last executing test programs: 3m45.332329316s ago: executing program 4 (id=158): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060101000000000000000001000000140007800800124000000005050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m41.883353313s ago: executing program 4 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000027000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 3m41.476877817s ago: executing program 4 (id=165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000610000100070c100000000200ffffffff", 0x58}], 0x1) 3m41.023436339s ago: executing program 4 (id=167): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) close(r0) (async) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000380)='./file0\x00', r1, 0x0, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000097420018000000000200000000000000000000001c0000000000000000000000ef080000", @ANYRES32=0x0, @ANYBLOB="7f000001591022c8000000080000f6b1e2785db779b3b9300292d9000000000073ca268f0000000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000097420018000000000200000000000000000000001c0000000000000000000000ef080000", @ANYRES32=0x0, @ANYBLOB="7f000001591022c8000000080000f6b1e2785db779b3b9300292d9000000000073ca268f0000000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r2, &(0x7f0000002140)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/174, 0xae}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/103, 0x67}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000580)=""/4, 0x4}, {&(0x7f0000000a40)=""/37, 0x25}, {&(0x7f0000000b00)=""/104, 0x68}], 0x3}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001e40)=""/112, 0x70}, {&(0x7f0000000b80)=""/188, 0xbc}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f00000022c0)=""/196, 0xc4}, {&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000001f00)=""/255, 0xff}], 0x6, &(0x7f00000023c0)}}], 0x5, 0x21, &(0x7f0000002280)={0x0, 0x989680}) socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a31"], 0x98}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m39.972586027s ago: executing program 4 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000b0a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 3m37.101351188s ago: executing program 4 (id=176): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x16, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbbc}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb, 0x9a02, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @value=r1}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="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", 0x160}], 0x1}, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004a00010000fbffffff0004000000806e269b0000"], 0x20}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) 3m34.765255134s ago: executing program 32 (id=176): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x16, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbbc}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb, 0x9a02, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @value=r1}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="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", 0x160}], 0x1}, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000004a00010000fbffffff0004000000806e269b0000"], 0x20}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) 1m34.592383719s ago: executing program 1 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e640000000014000280080003000700000008000b"], 0x44}, 0x1, 0x600, 0x0, 0x40448e0}, 0x4000) 1m34.200375514s ago: executing program 1 (id=539): write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000001000010000000000000000000000000a44000000060a030000000000000000000f2d00000900010073797a30000000000900020073797a32000000001800048014000180090001007866726d0000000004000280140000001100010000000000000000000000000a"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) 1m26.332730816s ago: executing program 1 (id=559): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_setup(0x6, &(0x7f0000000180)=0x0) creat(&(0x7f0000000340)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x3511, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m24.808404043s ago: executing program 1 (id=562): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x4, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) dup3(r3, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsgid(0xffffffffffffffff) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a00010100000000dfdbdf2506000000f32d4c482e85c572ef362a5167d696de44338afbfb391f086c7812eeca38cf74d2a311ca5a49048bba020ff2ef82cdef9d4e7a39c9fb4076996c108fa1763116ab7ddb723e1146be2a527bb9ccea79d7b5d939db21e3c37976fe503243a9bb82b7e7c9cba41a7552fe22c531ee98e4e9e28e10f29bafbbf18be372a70dd47ac5fedb30d8202eee712eff67eeaf5a216a4acbb500d37483689f07e43395a7a325e11903464f14823b76c801ed84906e19fa79290ead5a0d66844e18222d61bbe5134b", @ANYRESDEC=r2, @ANYBLOB="00000000004061d7"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m23.325846529s ago: executing program 1 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r1 = fanotify_init(0x1a, 0x1) lstat(&(0x7f0000000040)='./file1/../file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setregid(r2, r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r1, 0x1, 0x4800001a, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r5, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=ANY=[]}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x80010, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003304010326bd7002fcdbdf250600a60005d5f6b21e29d45948177519fb5067eba35a827b1b56900db5ac7481520e52c551d085ae399cef44236ccd3fe088fcb0f984109d14a4b6239a588d33ded8b6954f22a802866ca70ea51a22873e919c8daa9d8793b6f4337d575dfd400301f18eac7ab2a68fcadb661aba74b71fffd98fae16039cc51bd73c8f67ca2b5de7e0a10e61bcb33154285a"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000315e31ae9651b9ee542886b2f029ac6a26bdc3e26e30d66de75c563b4168050a86e7363b5916c588687fb17a977579222335a38de96c4c27d6ebb5561a24028d8ee3b460120f3393b304a23ce6865d1c2d355feeb6e0f45261312fef7f0b2e121452b72986d4eb90434a", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25360000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000"], 0x64}}, 0x0) r13 = open(&(0x7f0000000100)='./file1/../file0\x00', 0x147842, 0x49) preadv2(r13, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.844472525s ago: executing program 1 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) pipe(&(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}, @union]}}, &(0x7f0000000f40)=""/4080, 0x3a, 0xff0, 0x1}, 0x28) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x6, 0xf554, 0x11da0, 0x0, 0xfc, "42f46749a2ed195a14cc4953dc7e8e5aec7776", 0xfffffff8, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x800, 0x1a, "3eccd25569e20900"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000400)={0x2, @capture={0x0, 0x0, {0x5, 0x101}, 0x3, 0x3}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m4.598708786s ago: executing program 33 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) pipe(&(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}, @union]}}, &(0x7f0000000f40)=""/4080, 0x3a, 0xff0, 0x1}, 0x28) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x6, 0xf554, 0x11da0, 0x0, 0xfc, "42f46749a2ed195a14cc4953dc7e8e5aec7776", 0xfffffff8, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x800, 0x1a, "3eccd25569e20900"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000400)={0x2, @capture={0x0, 0x0, {0x5, 0x101}, 0x3, 0x3}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9.528979889s ago: executing program 3 (id=749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x2ff00) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2200) r8 = geteuid() socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'port1\x00'}}, {@noxattr}, {@debug={'debug', 0x3d, 0x8}}, {@access_uid={'access', 0x3d, r7}}, {@msize={'msize', 0x3d, 0xb97}}], [{@uid_eq={'uid', 0x3d, r8}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r7}}]}}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 5.831897993s ago: executing program 2 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000090008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 4.957330676s ago: executing program 2 (id=757): r0 = openat$kvm(0xffffff9c, &(0x7f0000000480), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1ff, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0x11ea, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0b45545, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 4.901784447s ago: executing program 0 (id=758): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x4, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) dup3(r3, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsgid(0xffffffffffffffff) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a00010100000000dfdbdf2506000000f32d4c482e85c572ef362a5167d696de44338afbfb391f086c7812eeca38cf74d2a311ca5a49048bba020ff2ef82cdef9d4e7a39c9fb4076996c108fa1763116ab7ddb723e1146be2a527bb9ccea79d7b5d939db21e3c37976fe503243a9bb82b7e7c9cba41a7552fe22c531ee98e4e9e28e10f29bafbbf18be372a70dd47ac5fedb30d8202eee712eff67eeaf5a216a4acbb500d37483689f07e43395a7a325e11903464f14823b76c801ed84906e19fa79290ead5a0d66844e18222d61bbe5134b", @ANYRESDEC=r2, @ANYBLOB="00000000004061d7"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.521932036s ago: executing program 5 (id=762): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x4, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242", 0x1c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="200000001a00010100000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.322996671s ago: executing program 0 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.128766191s ago: executing program 0 (id=765): shmget(0x0, 0x1000, 0x208, &(0x7f0000fff000/0x1000)=nil) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 2.060566554s ago: executing program 5 (id=766): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0) 2.047509309s ago: executing program 3 (id=767): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/142, 0x8e}], 0x4) 1.82863871s ago: executing program 5 (id=769): select(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1000000000000003, 0x4}) 1.828273797s ago: executing program 0 (id=770): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372802", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.528106026s ago: executing program 0 (id=772): poll(&(0x7f0000001c00)=[{0xffffffffffffffff, 0x2}], 0x1, 0xffffffff) 1.272704371s ago: executing program 6 (id=773): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xb, 0x0, 0x0) 1.165547222s ago: executing program 6 (id=774): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x40, &(0x7f0000001b80), 0x0) 1.066348716s ago: executing program 6 (id=775): syz_emit_ethernet(0xfc, &(0x7f0000000480)={@local, @remote, @val, {@ipv4}}, 0x0) 896.461527ms ago: executing program 5 (id=776): open(&(0x7f0000000140)='./file0\x00', 0x10, 0x8) acct(&(0x7f0000001280)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f0000000200)='./file0\x00', 0x8, 0x30) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000240)=""/4107, 0x100b}, {0x0}], 0x2) 880.928956ms ago: executing program 3 (id=777): setuid(0xee01) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x28, 0x0, 0x0) 781.901871ms ago: executing program 2 (id=778): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x803, 0x0, 0x0) 692.670201ms ago: executing program 6 (id=779): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) chdir(&(0x7f0000000000)='./file2\x00') 692.166648ms ago: executing program 5 (id=780): r0 = socket(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) listen(r0, 0x4) 691.680952ms ago: executing program 3 (id=781): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 532.198481ms ago: executing program 2 (id=782): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x64, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x68, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet6(r0, &(0x7f0000000040)="85c4", 0x2, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001980)="50ee", 0xfffffe97, 0x4, 0x0, 0x0) 528.866871ms ago: executing program 3 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000300)={0x7, 0x0, [{0x40000000, 0x8, 0x0, 0x5, 0xf, 0x2d, 0x2}, {0x4, 0x6bba, 0x2, 0x0, 0xca9, 0xffffffff, 0x6}, {0xc0000000, 0x12d, 0x6, 0x2d, 0x9, 0x1ff, 0x4}, {0x0, 0x0, 0x3, 0x5be, 0xc8, 0xfa, 0x2}, {0xc0000001, 0x8, 0x7, 0x8, 0x3, 0x2, 0xf6d}, {0xd, 0x8, 0x3, 0x6, 0x7, 0x3, 0x8}, {0x80000019, 0xfffffffa, 0x3, 0x4, 0xd65, 0x1ff, 0x24}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0xc008aeba, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x5625e9b0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000d90100000400000003000000"]) 476.543916ms ago: executing program 6 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0xc008aeba, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x5625e9b0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r1}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000180)={0xeeee8000, 0x13000}) 475.676748ms ago: executing program 5 (id=785): openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xbb, 0x80, 0xf, 0x9f, 0x3, 0x0, 0x3, 0x58, 0xa, 0x5, 0x9}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x184, 0x4, 0x18, 0xf4, 0x0, 0x7fffffffffffe, 0x8, 0x5, 0x2, 0x0, 0x45, 0x0, 0xbdd], 0x1, 0x144653}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000cbe000/0x4000)=nil, 0x930, 0x6, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) 373.130243ms ago: executing program 0 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x5, 0x8, 0xfe, 0x0, 0x8, 0x2, 0x8, 0x72, 0x5, 0xfa, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x2000003, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 227.199826ms ago: executing program 2 (id=787): mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) 124.430786ms ago: executing program 6 (id=788): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) pipe(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 36.072509ms ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x3c, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0x0, 0x84, {0x2000000000000003, 0x9, 0x0, {0x6, 0xed7, 0x7ff, 0x1008, 0x4, 0x5, 0x2, 0x6d8, 0x6, 0x1000, 0xffffffff, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 2 (id=790): mlockall(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x5, 0xea, 0x1, {0x22, 0xeb5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 85.360158][ T5827] cgroup: Unknown subsys name 'net' [ 85.535298][ T5827] cgroup: Unknown subsys name 'cpuset' [ 85.545525][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.391876][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.357863][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.366299][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.374228][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.382600][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.390382][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.409280][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.420468][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.427934][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.428462][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.436376][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.443827][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.451813][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.457056][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.467013][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.488740][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.497067][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.510364][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.518225][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.526716][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.542794][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.611158][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.618991][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.626688][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.634857][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.642870][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.160104][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.319719][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.409468][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.432742][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.474937][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.483012][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.490417][ T5841] bridge_slave_0: entered allmulticast mode [ 91.498690][ T5841] bridge_slave_0: entered promiscuous mode [ 91.539773][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.547429][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.555593][ T5841] bridge_slave_1: entered allmulticast mode [ 91.564210][ T5841] bridge_slave_1: entered promiscuous mode [ 91.645543][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.658840][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.692060][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.803866][ T5841] team0: Port device team_slave_0 added [ 91.829812][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.837192][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.844675][ T5837] bridge_slave_0: entered allmulticast mode [ 91.853215][ T5837] bridge_slave_0: entered promiscuous mode [ 91.898306][ T5841] team0: Port device team_slave_1 added [ 91.919989][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.927266][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.934787][ T5837] bridge_slave_1: entered allmulticast mode [ 91.942876][ T5837] bridge_slave_1: entered promiscuous mode [ 91.963216][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.970371][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.980560][ T5846] bridge_slave_0: entered allmulticast mode [ 91.988204][ T5846] bridge_slave_0: entered promiscuous mode [ 91.997743][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.005102][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.012815][ T5846] bridge_slave_1: entered allmulticast mode [ 92.020345][ T5846] bridge_slave_1: entered promiscuous mode [ 92.109363][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.116821][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.142983][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.190560][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.201464][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.209037][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.216932][ T5845] bridge_slave_0: entered allmulticast mode [ 92.224694][ T5845] bridge_slave_0: entered promiscuous mode [ 92.233284][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240435][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.247742][ T5845] bridge_slave_1: entered allmulticast mode [ 92.255701][ T5845] bridge_slave_1: entered promiscuous mode [ 92.275754][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.283034][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.309857][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.329977][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.337562][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.345436][ T5851] bridge_slave_0: entered allmulticast mode [ 92.352887][ T5851] bridge_slave_0: entered promiscuous mode [ 92.364083][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.404065][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.417785][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.425088][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.432886][ T5851] bridge_slave_1: entered allmulticast mode [ 92.440258][ T5851] bridge_slave_1: entered promiscuous mode [ 92.476633][ T5837] team0: Port device team_slave_0 added [ 92.530232][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.541876][ T5158] Bluetooth: hci1: command tx timeout [ 92.547656][ T5158] Bluetooth: hci0: command tx timeout [ 92.553552][ T51] Bluetooth: hci2: command tx timeout [ 92.584049][ T5837] team0: Port device team_slave_1 added [ 92.593489][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.608742][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.620838][ T51] Bluetooth: hci3: command tx timeout [ 92.627245][ T5841] hsr_slave_0: entered promiscuous mode [ 92.634031][ T5841] hsr_slave_1: entered promiscuous mode [ 92.670976][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.684092][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.696960][ T5846] team0: Port device team_slave_0 added [ 92.706524][ T5846] team0: Port device team_slave_1 added [ 92.706681][ T51] Bluetooth: hci4: command tx timeout [ 92.774268][ T5845] team0: Port device team_slave_0 added [ 92.796326][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.803383][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.829352][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.842486][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.849478][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.875508][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.917152][ T5845] team0: Port device team_slave_1 added [ 92.946737][ T5851] team0: Port device team_slave_0 added [ 92.973527][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.980536][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.007075][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.019865][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.027755][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.054051][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.066979][ T5851] team0: Port device team_slave_1 added [ 93.101055][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.108060][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.134435][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.188889][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.195964][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.222880][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.284488][ T5837] hsr_slave_0: entered promiscuous mode [ 93.291765][ T5837] hsr_slave_1: entered promiscuous mode [ 93.298108][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.307114][ T5837] Cannot create hsr debugfs directory [ 93.321480][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.328487][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.354561][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.401913][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.408926][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.435557][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.576995][ T5846] hsr_slave_0: entered promiscuous mode [ 93.588151][ T5846] hsr_slave_1: entered promiscuous mode [ 93.595893][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.604228][ T5846] Cannot create hsr debugfs directory [ 93.634484][ T5845] hsr_slave_0: entered promiscuous mode [ 93.642052][ T5845] hsr_slave_1: entered promiscuous mode [ 93.648334][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.656039][ T5845] Cannot create hsr debugfs directory [ 93.856256][ T5851] hsr_slave_0: entered promiscuous mode [ 93.862823][ T5851] hsr_slave_1: entered promiscuous mode [ 93.868952][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.877306][ T5851] Cannot create hsr debugfs directory [ 94.192388][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.206806][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.253522][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.287986][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.372303][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.394077][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.413681][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.425309][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.488302][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.516117][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.547540][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.558468][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.621301][ T51] Bluetooth: hci2: command tx timeout [ 94.626768][ T51] Bluetooth: hci0: command tx timeout [ 94.632408][ T5158] Bluetooth: hci1: command tx timeout [ 94.676231][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.687156][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.699915][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.707154][ T51] Bluetooth: hci3: command tx timeout [ 94.723003][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.783997][ T51] Bluetooth: hci4: command tx timeout [ 94.858054][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.895640][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.906502][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.923937][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.939545][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.007008][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.027798][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.046868][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.054177][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.081643][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.088810][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.132831][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.192203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.199331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.220455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.227638][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.276118][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.323462][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.426387][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.455395][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.467338][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.478197][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.485415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.505923][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.513128][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.548241][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.555492][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.567381][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.574654][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.688616][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.769626][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.776919][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.799037][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.849102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.856331][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.995315][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.090470][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.286429][ T5841] veth0_vlan: entered promiscuous mode [ 96.344162][ T5837] veth0_vlan: entered promiscuous mode [ 96.362134][ T5841] veth1_vlan: entered promiscuous mode [ 96.377645][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.409452][ T5837] veth1_vlan: entered promiscuous mode [ 96.457339][ T5841] veth0_macvtap: entered promiscuous mode [ 96.505349][ T5841] veth1_macvtap: entered promiscuous mode [ 96.595429][ T5837] veth0_macvtap: entered promiscuous mode [ 96.608202][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.630936][ T5837] veth1_macvtap: entered promiscuous mode [ 96.654266][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.674181][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.693970][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.701944][ T51] Bluetooth: hci0: command tx timeout [ 96.702211][ T51] Bluetooth: hci1: command tx timeout [ 96.702250][ T51] Bluetooth: hci2: command tx timeout [ 96.750462][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.761109][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.769914][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.783292][ T5158] Bluetooth: hci3: command tx timeout [ 96.788231][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.813076][ T5846] veth0_vlan: entered promiscuous mode [ 96.823096][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.862786][ T5158] Bluetooth: hci4: command tx timeout [ 96.876632][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.900444][ T5846] veth1_vlan: entered promiscuous mode [ 96.933682][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.946697][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.956154][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.965008][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.034259][ T24] cfg80211: failed to load regulatory.db [ 97.074615][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.090549][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.118675][ T5846] veth0_macvtap: entered promiscuous mode [ 97.172461][ T5846] veth1_macvtap: entered promiscuous mode [ 97.187955][ T5851] veth0_vlan: entered promiscuous mode [ 97.269100][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.288485][ T5851] veth1_vlan: entered promiscuous mode [ 97.298498][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.317734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.336019][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.359943][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.370612][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.389949][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.399025][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.409881][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.418996][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.514934][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.546162][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.579497][ T5851] veth0_macvtap: entered promiscuous mode [ 97.589924][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.643394][ T5851] veth1_macvtap: entered promiscuous mode [ 97.679934][ T5845] veth0_vlan: entered promiscuous mode [ 97.687389][ T5954] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 97.739391][ T5845] veth1_vlan: entered promiscuous mode [ 97.764752][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.795792][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.875850][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.903395][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.919566][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.935977][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.024449][ T5845] veth0_macvtap: entered promiscuous mode [ 98.044827][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.066210][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.080619][ T5962] loop2: detected capacity change from 0 to 7 [ 98.099238][ T5845] veth1_macvtap: entered promiscuous mode [ 98.107276][ T5962] loop2: [ 98.115549][ T5962] loop2: partition table partially beyond EOD, truncated [ 98.121273][ T5960] dummy0: entered promiscuous mode [ 98.141677][ T5960] vlan2: entered promiscuous mode [ 98.306743][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.339097][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.355011][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.389530][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.482219][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.694824][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.737910][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.747583][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.757279][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.785381][ T5158] Bluetooth: hci2: command tx timeout [ 98.785456][ T51] Bluetooth: hci1: command tx timeout [ 98.790942][ T5843] Bluetooth: hci0: command tx timeout [ 98.861005][ T5158] Bluetooth: hci3: command tx timeout [ 98.906730][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.933448][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.941762][ T5158] Bluetooth: hci4: command tx timeout [ 99.147512][ T5977] batadv0: entered promiscuous mode [ 99.171799][ T5977] vlan2: entered promiscuous mode [ 99.240644][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.302832][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.341443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.568473][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.628066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.790388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.798696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.004646][ T5993] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.020065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.037610][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.053158][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.411530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.561119][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.727553][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.770404][ T5998] fuse: Unknown parameter '00000000000000000000' [ 101.779178][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 101.801377][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.098357][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.113507][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.132676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.133943][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.151174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 102.181055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.207172][ T24] usb 3-1: config 0 descriptor?? [ 102.214369][ T5996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.422132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.543988][ T6014] Zero length message leads to an empty skb [ 102.657677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.063254][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.749724][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.956217][ T6019] loop2: detected capacity change from 0 to 7 [ 104.006368][ T6019] loop2: [ 104.031279][ T6019] loop2: partition table partially beyond EOD, truncated [ 104.145475][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.201942][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.230233][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.260652][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.269412][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.274096][ T6021] batadv0: entered promiscuous mode [ 104.306863][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.335207][ T6021] vlan2: entered promiscuous mode [ 104.368408][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.380661][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.426088][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.637176][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.723946][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 104.733741][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 104.743329][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.756910][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 105.189327][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 105.204277][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.442836][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 105.450976][ T24] usb 3-1: USB disconnect, device number 2 [ 105.970111][ T43] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 106.178989][ T43] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 106.315633][ T43] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 106.381825][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.874439][ T6030] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 107.900115][ T43] usb 5-1: string descriptor 0 read error: -71 [ 107.978638][ T6037] fido_id[6037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.021371][ T43] hub 5-1:32.0: USB hub found [ 108.080922][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 108.117338][ T6055] bridge1: entered promiscuous mode [ 108.214456][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 108.680810][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.776889][ T43] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 108.891058][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 108.950574][ T10] usb 1-1: config 0 has too many interfaces: 247, using maximum allowed: 32 [ 108.960246][ T6059] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 108.990386][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 247 [ 108.992639][ T43] usb 5-1: USB disconnect, device number 2 [ 109.029177][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 109.068318][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.098898][ T6065] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 109.180746][ T10] usb 1-1: config 0 descriptor?? [ 109.368619][ T6067] netlink: ct family unspecified [ 109.373946][ T6067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.454370][ T24] IPVS: starting estimator thread 0... [ 109.590918][ T6070] IPVS: using max 28 ests per chain, 67200 per kthread [ 110.768405][ T1211] usb 1-1: USB disconnect, device number 2 [ 110.871000][ T6079] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 110.921293][ T6079] macvtap1: entered allmulticast mode [ 110.954853][ T6079] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 110.984829][ T6079] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 111.081356][ T6079] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 111.950770][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.203483][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.220395][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 112.235522][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.248199][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.261397][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 112.281108][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.319811][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.375629][ T10] usb 4-1: config 0 descriptor?? [ 112.398948][ T6083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.582053][ T6097] Bluetooth: MGMT ver 1.23 [ 112.661507][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.702183][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.960218][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.158661][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.227731][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.229513][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.244099][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.259951][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.271566][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.279130][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.292395][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.406444][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.557575][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.657224][ T6109] netlink: 48 bytes leftover after parsing attributes in process `syz.2.50'. [ 114.669597][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.50'. [ 114.780891][ T5946] usb 4-1: USB disconnect, device number 2 [ 114.912567][ T6113] fido_id[6113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 117.634202][ T6142] netlink: 'syz.1.59': attribute type 3 has an invalid length. [ 117.641945][ T6142] netlink: 'syz.1.59': attribute type 3 has an invalid length. [ 117.651465][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'. [ 118.742915][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.018976][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.280786][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 119.360759][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.426259][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.481323][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.490424][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.941632][ T5904] usb 4-1: config 0 descriptor?? [ 119.959450][ T6160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.176445][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.200261][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.714653][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.715481][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.967139][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.981574][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.013265][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.049656][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.072410][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.102019][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.134312][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.150832][ T5904] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.223364][ T5904] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 121.244748][ T5904] usb 4-1: USB disconnect, device number 3 [ 121.450499][ T6181] fido_id[6181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 124.013436][ T6208] x_tables: unsorted underflow at hook 4 [ 124.545432][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 124.554619][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 124.566337][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 125.142429][ T6215] FAULT_INJECTION: forcing a failure. [ 125.142429][ T6215] name failslab, interval 1, probability 0, space 0, times 1 [ 125.241025][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.2.75 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 125.241056][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.241073][ T6215] Call Trace: [ 125.241085][ T6215] [ 125.241095][ T6215] dump_stack_lvl+0x189/0x250 [ 125.241133][ T6215] ? __pfx____ratelimit+0x10/0x10 [ 125.241156][ T6215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.241181][ T6215] ? __pfx__printk+0x10/0x10 [ 125.241216][ T6215] ? __pfx___might_resched+0x10/0x10 [ 125.241240][ T6215] ? fs_reclaim_acquire+0x7d/0x100 [ 125.241271][ T6215] should_fail_ex+0x414/0x560 [ 125.241299][ T6215] should_failslab+0xa8/0x100 [ 125.241325][ T6215] __kmalloc_cache_noprof+0x70/0x3d0 [ 125.241346][ T6215] ? bpf_raw_tp_link_attach+0x25f/0x6b0 [ 125.241375][ T6215] bpf_raw_tp_link_attach+0x25f/0x6b0 [ 125.241406][ T6215] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 125.241443][ T6215] ? __fget_files+0x2a/0x420 [ 125.241478][ T6215] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 125.241516][ T6215] __sys_bpf+0x3cd/0x860 [ 125.241550][ T6215] ? __pfx___sys_bpf+0x10/0x10 [ 125.241604][ T6215] ? ksys_write+0x22a/0x250 [ 125.241627][ T6215] ? __pfx_ksys_write+0x10/0x10 [ 125.241645][ T6215] ? rcu_is_watching+0x15/0xb0 [ 125.241677][ T6215] __x64_sys_bpf+0x7c/0x90 [ 125.241706][ T6215] do_syscall_64+0xfa/0x3b0 [ 125.241729][ T6215] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.241752][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.241773][ T6215] ? clear_bhb_loop+0x60/0xb0 [ 125.241799][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.241820][ T6215] RIP: 0033:0x7f159598ebe9 [ 125.241844][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.241863][ T6215] RSP: 002b:00007f159683f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.241885][ T6215] RAX: ffffffffffffffda RBX: 00007f1595bb5fa0 RCX: 00007f159598ebe9 [ 125.241901][ T6215] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000011 [ 125.241914][ T6215] RBP: 00007f159683f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.241927][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.241940][ T6215] R13: 00007f1595bb6038 R14: 00007f1595bb5fa0 R15: 00007ffd64064148 [ 125.241974][ T6215] [ 127.395751][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 127.441560][ T5897] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.520753][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 129.275082][ T6240] ======================================================= [ 129.275082][ T6240] WARNING: The mand mount option has been deprecated and [ 129.275082][ T6240] and is ignored by this kernel. Remove the mand [ 129.275082][ T6240] option from the mount to silence this warning. [ 129.275082][ T6240] ======================================================= [ 129.324396][ T6240] option changes via remount are deprecated (pid=6237 comm=syz.2.79) [ 129.379849][ T6241] libceph: resolve '. [ 129.379849][ T6241] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 129.379849][ T6241] ' (ret=-3): failed [ 129.482796][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.501486][ T5897] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 129.509137][ T5897] usb 4-1: can't read configurations, error -71 [ 129.518649][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 129.568169][ T6240] hsr_slave_0: left promiscuous mode [ 129.594214][ T6240] hsr_slave_1: left promiscuous mode [ 129.782544][ T6252] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.394009][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 131.403058][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 131.412936][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 132.107522][ T6271] FAULT_INJECTION: forcing a failure. [ 132.107522][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 132.120481][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.0.89 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 132.120508][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.120520][ T6271] Call Trace: [ 132.120529][ T6271] [ 132.120538][ T6271] dump_stack_lvl+0x189/0x250 [ 132.120567][ T6271] ? __pfx____ratelimit+0x10/0x10 [ 132.120590][ T6271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.120614][ T6271] ? __pfx__printk+0x10/0x10 [ 132.120675][ T6271] should_fail_ex+0x414/0x560 [ 132.120704][ T6271] should_failslab+0xa8/0x100 [ 132.120727][ T6271] kmem_cache_alloc_noprof+0x73/0x3c0 [ 132.120746][ T6271] ? radix_tree_node_alloc+0x7e/0x3a0 [ 132.120772][ T6271] radix_tree_node_alloc+0x7e/0x3a0 [ 132.120800][ T6271] idr_get_free+0x2b3/0xa70 [ 132.120835][ T6271] idr_alloc_u32+0x159/0x2d0 [ 132.120863][ T6271] ? __pfx_idr_alloc_u32+0x10/0x10 [ 132.120896][ T6271] ? do_raw_spin_lock+0x121/0x290 [ 132.120933][ T6271] idr_alloc_cyclic+0x9b/0x1b0 [ 132.120962][ T6271] bpf_link_prime+0x6b/0x220 [ 132.120993][ T6271] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 132.121023][ T6271] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 132.121060][ T6271] ? __fget_files+0x2a/0x420 [ 132.121096][ T6271] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 132.121134][ T6271] __sys_bpf+0x3cd/0x860 [ 132.121168][ T6271] ? __pfx___sys_bpf+0x10/0x10 [ 132.121215][ T6271] ? ksys_write+0x22a/0x250 [ 132.121237][ T6271] ? __pfx_ksys_write+0x10/0x10 [ 132.121254][ T6271] ? rcu_is_watching+0x15/0xb0 [ 132.121287][ T6271] __x64_sys_bpf+0x7c/0x90 [ 132.121317][ T6271] do_syscall_64+0xfa/0x3b0 [ 132.121340][ T6271] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.121363][ T6271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.121386][ T6271] ? clear_bhb_loop+0x60/0xb0 [ 132.121413][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.121433][ T6271] RIP: 0033:0x7f8ab558ebe9 [ 132.121453][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.121471][ T6271] RSP: 002b:00007f8ab6498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.121493][ T6271] RAX: ffffffffffffffda RBX: 00007f8ab57b5fa0 RCX: 00007f8ab558ebe9 [ 132.121509][ T6271] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000011 [ 132.121523][ T6271] RBP: 00007f8ab6498090 R08: 0000000000000000 R09: 0000000000000000 [ 132.121536][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.121548][ T6271] R13: 00007f8ab57b6038 R14: 00007f8ab57b5fa0 R15: 00007ffe6b910108 [ 132.121583][ T6271] [ 133.276508][ T6280] hub 8-0:1.0: USB hub found [ 133.386435][ T6280] hub 8-0:1.0: 1 port detected [ 134.611208][ T6308] x_tables: unsorted underflow at hook 4 [ 135.418047][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 135.433732][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 135.447125][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 136.407299][ T6322] NILFS (nullb0): couldn't find nilfs on the device [ 136.888835][ T30] audit: type=1326 audit(1754765312.429:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.191442][ T30] audit: type=1326 audit(1754765312.459:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.226585][ T30] audit: type=1326 audit(1754765312.459:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.632480][ T30] audit: type=1326 audit(1754765312.459:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.736397][ T30] audit: type=1326 audit(1754765312.469:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.803000][ T30] audit: type=1326 audit(1754765312.469:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 137.838728][ T30] audit: type=1326 audit(1754765312.469:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 138.025436][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.032130][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.166750][ T30] audit: type=1326 audit(1754765312.469:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 138.970929][ T30] audit: type=1326 audit(1754765312.469:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 139.069698][ T30] audit: type=1326 audit(1754765312.469:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.4.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f65e918ebe9 code=0x7ffc0000 [ 139.258996][ T6353] loop6: detected capacity change from 0 to 524288000 [ 139.365633][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.603326][ T6355] loop6: detected capacity change from 524288000 to 0 [ 139.626725][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.809901][ T5847] ldm_validate_partition_table(): Disk read failed. [ 139.838317][ T5847] Dev loop6: unable to read RDB block 0 [ 139.922780][ T5847] loop6: unable to read partition table [ 139.928789][ T5847] loop6: partition table beyond EOD, truncated [ 140.010059][ T6370] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$' [ 140.028840][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.3.118 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 140.028871][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.028885][ T6370] Call Trace: [ 140.028895][ T6370] [ 140.028905][ T6370] dump_stack_lvl+0x189/0x250 [ 140.028950][ T6370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.028977][ T6370] ? __pfx__printk+0x10/0x10 [ 140.029008][ T6370] ? kernfs_path_from_node+0x2c/0x260 [ 140.029037][ T6370] ? kernfs_path_from_node+0x2c/0x260 [ 140.029062][ T6370] ? kernfs_path_from_node+0x2c/0x260 [ 140.029091][ T6370] ? kernfs_path_from_node+0x22c/0x260 [ 140.029116][ T6370] ? kernfs_path_from_node+0x2c/0x260 [ 140.029147][ T6370] sysfs_warn_dup+0x8e/0xa0 [ 140.029172][ T6370] sysfs_do_create_link_sd+0xc0/0x110 [ 140.029202][ T6370] device_add_class_symlinks+0x1cf/0x240 [ 140.029241][ T6370] device_add+0x475/0xb50 [ 140.029280][ T6370] wiphy_register+0x199a/0x26b0 [ 140.029329][ T6370] ? __pfx_wiphy_register+0x10/0x10 [ 140.029357][ T6370] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 140.029397][ T6370] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 140.029436][ T6370] ieee80211_register_hw+0x33e1/0x4120 [ 140.029490][ T6370] ? ieee80211_register_hw+0x1471/0x4120 [ 140.029535][ T6370] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 140.029576][ T6370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 140.029622][ T6370] ? __hrtimer_setup+0x187/0x210 [ 140.029644][ T6370] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 140.029684][ T6370] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 140.029752][ T6370] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 140.029783][ T6370] ? trace_kmalloc+0x1f/0xd0 [ 140.029809][ T6370] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 140.029833][ T6370] ? kstrndup+0xbf/0x160 [ 140.029873][ T6370] hwsim_new_radio_nl+0xea4/0x1b10 [ 140.029910][ T6370] ? __pfx___nla_validate_parse+0x10/0x10 [ 140.029956][ T6370] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.030005][ T6370] ? __nla_parse+0x40/0x60 [ 140.030036][ T6370] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 140.030073][ T6370] genl_family_rcv_msg_doit+0x215/0x300 [ 140.030107][ T6370] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.030148][ T6370] ? bpf_lsm_capable+0x9/0x20 [ 140.030176][ T6370] ? security_capable+0x7e/0x2e0 [ 140.030214][ T6370] genl_rcv_msg+0x60e/0x790 [ 140.030246][ T6370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.030269][ T6370] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.030317][ T6370] netlink_rcv_skb+0x205/0x470 [ 140.030350][ T6370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.030376][ T6370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.030429][ T6370] ? down_read+0x1ad/0x2e0 [ 140.030460][ T6370] genl_rcv+0x28/0x40 [ 140.030481][ T6370] netlink_unicast+0x75c/0x8e0 [ 140.030524][ T6370] netlink_sendmsg+0x805/0xb30 [ 140.030568][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.030611][ T6370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.030640][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.030676][ T6370] __sock_sendmsg+0x21c/0x270 [ 140.030706][ T6370] ____sys_sendmsg+0x505/0x830 [ 140.030747][ T6370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.030794][ T6370] ? import_iovec+0x74/0xa0 [ 140.030836][ T6370] ___sys_sendmsg+0x21f/0x2a0 [ 140.030875][ T6370] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.030952][ T6370] ? __fget_files+0x2a/0x420 [ 140.030976][ T6370] ? __fget_files+0x3a0/0x420 [ 140.031015][ T6370] __x64_sys_sendmsg+0x19b/0x260 [ 140.031062][ T6370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.031111][ T6370] ? rcu_is_watching+0x15/0xb0 [ 140.031144][ T6370] ? do_syscall_64+0xbe/0x3b0 [ 140.031175][ T6370] do_syscall_64+0xfa/0x3b0 [ 140.031199][ T6370] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.031222][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.031245][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 140.031273][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.031294][ T6370] RIP: 0033:0x7f83c5f8ebe9 [ 140.031314][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.031333][ T6370] RSP: 002b:00007f83c6ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.031356][ T6370] RAX: ffffffffffffffda RBX: 00007f83c61b5fa0 RCX: 00007f83c5f8ebe9 [ 140.031373][ T6370] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 140.031387][ T6370] RBP: 00007f83c6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.031401][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.031414][ T6370] R13: 00007f83c61b6038 R14: 00007f83c61b5fa0 R15: 00007ffe0ecc6358 [ 140.031451][ T6370] [ 140.535820][ T6366] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.116'. [ 141.008259][ T6366] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.116'. [ 141.633084][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 141.710978][ T6377] syz_tun: entered promiscuous mode [ 141.740229][ T6377] syz_tun: left promiscuous mode [ 143.153005][ T6386] netlink: 64 bytes leftover after parsing attributes in process `syz.0.125'. [ 144.549155][ T6409] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$' [ 144.570015][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.1.130 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 144.570039][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.570049][ T6409] Call Trace: [ 144.570056][ T6409] [ 144.570063][ T6409] dump_stack_lvl+0x189/0x250 [ 144.570088][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.570107][ T6409] ? __pfx__printk+0x10/0x10 [ 144.570128][ T6409] ? kernfs_path_from_node+0x2c/0x260 [ 144.570152][ T6409] ? kernfs_path_from_node+0x2c/0x260 [ 144.570169][ T6409] ? kernfs_path_from_node+0x2c/0x260 [ 144.570190][ T6409] ? kernfs_path_from_node+0x22c/0x260 [ 144.570207][ T6409] ? kernfs_path_from_node+0x2c/0x260 [ 144.570229][ T6409] sysfs_warn_dup+0x8e/0xa0 [ 144.570247][ T6409] sysfs_do_create_link_sd+0xc0/0x110 [ 144.570267][ T6409] device_add_class_symlinks+0x1cf/0x240 [ 144.570295][ T6409] device_add+0x475/0xb50 [ 144.570322][ T6409] wiphy_register+0x199a/0x26b0 [ 144.570357][ T6409] ? __pfx_wiphy_register+0x10/0x10 [ 144.570376][ T6409] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 144.570404][ T6409] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 144.570431][ T6409] ieee80211_register_hw+0x33e1/0x4120 [ 144.570475][ T6409] ? ieee80211_register_hw+0x1471/0x4120 [ 144.570506][ T6409] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 144.570535][ T6409] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.570567][ T6409] ? __hrtimer_setup+0x187/0x210 [ 144.570582][ T6409] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 144.570611][ T6409] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 144.570662][ T6409] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 144.570692][ T6409] ? trace_kmalloc+0x1f/0xd0 [ 144.570710][ T6409] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 144.570735][ T6409] ? kstrndup+0xbf/0x160 [ 144.570763][ T6409] hwsim_new_radio_nl+0xea4/0x1b10 [ 144.570788][ T6409] ? __pfx___nla_validate_parse+0x10/0x10 [ 144.570820][ T6409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.570845][ T6409] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 144.570871][ T6409] ? __nla_parse+0x40/0x60 [ 144.570893][ T6409] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 144.570917][ T6409] genl_family_rcv_msg_doit+0x215/0x300 [ 144.570940][ T6409] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 144.570968][ T6409] ? bpf_lsm_capable+0x9/0x20 [ 144.570987][ T6409] ? security_capable+0x7e/0x2e0 [ 144.571013][ T6409] genl_rcv_msg+0x60e/0x790 [ 144.571035][ T6409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.571051][ T6409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 144.571085][ T6409] netlink_rcv_skb+0x205/0x470 [ 144.571107][ T6409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.571125][ T6409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.571161][ T6409] ? down_read+0x1ad/0x2e0 [ 144.571181][ T6409] genl_rcv+0x28/0x40 [ 144.571209][ T6409] netlink_unicast+0x75c/0x8e0 [ 144.571239][ T6409] netlink_sendmsg+0x805/0xb30 [ 144.571270][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.571300][ T6409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.571315][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.571339][ T6409] __sock_sendmsg+0x21c/0x270 [ 144.571361][ T6409] ____sys_sendmsg+0x505/0x830 [ 144.571390][ T6409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.571423][ T6409] ? import_iovec+0x74/0xa0 [ 144.571454][ T6409] ___sys_sendmsg+0x21f/0x2a0 [ 144.571481][ T6409] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.571535][ T6409] ? __fget_files+0x2a/0x420 [ 144.571552][ T6409] ? __fget_files+0x3a0/0x420 [ 144.571578][ T6409] __x64_sys_sendmsg+0x19b/0x260 [ 144.571605][ T6409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.571639][ T6409] ? rcu_is_watching+0x15/0xb0 [ 144.571661][ T6409] ? do_syscall_64+0xbe/0x3b0 [ 144.571682][ T6409] do_syscall_64+0xfa/0x3b0 [ 144.571699][ T6409] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.571714][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.571730][ T6409] ? clear_bhb_loop+0x60/0xb0 [ 144.571749][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.571764][ T6409] RIP: 0033:0x7fc9def8ebe9 [ 144.571778][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.571791][ T6409] RSP: 002b:00007fc9dfe52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.571808][ T6409] RAX: ffffffffffffffda RBX: 00007fc9df1b5fa0 RCX: 00007fc9def8ebe9 [ 144.571820][ T6409] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 144.571830][ T6409] RBP: 00007fc9df011e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.571839][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.571848][ T6409] R13: 00007fc9df1b6038 R14: 00007fc9df1b5fa0 R15: 00007fff9c221fb8 [ 144.571873][ T6409] [ 144.831099][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.057925][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.259343][ T6414] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.511653][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 145.726060][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.737808][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.411959][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.468362][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.531868][ T5904] usb 3-1: config 0 descriptor?? [ 146.595828][ T6406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.839624][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.890264][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.274014][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.339686][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.426006][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.447165][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.554634][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.657948][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.658293][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.721480][ T5904] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 147.776107][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.795927][ T5904] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.912188][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.898890][ T5946] usb 3-1: USB disconnect, device number 3 [ 149.390934][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 149.983765][ T6466] misc userio: No port type given on /dev/userio [ 150.409816][ T6475] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 150.592197][ T6475] macvtap1: entered allmulticast mode [ 150.612755][ T6475] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 151.318674][ T6475] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 151.358537][ T6475] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 152.084729][ T6487] nvme_fabrics: unknown parameter or missing value '#! ./file0/file0 ' in ctrl creation request [ 153.090852][ T1211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.175285][ T6505] process 'syz.0.153' launched './file0' with NULL argv: empty string added [ 153.240762][ T1211] usb 2-1: device descriptor read/64, error -71 [ 153.511029][ T1211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.716627][ T1211] usb 2-1: device descriptor read/64, error -71 [ 153.773824][ T6508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.154'. [ 153.782978][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 154.151691][ T1211] usb usb2-port1: attempt power cycle [ 154.541114][ T1211] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.628367][ T1211] usb 2-1: device descriptor read/8, error -71 [ 154.961426][ T1211] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.312308][ T1211] usb 2-1: device descriptor read/8, error -71 [ 155.471236][ T1211] usb usb2-port1: unable to enumerate USB device [ 155.902650][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.191487][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 157.228406][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.300445][ T43] usb 5-1: config 220 has no interface number 2 [ 157.377794][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.426628][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 157.502139][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 157.527006][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 157.571790][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.582464][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.609825][ T43] usb 5-1: Product: syz [ 157.623735][ T43] usb 5-1: Manufacturer: syz [ 157.641031][ T43] usb 5-1: SerialNumber: syz [ 157.893414][ T43] usb 5-1: selecting invalid altsetting 0 [ 157.904349][ T43] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 157.918900][ T43] usb 5-1: No valid video chain found. [ 158.116217][ T43] usb 5-1: selecting invalid altsetting 0 [ 158.208712][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 158.313752][ T43] usb 5-1: USB disconnect, device number 3 [ 158.528958][ T6536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.162'. [ 158.538299][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.162'. [ 159.173602][ T6538] netlink: 64 bytes leftover after parsing attributes in process `syz.4.163'. [ 159.806474][ T6540] loop6: detected capacity change from 0 to 524288000 [ 160.166089][ T6541] loop6: detected capacity change from 524288000 to 0 [ 160.190635][ T6546] vlan2: entered promiscuous mode [ 160.196224][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.302480][ T6548] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.167'. [ 160.310000][ T6540] ldm_validate_partition_table(): Disk read failed. [ 160.340857][ T6540] Dev loop6: unable to read RDB block 0 [ 160.346461][ T6540] loop6: unable to read partition table [ 160.528883][ T6540] loop6: partition table beyond EOD, truncated [ 160.586175][ T6540] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 163.546233][ T6552] vlan2: entered promiscuous mode [ 164.554507][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.177'. [ 164.564047][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.177'. [ 165.824629][ T6573] team_slave_0: entered promiscuous mode [ 165.830579][ T6573] team_slave_1: entered promiscuous mode [ 165.870791][ T6573] vlan2: entered promiscuous mode [ 165.902200][ T6573] team0: entered promiscuous mode [ 165.980570][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.142896][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.338451][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.816316][ T6610] netlink: 188 bytes leftover after parsing attributes in process `syz.3.185'. [ 167.862865][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 167.864343][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.916912][ T6615] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.939714][ T6615] cramfs: wrong magic [ 167.977090][ T6613] vlan2: entered allmulticast mode [ 167.999804][ T6613] bridge0: port 3(vlan2) entered blocking state [ 168.017402][ T6613] bridge0: port 3(vlan2) entered disabled state [ 168.036694][ T6613] vlan2: entered promiscuous mode [ 168.049341][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.058027][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.448069][ T6621] netlink: 'syz.2.189': attribute type 3 has an invalid length. [ 169.456132][ T6621] netlink: 'syz.2.189': attribute type 3 has an invalid length. [ 169.469930][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.189'. [ 170.102242][ T49] bridge_slave_1: left allmulticast mode [ 170.170846][ T49] bridge_slave_1: left promiscuous mode [ 170.217916][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.286749][ T49] bridge_slave_0: left allmulticast mode [ 170.310978][ T49] bridge_slave_0: left promiscuous mode [ 170.318145][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.390172][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.401979][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.410582][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.430445][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.454033][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.630565][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 171.773233][ T6636] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 172.701807][ T5843] Bluetooth: hci3: command tx timeout [ 174.024638][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.048185][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.105457][ T49] bond0 (unregistering): Released all slaves [ 174.781155][ T5843] Bluetooth: hci3: command tx timeout [ 175.373906][ T6678] netlink: 96 bytes leftover after parsing attributes in process `syz.3.202'. [ 175.384367][ T6678] 8021q: VLANs not supported on ip6gre0 [ 176.881136][ T5843] Bluetooth: hci3: command tx timeout [ 177.914020][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 178.948333][ T5843] Bluetooth: hci3: command tx timeout [ 179.180920][ T49] hsr_slave_0: left promiscuous mode [ 179.292496][ T49] hsr_slave_1: left promiscuous mode [ 179.298714][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.307329][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.059022][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.080816][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.309524][ T6720] netlink: 64 bytes leftover after parsing attributes in process `syz.1.213'. [ 180.354247][ T49] veth1_macvtap: left promiscuous mode [ 180.360528][ T49] veth0_macvtap: left promiscuous mode [ 180.371267][ T49] veth1_vlan: left promiscuous mode [ 180.690150][ T49] veth0_vlan: left promiscuous mode [ 181.936200][ T49] team0 (unregistering): Port device team_slave_1 removed [ 181.977878][ T49] team0 (unregistering): Port device team_slave_0 removed [ 182.332771][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.211'. [ 182.653160][ T6729] bridge_slave_0: left allmulticast mode [ 182.662560][ T6729] bridge_slave_0: left promiscuous mode [ 182.669653][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.708275][ T6729] bridge_slave_1: left allmulticast mode [ 182.728085][ T6729] bridge_slave_1: left promiscuous mode [ 182.751356][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.778945][ T6729] bond0: (slave bond_slave_0): Releasing backup interface [ 182.804368][ T6729] bond0: (slave bond_slave_1): Releasing backup interface [ 182.867319][ T6729] team0: Port device team_slave_0 removed [ 182.933734][ T6729] team0: Port device team_slave_1 removed [ 182.951976][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.959485][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.981366][ T6729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.991535][ T6729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.032300][ T6734] bridge0: entered promiscuous mode [ 183.038163][ T6734] vlan3: entered promiscuous mode [ 183.175423][ T6627] chnl_net:caif_netlink_parms(): no params data found [ 183.381150][ T5918] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 183.502192][ T6742] mkiss: ax0: crc mode is auto. [ 183.609388][ T5918] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 183.649304][ T5918] usb 4-1: config 8 has no interface number 0 [ 183.710312][ T5918] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 183.800979][ T5918] usb 4-1: config 8 interface 177 has no altsetting 0 [ 183.817328][ T5918] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 183.828728][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.840961][ T6744] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.766977][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.791871][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.799134][ T6627] bridge_slave_0: entered allmulticast mode [ 184.849662][ T6627] bridge_slave_0: entered promiscuous mode [ 184.881116][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.944501][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.982770][ T6627] bridge_slave_1: entered allmulticast mode [ 185.021330][ T6627] bridge_slave_1: entered promiscuous mode [ 185.173902][ T6777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.227'. [ 185.182963][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 185.920230][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.005948][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.075921][ T6627] team0: Port device team_slave_0 added [ 187.383207][ T6627] team0: Port device team_slave_1 added [ 189.326223][ T5918] usb 4-1: string descriptor 0 read error: -32 [ 189.382638][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.394983][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 189.409826][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.537501][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.586647][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.623485][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.718390][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.940772][ T5918] ir_toy 4-1:8.177: could not write reset command: -110 [ 189.966420][ T5918] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 190.052705][ T5918] usb 4-1: USB disconnect, device number 6 [ 190.248235][ T6627] hsr_slave_0: entered promiscuous mode [ 190.290024][ T6627] hsr_slave_1: entered promiscuous mode [ 190.313290][ T6627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.344524][ T6627] Cannot create hsr debugfs directory [ 190.991031][ T6823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.942977][ T6851] x_tables: unsorted underflow at hook 4 [ 193.513247][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 194.467658][ T6627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.785270][ T6627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.111522][ T6627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.333684][ T6872] vlan3: entered promiscuous mode [ 195.362993][ T6872] dummy0: entered promiscuous mode [ 195.694908][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 195.707738][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 195.728948][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 195.772119][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 195.796281][ T6627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.815126][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 196.070373][ T6895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.717215][ T6895] netlink: 'syz.2.256': attribute type 11 has an invalid length. [ 196.729749][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.086731][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.168801][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.176147][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.185719][ T5946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.415640][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 197.596933][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.816012][ T5946] usb 4-1: config 9 has an invalid interface number: 5 but max is 0 [ 197.876788][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.884078][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.985297][ T5946] usb 4-1: config 9 has no interface number 0 [ 198.087610][ T5946] usb 4-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 198.237361][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 198.247973][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 198.260835][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 198.295931][ T5946] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.581078][ T5946] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 198.637383][ T5946] usb 4-1: config 9 interface 5 has no altsetting 0 [ 198.667002][ T5946] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 198.792720][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.816990][ T5946] usb 4-1: Product: syz [ 198.827157][ T5946] usb 4-1: Manufacturer: syz [ 198.831906][ T5946] usb 4-1: SerialNumber: syz [ 199.210939][ T5946] usb 4-1: USB disconnect, device number 7 [ 199.462300][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.475558][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.473052][ T6956] vlan2: entered promiscuous mode [ 200.478367][ T6956] dummy0: entered promiscuous mode [ 201.846266][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.540958][ T5946] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.710760][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 202.758850][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.306714][ T5946] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.389377][ T5946] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 203.435766][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 203.461601][ T5946] usb 3-1: Product: syz [ 203.480727][ T5946] usb 3-1: Manufacturer: syz [ 203.485404][ T5946] usb 3-1: SerialNumber: syz [ 203.574870][ T5946] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12 [ 204.084775][ T6627] veth0_vlan: entered promiscuous mode [ 204.228915][ T6627] veth1_vlan: entered promiscuous mode [ 204.563766][ T6627] veth0_macvtap: entered promiscuous mode [ 204.629289][ T6627] veth1_macvtap: entered promiscuous mode [ 205.143496][ T5946] usb 3-1: USB disconnect, device number 4 [ 205.233123][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.257267][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.268931][ T5946] appletouch 3-1:1.0: input: appletouch disconnected [ 205.285822][ T6627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.318652][ T6627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.341054][ T6627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.379967][ T6627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.650177][ T7001] syz.2.275 (7001) used greatest stack depth: 19424 bytes left [ 205.813049][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.867837][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.466219][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.485666][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.826391][ T7031] 9pnet_fd: Insufficient options for proto=fd [ 207.807003][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.180'. [ 208.841964][ T7043] syz_tun: entered promiscuous mode [ 209.045432][ T7043] syz_tun: left promiscuous mode [ 209.994356][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 211.971887][ T7089] x_tables: unsorted underflow at hook 4 [ 213.331214][ T7101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.296'. [ 215.058334][ T1211] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 215.547546][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 215.717976][ T1211] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 215.841523][ T1211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.063779][ T1211] usb 4-1: config 0 has no interface number 0 [ 216.135858][ T1211] usb 4-1: config 0 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 216.252220][ T1211] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.598652][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.872344][ T7123] Bluetooth: hci4: command 0x0406 tx timeout [ 216.878441][ T7123] Bluetooth: hci2: command 0x0406 tx timeout [ 216.885731][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 216.897121][ T1211] usb 4-1: config 0 descriptor?? [ 218.655603][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 218.927436][ T7171] syz_tun: entered promiscuous mode [ 218.950097][ T7171] syz_tun: left promiscuous mode [ 219.304600][ T43] usb 4-1: USB disconnect, device number 8 [ 219.712950][ T7196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.319'. [ 220.225730][ T7207] 9pnet_fd: Insufficient options for proto=fd [ 222.230835][ T5950] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 222.362106][ T7234] netlink: 'syz.0.330': attribute type 3 has an invalid length. [ 222.371509][ T7234] netlink: 'syz.0.330': attribute type 3 has an invalid length. [ 222.380397][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 222.422433][ T5950] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 222.440948][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.627362][ T5950] usb 4-1: config 0 descriptor?? [ 222.920729][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 224.053977][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.065843][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 224.072038][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.116903][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.136068][ T5918] usb 3-1: config 218 has an invalid interface number: 135 but max is 0 [ 224.156509][ T5918] usb 3-1: config 218 has no interface number 0 [ 224.302313][ T5918] usb 3-1: config 218 interface 135 has no altsetting 0 [ 224.365488][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 224.409578][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.462843][ T7256] vlan3: entered promiscuous mode [ 224.471309][ T5918] usb 3-1: Product: syz [ 224.475547][ T5918] usb 3-1: Manufacturer: syz [ 224.480176][ T5918] usb 3-1: SerialNumber: syz [ 225.277596][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.350781][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.351247][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.369701][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.517907][ T5918] usb 3-1: USB disconnect, device number 5 [ 225.724021][ T7269] x_tables: unsorted underflow at hook 4 [ 227.222799][ T5950] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 227.248794][ T5950] asix 4-1:0.0: probe with driver asix failed with error -71 [ 227.344163][ T5950] usb 4-1: USB disconnect, device number 9 [ 230.076065][ T7320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 230.116616][ T7320] overlayfs: failed to set xattr on upper [ 230.199881][ T7320] overlayfs: ...falling back to redirect_dir=nofollow. [ 230.270045][ T7320] overlayfs: ...falling back to metacopy=off. [ 230.308799][ T7320] overlayfs: ...falling back to index=off. [ 230.366530][ T7320] overlayfs: ...falling back to uuid=null. [ 230.691762][ T7330] x_tables: unsorted underflow at hook 4 [ 232.325838][ T7348] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 232.450748][ T7345] ip6gretap0: entered promiscuous mode [ 232.457204][ T7345] vlan2: entered promiscuous mode [ 232.504130][ T7353] netlink: 36 bytes leftover after parsing attributes in process `syz.5.358'. [ 232.766874][ T7364] netlink: 208424 bytes leftover after parsing attributes in process `syz.3.361'. [ 232.780357][ T7364] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 232.789644][ T7364] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 232.826245][ T7364] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 232.837033][ T7364] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 234.622954][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 234.726850][ T7388] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 234.767916][ T7388] macvtap1: entered allmulticast mode [ 234.791571][ T7388] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 235.217559][ T7396] netlink: 'syz.5.370': attribute type 4 has an invalid length. [ 235.236988][ T7388] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 235.249055][ T7388] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 235.290968][ T7396] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.370'. [ 237.416854][ T7417] netlink: 'syz.5.374': attribute type 4 has an invalid length. [ 239.861867][ T7445] bridge1: entered promiscuous mode [ 244.949081][ T7505] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 246.046132][ T7518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.598159][ T7534] bridge0: entered promiscuous mode [ 248.628952][ T7534] vlan2: entered promiscuous mode [ 250.331612][ T7559] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 250.836558][ T5946] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 250.965261][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.007639][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.146334][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 251.185457][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.481339][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.490239][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.516536][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.559769][ T5946] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.587589][ T5946] usb 2-1: can't read configurations, error -71 [ 251.941027][ T7591] sctp: [Deprecated]: syz.0.419 (pid 7591) Use of int in max_burst socket option deprecated. [ 251.941027][ T7591] Use struct sctp_assoc_value instead [ 251.998659][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 252.334675][ T7586] netlink: 'syz.5.420': attribute type 3 has an invalid length. [ 252.342429][ T7586] netlink: 'syz.5.420': attribute type 3 has an invalid length. [ 252.350505][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.420'. [ 252.864707][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.423'. [ 252.879151][ T7607] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 253.198644][ T7611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 253.207632][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.425'. [ 255.192166][ T7637] syz_tun: entered promiscuous mode [ 255.316645][ T7637] syz_tun: left promiscuous mode [ 256.176034][ T7653] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 256.744996][ T7661] __nla_validate_parse: 2 callbacks suppressed [ 256.745019][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 257.367425][ T7673] vlan2: entered promiscuous mode [ 257.560339][ T7679] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 258.080676][ T7685] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 258.467452][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 258.476709][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 258.486344][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 258.963801][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.971010][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 258.981538][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.029804][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.450'. [ 259.038821][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.450'. [ 259.121319][ T7696] syz_tun: entered promiscuous mode [ 259.177406][ T7696] syz_tun: left promiscuous mode [ 260.556578][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 260.566656][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 260.575551][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 260.871333][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.878174][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.176798][ T7743] netlink: 'syz.5.465': attribute type 9 has an invalid length. [ 261.191306][ T7743] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.200340][ T7743] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.209250][ T7743] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.218008][ T7743] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.749008][ T7743] netlink: 'syz.5.465': attribute type 9 has an invalid length. [ 261.800874][ T7743] __nla_validate_parse: 4 callbacks suppressed [ 261.800892][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 263.965719][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 263.974691][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 263.983556][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 264.933789][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 264.943079][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 264.952646][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 265.894631][ T7811] capability: warning: `syz.0.482' uses 32-bit capabilities (legacy support in use) [ 266.195404][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 266.204385][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 266.213316][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 267.375979][ T7835] mkiss: ax0: crc mode is auto. [ 267.700865][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 268.686607][ T24] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 268.701231][ T24] usb 3-1: config 8 has no interface number 0 [ 268.755731][ T24] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 268.809812][ T24] usb 3-1: config 8 interface 177 has no altsetting 0 [ 269.046934][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 269.199614][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.218527][ T7835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.568478][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 271.979709][ T24] usb 3-1: string descriptor 0 read error: -71 [ 272.011658][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 272.695518][ T24] ir_toy 3-1:8.177: could not write reset command: -110 [ 272.741101][ T24] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 272.793134][ T24] usb 3-1: USB disconnect, device number 6 [ 272.935554][ T7898] bridge0: entered promiscuous mode [ 272.941130][ T5946] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 272.970875][ T7898] vlan2: entered promiscuous mode [ 273.159806][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 273.332149][ T5946] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 273.407384][ T5946] usb 2-1: config 0 has no interface number 0 [ 273.496618][ T5946] usb 2-1: config 0 interface 29 has no altsetting 0 [ 273.687200][ T5946] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 273.851583][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.917020][ T5946] usb 2-1: Product: syz [ 273.970756][ T5946] usb 2-1: Manufacturer: syz [ 273.978423][ T5946] usb 2-1: SerialNumber: syz [ 274.014619][ T5946] usb 2-1: config 0 descriptor?? [ 274.226591][ T5946] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 274.270912][ T5946] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 274.282529][ T5946] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 274.300493][ T5946] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 274.391436][ T5946] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 274.473192][ T5946] usb 2-1: USB disconnect, device number 8 [ 275.638969][ T7934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.511'. [ 275.648250][ T7934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 283.441919][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 283.485211][ T8011] syz_tun: entered promiscuous mode [ 283.507786][ T8011] syz_tun: left promiscuous mode [ 283.611241][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 283.627670][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 284.072920][ T5950] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 284.307050][ T5946] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 284.903141][ T5950] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 284.930101][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 284.939687][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.964726][ T5946] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 284.984985][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.001144][ T5950] usb 4-1: config 0 has no interface number 0 [ 285.007386][ T5950] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 285.025658][ T5946] usb 3-1: config 0 descriptor?? [ 285.037554][ T5950] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 285.056178][ T5950] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 285.065993][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.087133][ T5950] usb 4-1: config 0 descriptor?? [ 285.139482][ T8022] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 285.173949][ T5950] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 286.242097][ T5946] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 286.250878][ T1160] usb 4-1: Failed to submit usb control message: -110 [ 286.258020][ T1160] usb 4-1: unable to send the bmi data to the device: -110 [ 286.278090][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.287489][ T1160] usb 4-1: unable to get target info from device [ 286.294563][ T1160] usb 4-1: could not get target info (-110) [ 286.301467][ T5946] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 286.308989][ T5946] usb 3-1: media controller created [ 286.334956][ T1160] usb 4-1: could not probe fw (-110) [ 286.381441][ T8052] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 286.405459][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.702988][ T43] usb 4-1: USB disconnect, device number 10 [ 288.337857][ T5946] az6027: usb out operation failed. (-71) [ 288.361068][ T5946] az6027: usb out operation failed. (-71) [ 288.366882][ T5946] stb0899_attach: Driver disabled by Kconfig [ 288.382518][ T5946] az6027: no front-end attached [ 288.382518][ T5946] [ 288.392812][ T5946] az6027: usb out operation failed. (-71) [ 288.398659][ T5946] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 288.527834][ T8076] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.539'. [ 288.809021][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 288.875049][ T8076] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.539'. [ 289.097536][ T5946] dvb-usb: schedule remote query interval to 400 msecs. [ 289.139934][ T5946] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 289.288399][ T5946] usb 3-1: USB disconnect, device number 7 [ 290.361637][ T8090] loop6: detected capacity change from 0 to 524288000 [ 290.403487][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.422958][ T5946] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 290.446554][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.528374][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.822177][ T8095] loop6: detected capacity change from 524288000 to 0 [ 290.873433][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 291.670812][ T8090] ldm_validate_partition_table(): Disk read failed. [ 291.774433][ T8090] Dev loop6: unable to read RDB block 0 [ 291.804674][ T8090] loop6: unable to read partition table [ 291.824563][ T8090] loop6: partition table beyond EOD, truncated [ 291.857499][ T8090] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 292.511141][ T8105] x_tables: unsorted underflow at hook 4 [ 293.382630][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 293.447586][ T8128] vlan3: entered allmulticast mode [ 293.491769][ T8128] bridge_slave_0: entered allmulticast mode [ 293.534772][ T8128] bridge0: port 1(vlan3) entered blocking state [ 293.572236][ T8128] bridge0: port 1(vlan3) entered disabled state [ 293.640169][ T8128] vlan3: entered promiscuous mode [ 293.660875][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 293.664739][ T8128] bridge_slave_0: entered promiscuous mode [ 295.014824][ T8155] vlan4: entered promiscuous mode [ 295.049021][ T8155] team0: entered promiscuous mode [ 300.080762][ T1211] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 301.090723][ T1211] usb 4-1: Invalid ep0 maxpacket: 32 [ 301.149026][ T8233] vlan3: entered promiscuous mode [ 301.206631][ T8241] loop6: detected capacity change from 0 to 524288000 [ 301.220727][ T1211] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 301.234330][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.242571][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.252241][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.260246][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.528088][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.528105][ T8244] loop6: detected capacity change from 524288000 to 0 [ 301.540848][ T5847] ldm_validate_partition_table(): Disk read failed. [ 302.160528][ T5847] Dev loop6: unable to read RDB block 0 [ 302.166629][ T5847] loop6: unable to read partition table [ 302.176610][ T5847] loop6: partition table beyond EOD, truncated [ 302.193319][ T1211] usb 4-1: Invalid ep0 maxpacket: 32 [ 302.290978][ T1211] usb usb4-port1: attempt power cycle [ 302.476651][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 302.518944][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 302.620213][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 302.767937][ T8258] netlink: 'syz.5.584': attribute type 3 has an invalid length. [ 302.776983][ T8258] netlink: 'syz.5.584': attribute type 3 has an invalid length. [ 302.801844][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.584'. [ 304.948735][ T8284] 9pnet_fd: Insufficient options for proto=fd [ 305.554980][ T8288] sctp: failed to load transform for md5: -2 [ 305.571479][ T8286] sctp: failed to load transform for md5: -2 [ 306.194642][ T5946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 306.563292][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.889283][ T5946] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.900061][ T5946] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.915040][ T5946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 307.924761][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.933737][ T5946] usb 4-1: SerialNumber: syz [ 308.314808][ T5946] usbtest 4-1:1.0: Linux user mode ISO test driver [ 308.340775][ T5946] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 308.381702][ T5946] usb 4-1: USB disconnect, device number 14 [ 308.640379][ T8322] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.595'. [ 308.794406][ T8322] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.595'. [ 310.557618][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 312.355867][ T8357] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.416288][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 313.425381][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 313.434372][ T8369] netlink: 116 bytes leftover after parsing attributes in process `syz.0.609'. [ 313.443872][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 316.597541][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 318.182484][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 318.297705][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.339494][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.404126][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.420809][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 318.441191][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.446730][ T8400] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.618'. [ 318.458660][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.465892][ T5904] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 318.465924][ T5904] usb 6-1: config 252 has no interface number 0 [ 318.465968][ T5904] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.475240][ T5904] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 318.531945][ T8400] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.618'. [ 318.619381][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.671093][ T5904] usb 6-1: Product: syz [ 318.693178][ T5904] usb 6-1: Manufacturer: syz [ 318.707585][ T5904] usb 6-1: SerialNumber: syz [ 318.766137][ T5904] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 318.970455][ T6203] usb 6-1: Failed to submit usb control message: -71 [ 318.972054][ T5904] usb 6-1: USB disconnect, device number 2 [ 318.989740][ T6203] usb 6-1: unable to send the bmi data to the device: -71 [ 319.010688][ T6203] usb 6-1: unable to get target info from device [ 319.017098][ T6203] usb 6-1: could not get target info (-71) [ 319.030693][ T6203] usb 6-1: could not probe fw (-71) [ 319.299569][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 319.425101][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 319.639279][ T8414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.620'. [ 319.823780][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.857786][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.878241][ T8398] bridge_slave_0: entered allmulticast mode [ 319.887400][ T8398] bridge_slave_0: entered promiscuous mode [ 319.898852][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.921038][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.938740][ T8398] bridge_slave_1: entered allmulticast mode [ 319.952183][ T8398] bridge_slave_1: entered promiscuous mode [ 320.008863][ T8235] Set syz1 is full, maxelem 65536 reached [ 320.101193][ T1211] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 320.621844][ T51] Bluetooth: hci5: command tx timeout [ 320.650988][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 320.845499][ T1211] usb 3-1: too many endpoints for config 0 interface 0 altsetting 61: 48, using maximum allowed: 30 [ 320.858622][ T1211] usb 3-1: config 0 interface 0 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 320.880183][ T1211] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.901205][ T1211] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 320.902387][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.932846][ T24] kernel read not supported for file [fanotify] (pid: 24 comm: kworker/1:0) [ 321.011248][ T1211] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 321.057478][ T1211] usb 3-1: Product: syz [ 321.062010][ T1211] usb 3-1: Manufacturer: syz [ 321.066646][ T1211] usb 3-1: SerialNumber: syz [ 321.074395][ T1211] usb 3-1: config 0 descriptor?? [ 321.086239][ T1211] usb 3-1: selecting invalid altsetting 1 [ 321.118699][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.762058][ T1211] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 321.795894][ T8435] kvm: user requested TSC rate below hardware speed [ 321.940474][ T1211] usb 3-1: USB disconnect, device number 8 [ 321.982963][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.106199][ T8398] team0: Port device team_slave_0 added [ 322.142961][ T8398] team0: Port device team_slave_1 added [ 322.148361][ T8441] sctp: failed to load transform for md5: -2 [ 322.306974][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.327132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.430420][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.483716][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.537969][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.554387][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.674516][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.700885][ T51] Bluetooth: hci5: command tx timeout [ 322.707547][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.733899][ T8459] vivid-000: disconnect [ 323.861105][ T5841] syz-executor (5841) used greatest stack depth: 19240 bytes left [ 323.874363][ T8450] vivid-000: reconnect [ 324.076780][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.165994][ T43] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 324.522605][ T43] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 324.535382][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.545471][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.873955][ T51] Bluetooth: hci5: command tx timeout [ 325.046046][ T43] usb 3-1: Product: syz [ 325.050292][ T43] usb 3-1: Manufacturer: syz [ 325.059538][ T43] usb 3-1: SerialNumber: syz [ 325.072365][ T43] usb 3-1: config 0 descriptor?? [ 325.101251][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 325.117342][ T43] imon_raw 3-1:0.0: IR endpoint missing [ 325.209154][ T8479] NILFS (nullb0): couldn't find nilfs on the device [ 325.727523][ T43] usb 3-1: USB disconnect, device number 9 [ 326.671732][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 326.699422][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.852470][ T8398] hsr_slave_0: entered promiscuous mode [ 326.859302][ T8398] hsr_slave_1: entered promiscuous mode [ 326.881527][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.892998][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.908939][ T8398] Cannot create hsr debugfs directory [ 326.926761][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 326.946928][ T24] usb 4-1: can't read configurations, error -71 [ 326.979139][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.022705][ T8493] vlan4: entered promiscuous mode [ 327.033090][ T5843] Bluetooth: hci5: command tx timeout [ 329.742274][ T13] bridge_slave_1: left allmulticast mode [ 329.822863][ T13] bridge_slave_1: left promiscuous mode [ 329.916259][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.758421][ T13] bridge_slave_0: left allmulticast mode [ 330.778193][ T13] bridge_slave_0: left promiscuous mode [ 330.830449][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.021738][ T8531] x_tables: unsorted underflow at hook 4 [ 333.751385][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 334.375645][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 334.384712][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 334.395396][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 334.633067][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.647924][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.665196][ T13] bond0 (unregistering): Released all slaves [ 335.077492][ T8398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.273874][ T8398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.323695][ T8398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.609397][ T8398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.855842][ T8615] syz.5.668: attempt to access beyond end of device [ 336.855842][ T8615] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 336.870406][ T8615] EXT4-fs (nbd5): unable to read superblock [ 337.284761][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 337.760767][ T10] usb 3-1: device descriptor read/64, error -71 [ 338.033444][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 338.211035][ T10] usb 3-1: device descriptor read/64, error -71 [ 338.270978][ T8631] vlan2: entered promiscuous mode [ 338.343578][ T10] usb usb3-port1: attempt power cycle [ 338.378059][ T13] hsr_slave_0: left promiscuous mode [ 338.418215][ T13] hsr_slave_1: left promiscuous mode [ 338.507608][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.568548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.620417][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.646507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.017037][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 339.534343][ T13] veth1_macvtap: left promiscuous mode [ 339.581043][ T13] veth0_macvtap: left promiscuous mode [ 339.596632][ T13] veth1_vlan: left promiscuous mode [ 339.621844][ T13] veth0_vlan: left promiscuous mode [ 339.825759][ T10] usb 3-1: device descriptor read/8, error -71 [ 340.709668][ T8659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.677'. [ 340.718631][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.677'. [ 342.403098][ T13] team0 (unregistering): Port device team_slave_1 removed [ 342.529716][ T13] team0 (unregistering): Port device team_slave_0 removed [ 342.665182][ T8678] loop6: detected capacity change from 0 to 524288000 [ 342.677681][ T8376] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.692279][ T8376] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.700526][ T8376] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.718020][ T8376] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.771742][ T8679] loop6: detected capacity change from 524288000 to 0 [ 342.777444][ T8376] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.798735][ T8376] ldm_validate_partition_table(): Disk read failed. [ 342.819687][ T8376] Dev loop6: unable to read RDB block 0 [ 342.827758][ T8376] loop6: unable to read partition table [ 342.842137][ T8376] loop6: partition table beyond EOD, truncated [ 347.164618][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.313634][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.630878][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 347.956934][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.964163][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.032288][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.039585][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.141127][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 348.160462][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.261116][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 348.425864][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.780560][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.799884][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.809659][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.819828][ T24] usb 4-1: Product: syz [ 349.555302][ T24] usb 4-1: Manufacturer: syz [ 349.564297][ T24] usb 4-1: SerialNumber: syz [ 349.644815][ T8398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.834623][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.860523][ T24] usb 4-1: 0:2 : does not exist [ 349.888074][ T24] usb 4-1: USB disconnect, device number 17 [ 349.922646][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.042589][ T8708] udevd[8708]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.160211][ T8739] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 350.221671][ T8739] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 350.510658][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 351.607411][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.488037][ T8797] bridge0: entered allmulticast mode [ 356.392589][ T8812] x_tables: unsorted underflow at hook 4 [ 356.998521][ T8398] veth0_vlan: entered promiscuous mode [ 357.047286][ T8398] veth1_vlan: entered promiscuous mode [ 357.153880][ T8398] veth0_macvtap: entered promiscuous mode [ 357.204380][ T8398] veth1_macvtap: entered promiscuous mode [ 357.347260][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.403051][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.463917][ T8827] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 357.479155][ T8398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.510945][ T8398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.519731][ T8398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.624007][ T8398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.852671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.883422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.478743][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.508523][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.860890][ T5950] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 361.032384][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 361.139359][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.153433][ T5950] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 361.169212][ T5950] usb 3-1: can't read configurations, error -71 [ 361.437364][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.6.719'. [ 361.823798][ T8882] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 361.833566][ T8883] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 362.212733][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.723'. [ 362.371275][ T8888] syz_tun: entered promiscuous mode [ 362.378126][ T8892] kvm: user requested TSC rate below hardware speed [ 362.432155][ T8888] syz_tun: left promiscuous mode [ 364.108516][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 364.117462][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 364.126377][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 365.399986][ T8921] mkiss: ax0: crc mode is auto. [ 365.687621][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 366.136825][ T8924] netlink: 'syz.6.732': attribute type 10 has an invalid length. [ 366.230218][ T8924] syz_tun: entered promiscuous mode [ 366.259080][ T43] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 366.282813][ T43] usb 4-1: config 8 has no interface number 0 [ 366.329031][ T8924] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 366.342181][ T43] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 366.467152][ T43] usb 4-1: config 8 interface 177 has no altsetting 0 [ 366.536088][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 366.586509][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.080945][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 367.619543][ T8921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.831089][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.749591][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 368.790835][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.907284][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 368.916809][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 368.926205][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 369.463602][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.546339][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.566699][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.635218][ T5904] usb 3-1: config 0 descriptor?? [ 369.669677][ T5904] usb 3-1: can't set config #0, error -71 [ 369.689009][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 369.747578][ T5904] usb 3-1: USB disconnect, device number 16 [ 369.845365][ T8955] netlink: 'syz.6.741': attribute type 10 has an invalid length. [ 369.992499][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 370.041926][ T6587] bond0: (slave syz_tun): link status definitely down, disabling slave [ 370.071385][ T24] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 370.079676][ T24] usb 6-1: config 8 has no interface number 0 [ 370.629831][ T24] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 371.032658][ T43] usb 4-1: can't set config #8, error -71 [ 371.065978][ T8970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.745'. [ 371.066472][ T24] usb 6-1: config 8 interface 177 has no altsetting 0 [ 371.121915][ T43] usb 4-1: USB disconnect, device number 19 [ 371.154795][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 371.190235][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.792880][ T9015] autofs: Unknown parameter '' [ 375.821011][ T24] usb 6-1: can't set config #8, error -71 [ 375.876785][ T24] usb 6-1: USB disconnect, device number 3 [ 376.421499][ T9032] sctp: [Deprecated]: syz.6.760 (pid 9032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.421499][ T9032] Use struct sctp_sack_info instead [ 380.541882][ T9103] kvm_intel: kvm [9100]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 380.816105][ T9108] ------------[ cut here ]------------ [ 380.822342][ T9108] WARNING: CPU: 1 PID: 9108 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 380.832557][ T9108] Modules linked in: [ 380.836785][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.0.786 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 380.846727][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.856963][ T9108] RIP: 0010:folio_memcg+0x1a8/0x310 [ 380.862677][ T9108] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 380.883369][ T9108] RSP: 0018:ffffc90003a7f250 EFLAGS: 00010287 [ 380.889742][ T9108] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 380.897959][ T9108] RDX: ffffc9000b909000 RSI: 000000000000d492 RDI: 000000000000d493 [ 380.906071][ T9108] RBP: 0000000000000000 R08: ffffea000194c8c7 R09: 1ffffd4000329918 [ 380.914164][ T9108] R10: dffffc0000000000 R11: fffff94000329919 R12: ffffea000194c8f0 [ 380.922243][ T9108] R13: dffffc0000000000 R14: ffff8880277aee00 R15: 0000000000000002 [ 380.930270][ T9108] FS: 00007f8ab64986c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 380.939323][ T9108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.946439][ T9108] CR2: 0000000000000000 CR3: 0000000065e0c000 CR4: 00000000003526f0 [ 380.954523][ T9108] Call Trace: [ 380.957882][ T9108] [ 380.960923][ T9108] workingset_activation+0x5f/0x4a0 [ 380.966208][ T9108] ? folio_mark_accessed+0x361/0x4a0 [ 380.971756][ T9108] folio_mark_accessed+0x3b5/0x4a0 [ 380.977032][ T9108] kvm_release_page_clean+0x9a/0xe0 [ 380.983051][ T9108] kvm_tdp_page_fault+0x2dd/0x370 [ 380.988146][ T9108] kvm_mmu_do_page_fault+0x2c5/0x640 [ 380.993785][ T9108] ? vmx_vcpu_run+0xd8b/0x25d0 [ 380.998615][ T9108] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 381.004579][ T9108] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 381.010185][ T9108] ? __pfx_current_save_fsgs+0x10/0x10 [ 381.015744][ T9108] kvm_mmu_page_fault+0x22f/0xb70 [ 381.020950][ T9108] ? __pfx_handle_ept_violation+0x10/0x10 [ 381.026725][ T9108] vmx_handle_exit+0x1090/0x18a0 [ 381.031773][ T9108] ? vcpu_run+0x361c/0x6f70 [ 381.036354][ T9108] vcpu_run+0x432e/0x6f70 [ 381.040872][ T9108] ? vcpu_run+0x361c/0x6f70 [ 381.045492][ T9108] ? __pfx_vcpu_run+0x10/0x10 [ 381.050246][ T9108] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 381.056090][ T9108] ? rcu_is_watching+0x15/0xb0 [ 381.061137][ T9108] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 381.066772][ T9108] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 381.072596][ T9108] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 381.078641][ T9108] ? rcu_is_watching+0x15/0xb0 [ 381.083864][ T9108] ? look_up_lock_class+0x74/0x170 [ 381.089038][ T9108] ? register_lock_class+0x51/0x320 [ 381.094580][ T9108] ? __lock_acquire+0xab9/0xd20 [ 381.099525][ T9108] kvm_vcpu_ioctl+0x95c/0xe90 [ 381.104338][ T9108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 381.109626][ T9108] ? __lock_acquire+0xab9/0xd20 [ 381.114588][ T9108] ? __asan_memset+0x22/0x50 [ 381.119500][ T9108] ? smack_file_ioctl+0x302/0x340 [ 381.124644][ T9108] ? __pfx_smack_file_ioctl+0x10/0x10 [ 381.130080][ T9108] ? __fget_files+0x2a/0x420 [ 381.134780][ T9108] ? __fget_files+0x3a0/0x420 [ 381.139591][ T9108] ? __fget_files+0x2a/0x420 [ 381.144270][ T9108] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.149255][ T9108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 381.154613][ T9108] __se_sys_ioctl+0xfc/0x170 [ 381.159271][ T9108] do_syscall_64+0xfa/0x3b0 [ 381.163951][ T9108] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.169211][ T9108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.175404][ T9108] ? clear_bhb_loop+0x60/0xb0 [ 381.180137][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.186858][ T9108] RIP: 0033:0x7f8ab558ebe9 [ 381.191607][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.211359][ T9108] RSP: 002b:00007f8ab6498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.219847][ T9108] RAX: ffffffffffffffda RBX: 00007f8ab57b5fa0 RCX: 00007f8ab558ebe9 [ 381.228002][ T9108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 381.236111][ T9108] RBP: 00007f8ab5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.244382][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.252509][ T9108] R13: 00007f8ab57b6038 R14: 00007f8ab57b5fa0 R15: 00007ffe6b910108 [ 381.261222][ T9108] [ 381.264505][ T9108] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.271821][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.0.786 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 381.281645][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.291720][ T9108] Call Trace: [ 381.295022][ T9108] [ 381.297967][ T9108] dump_stack_lvl+0x99/0x250 [ 381.302585][ T9108] ? __asan_memcpy+0x40/0x70 [ 381.307210][ T9108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.312430][ T9108] ? __pfx__printk+0x10/0x10 [ 381.317056][ T9108] panic+0x2db/0x790 [ 381.320976][ T9108] ? __pfx_panic+0x10/0x10 [ 381.325429][ T9108] __warn+0x31b/0x4b0 [ 381.329425][ T9108] ? folio_memcg+0x1a8/0x310 [ 381.334042][ T9108] ? folio_memcg+0x1a8/0x310 [ 381.338652][ T9108] report_bug+0x2be/0x4f0 [ 381.343125][ T9108] ? folio_memcg+0x1a8/0x310 [ 381.347743][ T9108] ? folio_memcg+0x1a8/0x310 [ 381.352353][ T9108] ? folio_memcg+0x1aa/0x310 [ 381.356971][ T9108] handle_bug+0x84/0x160 [ 381.361241][ T9108] exc_invalid_op+0x1a/0x50 [ 381.365765][ T9108] asm_exc_invalid_op+0x1a/0x20 [ 381.370646][ T9108] RIP: 0010:folio_memcg+0x1a8/0x310 [ 381.375960][ T9108] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 381.395587][ T9108] RSP: 0018:ffffc90003a7f250 EFLAGS: 00010287 [ 381.401779][ T9108] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 381.409775][ T9108] RDX: ffffc9000b909000 RSI: 000000000000d492 RDI: 000000000000d493 [ 381.417763][ T9108] RBP: 0000000000000000 R08: ffffea000194c8c7 R09: 1ffffd4000329918 [ 381.425749][ T9108] R10: dffffc0000000000 R11: fffff94000329919 R12: ffffea000194c8f0 [ 381.433741][ T9108] R13: dffffc0000000000 R14: ffff8880277aee00 R15: 0000000000000002 [ 381.441738][ T9108] ? folio_memcg+0x1a7/0x310 [ 381.446369][ T9108] workingset_activation+0x5f/0x4a0 [ 381.451598][ T9108] ? folio_mark_accessed+0x361/0x4a0 [ 381.456915][ T9108] folio_mark_accessed+0x3b5/0x4a0 [ 381.462054][ T9108] kvm_release_page_clean+0x9a/0xe0 [ 381.467275][ T9108] kvm_tdp_page_fault+0x2dd/0x370 [ 381.472336][ T9108] kvm_mmu_do_page_fault+0x2c5/0x640 [ 381.477645][ T9108] ? vmx_vcpu_run+0xd8b/0x25d0 [ 381.482427][ T9108] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 381.488452][ T9108] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 381.494017][ T9108] ? __pfx_current_save_fsgs+0x10/0x10 [ 381.499507][ T9108] kvm_mmu_page_fault+0x22f/0xb70 [ 381.504566][ T9108] ? __pfx_handle_ept_violation+0x10/0x10 [ 381.510410][ T9108] vmx_handle_exit+0x1090/0x18a0 [ 381.515373][ T9108] ? vcpu_run+0x361c/0x6f70 [ 381.519909][ T9108] vcpu_run+0x432e/0x6f70 [ 381.524305][ T9108] ? vcpu_run+0x361c/0x6f70 [ 381.528906][ T9108] ? __pfx_vcpu_run+0x10/0x10 [ 381.533630][ T9108] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 381.539426][ T9108] ? rcu_is_watching+0x15/0xb0 [ 381.544229][ T9108] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 381.549819][ T9108] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 381.555580][ T9108] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 381.561598][ T9108] ? rcu_is_watching+0x15/0xb0 [ 381.566383][ T9108] ? look_up_lock_class+0x74/0x170 [ 381.571516][ T9108] ? register_lock_class+0x51/0x320 [ 381.576750][ T9108] ? __lock_acquire+0xab9/0xd20 [ 381.581651][ T9108] kvm_vcpu_ioctl+0x95c/0xe90 [ 381.586358][ T9108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 381.591600][ T9108] ? __lock_acquire+0xab9/0xd20 [ 381.596481][ T9108] ? __asan_memset+0x22/0x50 [ 381.601107][ T9108] ? smack_file_ioctl+0x302/0x340 [ 381.606173][ T9108] ? __pfx_smack_file_ioctl+0x10/0x10 [ 381.611595][ T9108] ? __fget_files+0x2a/0x420 [ 381.616320][ T9108] ? __fget_files+0x3a0/0x420 [ 381.621019][ T9108] ? __fget_files+0x2a/0x420 [ 381.625632][ T9108] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.630615][ T9108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 381.635847][ T9108] __se_sys_ioctl+0xfc/0x170 [ 381.640474][ T9108] do_syscall_64+0xfa/0x3b0 [ 381.645033][ T9108] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.650287][ T9108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.656387][ T9108] ? clear_bhb_loop+0x60/0xb0 [ 381.661090][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.667032][ T9108] RIP: 0033:0x7f8ab558ebe9 [ 381.671485][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.691116][ T9108] RSP: 002b:00007f8ab6498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.699557][ T9108] RAX: ffffffffffffffda RBX: 00007f8ab57b5fa0 RCX: 00007f8ab558ebe9 [ 381.707557][ T9108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 381.715591][ T9108] RBP: 00007f8ab5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.723597][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.731599][ T9108] R13: 00007f8ab57b6038 R14: 00007f8ab57b5fa0 R15: 00007ffe6b910108 [ 381.739625][ T9108] [ 381.743062][ T9108] Kernel Offset: disabled [ 381.747406][ T9108] Rebooting in 86400 seconds..