ T5497] loop2: detected capacity change from 0 to 128 [ 129.946775][ T5497] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 130.073523][ T4925] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 130.085349][ T4925] FAT-fs (loop2): Filesystem has been set read-only [ 130.100093][ T4925] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 130.531476][ T5523] 9pnet_fd: Insufficient options for proto=fd [ 130.576876][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 130.675849][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 131.237460][ T5541] device syzkaller0 entered promiscuous mode [ 131.441172][ T5549] loop1: detected capacity change from 0 to 128 [ 131.501033][ T5549] FAT-fs (loop1): bogus number of reserved sectors [ 131.516189][ T5549] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 131.535488][ T5552] xt_connbytes: Forcing CT accounting to be enabled [ 131.556169][ T5549] FAT-fs (loop1): Can't find a valid FAT filesystem [ 132.438511][ T5585] 9pnet_fd: Insufficient options for proto=fd [ 132.969660][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977009][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.178720][ T5596] device syzkaller0 entered promiscuous mode [ 134.014817][ T5619] 9pnet_fd: Insufficient options for proto=fd [ 134.892324][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.955827][ T5633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.121800][ T5642] device syzkaller0 entered promiscuous mode [ 136.003495][ T5673] loop4: detected capacity change from 0 to 1764 [ 136.062789][ T5673] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 136.144815][ T5673] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 136.486545][ T5683] device syzkaller0 entered promiscuous mode [ 137.234526][ T5702] loop4: detected capacity change from 0 to 128 [ 137.249314][ T5702] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 137.541894][ T5709] loop3: detected capacity change from 0 to 1764 [ 137.576703][ T5709] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 137.839438][ T5713] device syzkaller0 entered promiscuous mode [ 138.025440][ T4337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.156997][ T4337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.226525][ T4337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.387899][ T4337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.666998][ T5728] Zero length message leads to an empty skb [ 138.911404][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.921050][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.929152][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.937759][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.945487][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 138.954256][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.335814][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.344757][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.228357][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.308201][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.459445][ T5760] loop3: detected capacity change from 0 to 1764 [ 140.487972][ T5760] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 140.966428][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 141.184907][ T5725] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.194125][ T5725] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.203550][ T5725] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.221975][ T5725] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.549837][ T5739] tap0: tun_chr_ioctl cmd 1074025677 [ 141.561933][ T5739] tap0: linktype set to 825 [ 142.645345][ T5737] chnl_net:caif_netlink_parms(): no params data found [ 143.591670][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 143.707426][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.727534][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.771810][ T5737] device bridge_slave_0 entered promiscuous mode [ 143.994265][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.005100][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.033823][ T5737] device bridge_slave_1 entered promiscuous mode [ 144.164933][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.348076][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.405456][ T5737] team0: Port device team_slave_0 added [ 144.468645][ T5844] kvm [5842]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 144.482442][ T5844] kvm [5842]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 144.492087][ T5844] kvm [5842]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 144.509076][ T4337] device hsr_slave_0 left promiscuous mode [ 144.521149][ T4337] device hsr_slave_1 left promiscuous mode [ 144.536623][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.552168][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.574858][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.594462][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.614526][ T4337] device bridge_slave_1 left promiscuous mode [ 144.615854][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.644783][ T4337] device bridge_slave_0 left promiscuous mode [ 144.644943][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.725666][ T4337] device veth1_macvtap left promiscuous mode [ 144.725915][ T4337] device veth0_macvtap left promiscuous mode [ 144.728138][ T4337] device veth1_vlan left promiscuous mode [ 144.729145][ T4337] device veth0_vlan left promiscuous mode [ 144.990382][ T5859] overlayfs: failed to clone upperpath [ 145.785800][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 147.847300][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 148.516805][ T5906] program syz.2.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.245769][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 149.472690][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 150.346119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.366119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.376111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.386107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.396110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.406110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.416124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 150.597219][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.755106][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.828716][ T5946] 9pnet_fd: Insufficient options for proto=fd [ 151.990493][ T4337] bond0 (unregistering): Released all slaves [ 152.088505][ T5963] loop2: detected capacity change from 0 to 128 [ 152.150331][ T5963] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 152.198147][ T5737] team0: Port device team_slave_1 added [ 153.431876][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.474907][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.547443][ T5976] loop2: detected capacity change from 0 to 1764 [ 153.573168][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.607227][ T5976] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 153.687801][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.694916][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.874985][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.085321][ T5737] device hsr_slave_0 entered promiscuous mode [ 154.144224][ T5737] device hsr_slave_1 entered promiscuous mode [ 155.873787][ T6019] sched: RT throttling activated [ 156.845469][ T5737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.040797][ T5737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.061301][ T5737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.102872][ T5737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.255290][ T6033] loop2: detected capacity change from 0 to 1764 [ 157.300384][ T6033] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 157.559445][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.646831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.666923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.721188][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.827882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.847554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.917157][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 157.919423][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.930628][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.276686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.292501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.329344][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.336754][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.386703][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.401521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.442940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.490478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.535868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.578403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.595259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.613003][ T5737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.667136][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.714438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.733094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.757828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.797269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.815287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.833597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.317543][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.336909][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.359295][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.410772][ T6110] overlayfs: failed to clone upperpath [ 162.341627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.377156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.454551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.472731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.495175][ T5737] device veth0_vlan entered promiscuous mode [ 162.523520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.565645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.624939][ T5737] device veth1_vlan entered promiscuous mode [ 162.713578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.740827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.773872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.791961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.835688][ T5737] device veth0_macvtap entered promiscuous mode [ 162.856815][ T5737] device veth1_macvtap entered promiscuous mode [ 162.923840][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.956621][ T6132] loop0: detected capacity change from 0 to 1764 [ 162.963114][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.005648][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.021714][ T6132] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 163.046119][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.091034][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.146342][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.179230][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.213473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.243177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.269101][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.310862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.357423][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.382492][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.405310][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.458501][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.490680][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.528279][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.572106][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.589449][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.623476][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.652647][ T5737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.679382][ T5737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.703861][ T5737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.714143][ T5737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.433170][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.486489][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.588692][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.615707][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.988732][ T6168] overlayfs: failed to clone upperpath [ 165.679678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.848707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.150802][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.230674][ T6209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.302461][ T6233] 9pnet_fd: Insufficient options for proto=fd [ 169.997074][ T6235] loop0: detected capacity change from 0 to 128 [ 170.234440][ T6235] syz.0.580: attempt to access beyond end of device [ 170.234440][ T6235] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 170.369390][ T6243] syz.0.580: attempt to access beyond end of device [ 170.369390][ T6243] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 170.801857][ T6253] device syzkaller0 entered promiscuous mode [ 171.027048][ T6261] overlayfs: failed to clone upperpath [ 172.001077][ T6270] 9pnet_fd: Insufficient options for proto=fd [ 173.357199][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.598'. [ 174.982894][ T6312] tty tty30: ldisc open failed (-12), clearing slot 29 [ 175.069792][ T6315] loop0: detected capacity change from 0 to 1764 [ 175.136134][ T6315] syz.0.602: attempt to access beyond end of device [ 175.136134][ T6315] loop0: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 175.202107][ T6315] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 175.225194][ T6315] syz.0.602: attempt to access beyond end of device [ 175.225194][ T6315] loop0: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 175.268285][ T6315] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 175.307712][ T26] audit: type=1800 audit(1774687953.668:15): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.602" name="file0" dev="loop0" ino=1923 res=0 errno=0 [ 175.719783][ T6331] 9pnet_fd: Insufficient options for proto=fd [ 176.936150][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.146453][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 177.156686][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.196335][ T22] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 177.205230][ T22] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 177.253114][ T22] usb 6-1: config 7 has no interface number 0 [ 177.269756][ T22] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 177.291943][ T22] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 177.308225][ T22] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 177.335104][ T22] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 177.366176][ T22] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 177.394025][ T22] usb 6-1: config 7 interface 118 has no altsetting 0 [ 177.415623][ T22] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 177.458321][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.471557][ T22] usb 6-1: Product: syz [ 177.475890][ T22] usb 6-1: Manufacturer: syz [ 177.482212][ T22] usb 6-1: SerialNumber: syz [ 177.506631][ T6358] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 177.514832][ T6358] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 177.746459][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.786361][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.831390][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.877601][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.902551][ T22] (null): radio-mr800 - initialization failed [ 177.925484][ T22] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 177.956307][ T22] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 178.013347][ T22] usb 6-1: USB disconnect, device number 2 [ 178.264960][ T26] audit: type=1326 audit(1774687956.618:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.1.621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f286219c799 code=0x0 [ 178.930222][ T6410] loop5: detected capacity change from 0 to 16 [ 179.012972][ T6410] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.021803][ T6432] 9pnet_fd: Insufficient options for proto=fd [ 182.206239][ T6486] kvm [6485]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 182.214740][ T6486] kvm [6485]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 183.161965][ T6517] loop0: detected capacity change from 0 to 128 [ 183.247897][ T6517] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 183.303219][ T26] audit: type=1800 audit(1774687961.658:17): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.659" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 183.545785][ T6532] 9pnet_fd: Insufficient options for proto=fd [ 184.665922][ T6561] device syzkaller0 entered promiscuous mode [ 186.149894][ T6603] device syzkaller0 entered promiscuous mode [ 186.326263][ T4332] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.393795][ T6605] loop3: detected capacity change from 0 to 128 [ 186.456434][ T6605] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 186.526291][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 186.543634][ T4332] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.571307][ T4332] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 186.598678][ T4332] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 186.629095][ T4332] usb 6-1: config 7 has no interface number 0 [ 186.635279][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 186.670980][ T4332] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 186.692299][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 186.727190][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 186.756872][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 186.796133][ T4332] usb 6-1: config 7 interface 118 has no altsetting 0 [ 186.841535][ T4332] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 186.861042][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.881243][ T4332] usb 6-1: Product: syz [ 186.885502][ T4332] usb 6-1: Manufacturer: syz [ 187.772450][ T4332] usb 6-1: SerialNumber: syz [ 187.782084][ T6600] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.790642][ T6600] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.017853][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.066901][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.097554][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.123624][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 188.136559][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.196942][ T4332] (null): radio-mr800 - initialization failed [ 188.203304][ T4332] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 188.246703][ T4332] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 188.302530][ T4332] usb 6-1: USB disconnect, device number 3 [ 188.684825][ T6650] device syzkaller0 entered promiscuous mode [ 191.022983][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 191.337939][ T6692] loop5: detected capacity change from 0 to 128 [ 191.356404][ T6693] device syzkaller0 entered promiscuous mode [ 194.059520][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'. [ 194.427085][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433849][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.438903][ T6737] loop3: detected capacity change from 0 to 128 [ 195.723304][ T6744] device syzkaller0 entered promiscuous mode [ 197.353236][ T6770] team0: Port device bridge1 added [ 197.730359][ T6783] loop2: detected capacity change from 0 to 128 [ 198.600124][ T6802] device syzkaller0 entered promiscuous mode [ 199.103422][ T6820] loop2: detected capacity change from 0 to 256 [ 200.040996][ T6851] device syzkaller0 entered promiscuous mode [ 200.909155][ T6875] Illegal XDP return value 4294967294 on prog (id 17) dev syz_tun, expect packet loss! [ 201.626431][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 201.634149][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 201.642177][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 201.650008][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 202.288386][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 202.366245][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.586175][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 202.615440][ T4315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.656658][ T4315] usb 1-1: config 7 has an invalid interface number: 118 but max is 0 [ 202.664919][ T4315] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 202.683937][ T4315] usb 1-1: config 7 has no interface number 0 [ 202.696461][ T4315] usb 1-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 202.736189][ T4315] usb 1-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 202.756239][ T4315] usb 1-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 202.786114][ T4315] usb 1-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 202.815520][ T4315] usb 1-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 202.839793][ T4315] usb 1-1: config 7 interface 118 has no altsetting 0 [ 202.858968][ T4315] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 202.869083][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.877625][ T4315] usb 1-1: Product: syz [ 202.882182][ T4315] usb 1-1: Manufacturer: syz [ 202.887444][ T4315] usb 1-1: SerialNumber: syz [ 202.943864][ T6892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.960133][ T6919] overlayfs: failed to clone upperpath [ 203.055002][ T6892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.612170][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.620954][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.636278][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.646362][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.671024][ T4315] (null): radio-mr800 - initialization failed [ 203.684517][ T4315] radio-mr800: probe of 1-1:7.118 failed with error -71 [ 203.705179][ T4315] usbhid 1-1:7.118: couldn't find an input interrupt endpoint [ 203.765600][ T4315] usb 1-1: USB disconnect, device number 2 [ 204.515256][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 204.555127][ T6944] kvm: pic: non byte write [ 204.917726][ T6957] overlayfs: failed to clone upperpath [ 205.534277][ T6960] loop5: detected capacity change from 0 to 16 [ 205.757076][ T6960] erofs: (device loop5): erofs_init_device: empty device tag @ pos 0 [ 210.367883][ T7094] device syzkaller0 entered promiscuous mode [ 211.076179][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 211.296321][ T4318] usb 6-1: Using ep0 maxpacket: 16 [ 211.304023][ T4318] usb 6-1: unable to get BOS descriptor or descriptor too short [ 211.345813][ T4318] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 211.361785][ T4318] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 211.390596][ T4318] usb 6-1: config 7 has no interface number 0 [ 211.407205][ T4318] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 211.462235][ T4318] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 211.487196][ T4318] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 211.514408][ T4318] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 211.551518][ T4318] usb 6-1: config 7 interface 118 has no altsetting 0 [ 211.597682][ T4318] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 211.617280][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.634598][ T4318] usb 6-1: Product: syz [ 211.640222][ T4318] usb 6-1: Manufacturer: syz [ 211.644996][ T4318] usb 6-1: SerialNumber: syz [ 211.659662][ T7104] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 211.901980][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.953675][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.001744][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.073272][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.119374][ T4318] (null): radio-mr800 - initialization failed [ 212.125796][ T4318] radio-mr800: probe of 6-1:7.118 failed with error -22 [ 212.156309][ T4318] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 212.203812][ T4318] usb 6-1: USB disconnect, device number 4 [ 213.703962][ T7195] loop2: detected capacity change from 0 to 256 [ 216.241685][ T7282] fuse: Bad value for 'fd' [ 216.283012][ T7279] kvm: pic: non byte write [ 217.212093][ T7317] fuse: Bad value for 'fd' [ 217.339954][ T7322] fuse: Bad value for 'fd' [ 218.122091][ T7336] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.811738][ T7356] kvm: pic: non byte write [ 220.036297][ T4332] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 220.229728][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 220.237142][ T7402] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.240888][ T4332] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.299501][ T4332] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 220.307980][ T4332] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 220.316884][ T4332] usb 6-1: config 7 has no interface number 0 [ 220.323120][ T4332] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 220.333348][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 220.346579][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 220.357566][ T4332] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 220.373393][ T4332] usb 6-1: config 7 interface 118 has no altsetting 0 [ 220.400987][ T4332] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 220.410530][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.427731][ T4332] usb 6-1: Product: syz [ 220.432080][ T4332] usb 6-1: Manufacturer: syz [ 220.436791][ T4332] usb 6-1: SerialNumber: syz [ 220.459469][ T7387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.476632][ T7387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.715282][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.752529][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.775858][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.809896][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.852866][ T4332] (null): radio-mr800 - initialization failed [ 220.865262][ T4332] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 220.882422][ T4332] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 220.910869][ T4332] usb 6-1: USB disconnect, device number 5 [ 221.307213][ T7436] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.175777][ T7474] loop5: detected capacity change from 0 to 256 [ 223.393426][ T7509] kvm: pic: non byte write [ 224.730271][ T7550] kvm: pic: non byte write [ 228.731563][ T7640] kvm [7639]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880 [ 228.801519][ T7640] kvm [7639]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 228.898143][ T7640] kvm [7639]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa088 [ 228.967302][ T7640] kvm [7639]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd1a8 [ 229.012608][ T7640] kvm [7639]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 233.595175][ T26] audit: type=1326 audit(1774688011.948:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 233.653620][ T26] audit: type=1326 audit(1774688011.948:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 233.675827][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.710521][ T26] audit: type=1326 audit(1774688011.948:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 233.766159][ T26] audit: type=1326 audit(1774688011.978:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 233.788366][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.873874][ T26] audit: type=1326 audit(1774688011.978:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 233.962964][ T26] audit: type=1326 audit(1774688011.978:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 234.036485][ T26] audit: type=1326 audit(1774688011.978:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 234.058697][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.103907][ T26] audit: type=1326 audit(1774688011.978:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 234.126639][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.163762][ T26] audit: type=1326 audit(1774688011.978:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 234.205482][ T26] audit: type=1326 audit(1774688011.988:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66c99c799 code=0x7ffc0000 [ 234.321630][ T7779] 9pnet_fd: Insufficient options for proto=fd [ 235.545360][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.554515][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.038974][ T7783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.132132][ T7783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.849785][ T7783] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.862735][ T7783] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.874536][ T7783] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.891041][ T7783] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.401892][ T7852] 9pnet_fd: Insufficient options for proto=fd [ 240.108964][ T7864] fuse: Bad value for 'fd' [ 242.705771][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.713375][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.758817][ T7916] 9pnet_fd: Insufficient options for proto=fd [ 243.356102][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 243.473249][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.531628][ T7872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.568963][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 243.588993][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.608439][ T14] usb 3-1: config 7 has an invalid interface number: 118 but max is 0 [ 243.630836][ T14] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 243.650735][ T14] usb 3-1: config 7 has no interface number 0 [ 243.666157][ T14] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 243.686329][ T14] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 243.706241][ T14] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 243.732720][ T14] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 243.756776][ T14] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 243.770230][ T14] usb 3-1: config 7 interface 118 has no altsetting 0 [ 243.801168][ T14] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 243.811409][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.820390][ T14] usb 3-1: Product: syz [ 243.825740][ T14] usb 3-1: Manufacturer: syz [ 243.831507][ T14] usb 3-1: SerialNumber: syz [ 243.849246][ T7918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.858118][ T7918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.085150][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.108068][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.140128][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.166586][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.200812][ T14] (null): radio-mr800 - initialization failed [ 244.217629][ T14] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 244.225307][ T14] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 244.247796][ T14] usb 3-1: USB disconnect, device number 3 [ 244.577409][ T7872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.586975][ T7872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.597311][ T7872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.606376][ T7872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.765928][ T7930] fuse: Bad value for 'fd' [ 244.913918][ T7896] device syzkaller0 entered promiscuous mode [ 245.561685][ T7951] 9pnet_fd: Insufficient options for proto=fd [ 246.392194][ T7964] overlayfs: failed to clone upperpath [ 250.525068][ T8011] 9pnet_fd: Insufficient options for proto=fd [ 251.869523][ T8028] overlayfs: failed to clone upperpath [ 253.031211][ T8049] 9pnet_fd: Insufficient options for proto=fd [ 254.636953][ T8063] device syzkaller0 entered promiscuous mode [ 255.225925][ T8078] overlayfs: overlapping lowerdir path [ 255.849498][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856051][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.237421][ T8096] 9pnet_fd: Insufficient options for proto=fd [ 257.107680][ T8105] fuse: Bad value for 'fd' [ 257.184823][ T8107] device syzkaller0 entered promiscuous mode [ 257.250525][ T8109] kvm: pic: non byte write [ 257.968192][ T8124] overlayfs: overlapping lowerdir path [ 259.190433][ T8145] 9pnet_fd: Insufficient options for proto=fd [ 260.059884][ T8153] fuse: Bad value for 'fd' [ 260.298292][ T8158] device syzkaller0 entered promiscuous mode [ 261.248592][ T8175] overlayfs: overlapping lowerdir path [ 263.926692][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 264.537768][ T8217] device syzkaller0 entered promiscuous mode [ 264.563223][ T8220] kvm: pic: non byte write [ 265.140212][ T8226] overlayfs: failed to clone upperpath [ 266.286344][ T4317] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 266.486078][ T4317] usb 6-1: Using ep0 maxpacket: 16 [ 266.504008][ T4317] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.532147][ T4317] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 266.553358][ T4317] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 266.583865][ T4317] usb 6-1: config 7 has no interface number 0 [ 266.600638][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 266.638380][ T4317] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 266.669676][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 266.703056][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 266.745241][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 266.777178][ T4317] usb 6-1: config 7 interface 118 has no altsetting 0 [ 266.799004][ T4317] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 266.830821][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.853194][ T4317] usb 6-1: Product: syz [ 266.858800][ T4317] usb 6-1: Manufacturer: syz [ 266.863711][ T4317] usb 6-1: SerialNumber: syz [ 266.930717][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 266.943710][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 267.152010][ T8261] device syzkaller0 entered promiscuous mode [ 267.226248][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.237908][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.270786][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.301273][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.345704][ T4317] (null): radio-mr800 - initialization failed [ 267.354527][ T4317] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 267.366277][ T4317] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 267.405012][ T4317] usb 6-1: USB disconnect, device number 6 [ 269.545910][ T8310] device syzkaller0 entered promiscuous mode [ 270.506273][ T4317] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 270.796221][ T4317] usb 6-1: Using ep0 maxpacket: 16 [ 270.961662][ T4317] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.017286][ T4317] usb 6-1: config 7 has an invalid interface number: 118 but max is 0 [ 271.060502][ T4317] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 271.096533][ T4317] usb 6-1: config 7 has no interface number 0 [ 271.122948][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 271.144192][ T4317] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 271.175118][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 271.211765][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 271.243180][ T4317] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 271.264787][ T4317] usb 6-1: config 7 interface 118 has no altsetting 0 [ 271.301661][ T4317] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 271.366145][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.394628][ T4317] usb 6-1: Product: syz [ 271.415012][ T4317] usb 6-1: Manufacturer: syz [ 271.456191][ T4317] usb 6-1: SerialNumber: syz [ 271.729919][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.806643][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.943924][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.972670][ T8350] device syzkaller0 entered promiscuous mode [ 272.020434][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.071284][ T4317] (null): radio-mr800 - initialization failed [ 272.093502][ T4317] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 272.119129][ T4317] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 272.170075][ T4317] usb 6-1: USB disconnect, device number 7 [ 274.488552][ T8376] loop5: detected capacity change from 0 to 1764 [ 274.791368][ T8378] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 275.026552][ T8386] xt_nat: multiple ranges no longer supported [ 276.347465][ T8410] fuse: Bad value for 'group_id' [ 276.671990][ T8413] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.511339][ T8450] fuse: Bad value for 'group_id' [ 280.625739][ T8454] fuse: Bad value for 'fd' [ 281.252765][ T8470] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.382787][ T8481] fuse: Bad value for 'group_id' [ 281.627050][ T8490] fuse: Bad value for 'fd' [ 281.641693][ T8493] fuse: Bad value for 'fd' [ 282.604543][ T8531] loop3: detected capacity change from 0 to 256 [ 282.680318][ T8533] fuse: Bad value for 'fd' [ 283.092368][ T8545] device syzkaller0 entered promiscuous mode [ 283.627272][ T8560] kvm: pic: non byte write [ 283.926515][ T8570] loop5: detected capacity change from 0 to 256 [ 284.721304][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 284.752214][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.809448][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.828569][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.854919][ T8602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.921661][ T8602] syz.0.1321 (8602) used greatest stack depth: 20528 bytes left [ 284.936338][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 284.944166][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.980678][ T4316] usb 4-1: config 7 has an invalid interface number: 118 but max is 0 [ 285.019643][ T4316] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 285.045677][ T4316] usb 4-1: config 7 has no interface number 0 [ 285.052812][ T4316] usb 4-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 285.064267][ T4316] usb 4-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 285.074811][ T4316] usb 4-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 285.090065][ T8616] fuse: Bad value for 'fd' [ 285.094641][ T4316] usb 4-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 285.150452][ T4316] usb 4-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 285.181965][ T4316] usb 4-1: config 7 interface 118 has no altsetting 0 [ 285.198665][ T4316] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 285.256554][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.264690][ T4316] usb 4-1: Product: syz [ 285.302382][ T4316] usb 4-1: Manufacturer: syz [ 285.320871][ T4316] usb 4-1: SerialNumber: syz [ 285.565437][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.604423][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.622650][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.635495][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.674933][ T4316] (null): radio-mr800 - initialization failed [ 285.688871][ T4316] radio-mr800: probe of 4-1:7.118 failed with error -71 [ 285.718246][ T4316] usbhid 4-1:7.118: couldn't find an input interrupt endpoint [ 285.756538][ T4316] usb 4-1: USB disconnect, device number 2 [ 285.857175][ T8640] 9pnet_fd: Insufficient options for proto=fd [ 286.035050][ T8648] fuse: Bad value for 'fd' [ 286.857313][ T8672] overlayfs: missing 'lowerdir' [ 287.460353][ T8680] loop3: detected capacity change from 0 to 256 [ 287.651227][ T8685] fuse: Bad value for 'fd' [ 288.598503][ T8711] overlayfs: missing 'lowerdir' [ 290.336691][ T8752] overlayfs: missing 'lowerdir' [ 291.588169][ T8775] loop3: detected capacity change from 0 to 764 [ 292.059723][ T8798] overlayfs: missing 'lowerdir' [ 292.971840][ T8809] 9pnet_fd: Insufficient options for proto=fd [ 293.208942][ T8814] page:ffffea0001260ec0 refcount:4 mapcount:1 mapping:ffff88802fa8d578 index:0x0 pfn:0x4983b [ 293.219977][ T8814] memcg:ffff8880531b8000 [ 293.224306][ T8814] aops:shmem_aops ino:45f [ 293.228698][ T8814] flags: 0xfff60000080057(locked|referenced|uptodate|lru|workingset|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 293.240492][ T8814] raw: 00fff60000080057 ffffea00013a7808 ffffea0001337a08 ffff88802fa8d578 [ 293.249132][ T8814] raw: 0000000000000000 0000000000000000 0000000400000000 ffff8880531b8000 [ 293.257936][ T8814] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 293.265284][ T8814] page_owner tracks the page as allocated [ 293.271703][ T8814] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8815, tgid 8814 (syz.3.1400), ts 293186968424, free_ts 293064245767 [ 293.289650][ T8814] post_alloc_hook+0x173/0x1a0 [ 293.294458][ T8814] get_page_from_freelist+0x1a1e/0x1ab0 [ 293.300041][ T8814] __alloc_pages+0x1ec/0x4f0 [ 293.304670][ T8814] __folio_alloc+0xe/0x30 [ 293.309055][ T8814] vma_alloc_folio+0x4a3/0x900 [ 293.313861][ T8814] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 293.319629][ T8814] shmem_get_folio_gfp+0x1361/0x3400 [ 293.325057][ T8814] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 293.330828][ T8814] udmabuf_create+0x99b/0xfc0 [ 293.335539][ T8814] udmabuf_ioctl+0x1f3/0x300 [ 293.340157][ T8814] __se_sys_ioctl+0xfa/0x170 [ 293.344875][ T8814] do_syscall_64+0x4c/0xa0 [ 293.349337][ T8814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.355266][ T8814] page last free stack trace: [ 293.359970][ T8814] free_unref_page_prepare+0x8b4/0x9a0 [ 293.365491][ T8814] free_unref_page_list+0xbb/0x8e0 [ 293.370640][ T8814] release_pages+0x1fa6/0x2220 [ 293.375446][ T8814] tlb_flush_mmu+0x105/0x220 [ 293.380093][ T8814] tlb_finish_mmu+0xf5/0x220 [ 293.384735][ T8814] exit_mmap+0x384/0x960 [ 293.389024][ T8814] __mmput+0x118/0x3c0 [ 293.393160][ T8814] exit_mm+0x1fe/0x2d0 [ 293.397358][ T8814] do_exit+0x905/0x2480 [ 293.401573][ T8814] do_group_exit+0x217/0x2d0 [ 293.406230][ T8814] get_signal+0x1272/0x1350 [ 293.410800][ T8814] arch_do_signal_or_restart+0xc4/0x1350 [ 293.416485][ T8814] exit_to_user_mode_loop+0x70/0x110 [ 293.421833][ T8814] exit_to_user_mode_prepare+0xee/0x180 [ 293.427431][ T8814] syscall_exit_to_user_mode+0x16/0x40 [ 293.432940][ T8814] do_syscall_64+0x58/0xa0 [ 293.437605][ T8814] ------------[ cut here ]------------ [ 293.443086][ T8814] kernel BUG at mm/filemap.c:153! [ 293.448162][ T8814] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 293.454279][ T8814] CPU: 1 PID: 8814 Comm: syz.3.1400 Not tainted syzkaller #0 [ 293.461670][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.471750][ T8814] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 293.478038][ T8814] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 d0 ee d6 ff 48 89 df 48 c7 c6 20 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 ba ee d6 ff 48 89 df 48 c7 c6 80 fb 94 8a e8 fb 0c 12 00 [ 293.497694][ T8814] RSP: 0018:ffffc9000cc7f618 EFLAGS: 00010046 [ 293.503983][ T8814] RAX: 6da02a5edfe6b100 RBX: ffffea0001260ec0 RCX: 6da02a5edfe6b100 [ 293.511986][ T8814] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 293.519987][ T8814] RBP: ffffc9000cc7f778 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 293.528012][ T8814] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: dffffc0000000000 [ 293.536030][ T8814] R13: dffffc0000000000 R14: ffff88802fa8d578 R15: 1ffff9200198fed4 [ 293.544032][ T8814] FS: 000055556979c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 293.553006][ T8814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.559612][ T8814] CR2: 0000000000000000 CR3: 000000005ff7e000 CR4: 00000000003526e0 [ 293.567613][ T8814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.575609][ T8814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.583609][ T8814] Call Trace: [ 293.586928][ T8814] [ 293.589886][ T8814] __filemap_remove_folio+0xbc/0x8a0 [ 293.595212][ T8814] ? __rwlock_init+0x140/0x140 [ 293.600016][ T8814] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 293.607077][ T8814] ? _raw_spin_lock_irq+0xb7/0xf0 [ 293.612135][ T8814] ? _raw_spin_lock_irqsave+0x100/0x100 [ 293.617804][ T8814] filemap_remove_folio+0xed/0x2c0 [ 293.622973][ T8814] truncate_inode_folio+0x59/0x70 [ 293.628084][ T8814] shmem_undo_range+0x533/0x20c0 [ 293.633064][ T8814] ? shmem_truncate_range+0xb0/0xb0 [ 293.638303][ T8814] ? do_raw_spin_lock+0x128/0x2f0 [ 293.643373][ T8814] ? __rwlock_init+0x140/0x140 [ 293.648200][ T8814] shmem_evict_inode+0x25b/0xa80 [ 293.653197][ T8814] ? inode_wait_for_writeback+0x1df/0x220 [ 293.658954][ T8814] ? shmem_free_in_core_inode+0xb0/0xb0 [ 293.664545][ T8814] ? do_raw_spin_lock+0x128/0x2f0 [ 293.669620][ T8814] ? bit_waitqueue+0x30/0x30 [ 293.674252][ T8814] ? do_raw_spin_unlock+0x11d/0x230 [ 293.679487][ T8814] ? shmem_free_in_core_inode+0xb0/0xb0 [ 293.685158][ T8814] evict+0x4c9/0x8d0 [ 293.689174][ T8814] ? proc_nr_inodes+0x2f0/0x2f0 [ 293.694079][ T8814] ? do_raw_spin_unlock+0x11d/0x230 [ 293.699319][ T8814] ? _raw_spin_unlock+0x24/0x40 [ 293.704202][ T8814] ? iput+0x768/0x980 [ 293.708303][ T8814] __dentry_kill+0x431/0x650 [ 293.712947][ T8814] dentry_kill+0xb8/0x290 [ 293.717326][ T8814] ? dput+0x37/0x1d0 [ 293.721277][ T8814] dput+0xfa/0x1d0 [ 293.725211][ T8814] __fput+0x5e0/0x920 [ 293.729231][ T8814] task_work_run+0x1d0/0x260 [ 293.733945][ T8814] ? task_work_cancel+0x220/0x220 [ 293.739036][ T8814] ? exit_to_user_mode_loop+0x3b/0x110 [ 293.744728][ T8814] exit_to_user_mode_loop+0xe6/0x110 [ 293.750213][ T8814] exit_to_user_mode_prepare+0xee/0x180 [ 293.755909][ T8814] syscall_exit_to_user_mode+0x16/0x40 [ 293.761484][ T8814] do_syscall_64+0x58/0xa0 [ 293.765954][ T8814] ? clear_bhb_loop+0x60/0xb0 [ 293.770678][ T8814] ? clear_bhb_loop+0x60/0xb0 [ 293.775404][ T8814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.781431][ T8814] RIP: 0033:0x7f7ab9d9c799 [ 293.785879][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.805524][ T8814] RSP: 002b:00007ffcaa0c0598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 293.814005][ T8814] RAX: 0000000000000000 RBX: 00007ffcaa0c0680 RCX: 00007f7ab9d9c799 [ 293.822017][ T8814] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 293.830088][ T8814] RBP: 00000000000478dc R08: 0000000000000001 R09: 0000000000000000 [ 293.838088][ T8814] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007ffcaa0c06c0 [ 293.846103][ T8814] R13: 00007f7aba015fac R14: 000000000004794b R15: 00007f7aba015fa0 [ 293.854131][ T8814] [ 293.857308][ T8814] Modules linked in: [ 293.861244][ T8814] ---[ end trace 0000000000000000 ]--- [ 293.866723][ T8814] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 293.873004][ T8814] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 d0 ee d6 ff 48 89 df 48 c7 c6 20 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 ba ee d6 ff 48 89 df 48 c7 c6 80 fb 94 8a e8 fb 0c 12 00 [ 293.892726][ T8814] RSP: 0018:ffffc9000cc7f618 EFLAGS: 00010046 [ 293.898837][ T8814] RAX: 6da02a5edfe6b100 RBX: ffffea0001260ec0 RCX: 6da02a5edfe6b100 [ 293.906832][ T8814] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 293.914918][ T8814] RBP: ffffc9000cc7f778 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 293.922920][ T8814] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: dffffc0000000000 [ 293.930919][ T8814] R13: dffffc0000000000 R14: ffff88802fa8d578 R15: 1ffff9200198fed4 [ 293.939009][ T8814] FS: 000055556979c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 293.948055][ T8814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.954660][ T8814] CR2: 0000000000000000 CR3: 000000005ff7e000 CR4: 00000000003526e0 [ 293.962675][ T8814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.970679][ T8814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.978673][ T8814] Kernel panic - not syncing: Fatal exception [ 293.985409][ T8814] Kernel Offset: disabled [ 293.989830][ T8814] Rebooting in 86400 seconds..