last executing test programs: 2m57.287604522s ago: executing program 2 (id=85): fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x23f, &(0x7f00000000c0)={0x0, 0x100c48a, 0x800, 0x5, 0x403b3}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2m55.776649417s ago: executing program 2 (id=91): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) 2m55.09254282s ago: executing program 2 (id=95): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x4800, 0x8, 0x0, 0x8004}}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.791761347s ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m53.342863963s ago: executing program 2 (id=102): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x3, 0x5, 0x5}, 0x9, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x401, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0xf3, 0xffffffff, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x80000000, 0x4, 0x7, 0x80, 0x800, 0x300000, 0x80007, 0xe, 0x4623f, 0x0, 0x10000, 0x1ff, 0x8000, 0x4, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x7, 0x8, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x200, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x40d4], [0x6, 0xe, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3fe, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x40000010, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x1, 0x2, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x3fe, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0xffd, 0x2, 0x5, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x2, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x2, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x956, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e2, 0x800, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x4, 0x8a8, 0x2, 0x40, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000400)={0x0, 0xaee2, 0x800, 0x2, 0x2002ab}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2m51.653761203s ago: executing program 2 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m51.110634267s ago: executing program 32 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m54.606213699s ago: executing program 1 (id=383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x98}) 1m53.35156905s ago: executing program 0 (id=384): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 1m53.10633452s ago: executing program 1 (id=387): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000300)="f07f21d24b9c183d48543d03f02fb8fa49e8eb757be3256c", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 1m53.061483919s ago: executing program 0 (id=390): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x400009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x6, 0xffffffffffffffff, 0xc595, 0xfffffffffffffffc, 0x80000000000001, 0x6, 0xffffffffffffffff, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb8828d0f8bef66bafc0cb000eec402954008440f796015c441b4c24000a5c7442400ed000000c74424026e330000c7442406000000000f01142466ba4000b019ee0f38f998b2a500000f23deb9800000c00f3235000100000f30660f3a0e9800000000f5", 0x68}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.73299053s ago: executing program 1 (id=392): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m51.963362203s ago: executing program 1 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m51.765428821s ago: executing program 0 (id=398): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x58000029, r0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m51.697077069s ago: executing program 1 (id=399): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 1m50.997879419s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0xfd, 0x0, 0x0, 0x18, 0x1, 0x1, 0xa9, 0x4, 0x80, 0x0, 0x40000000}, {0x8, 0x1, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x7, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x11, 0x3, 0xfe, 0x80, 0xf4, 0x7}], 0x205}) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/143, 0x8f}], 0x2, 0x7, 0x562) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.56339385s ago: executing program 33 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0xfd, 0x0, 0x0, 0x18, 0x1, 0x1, 0xa9, 0x4, 0x80, 0x0, 0x40000000}, {0x8, 0x1, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x7, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x11, 0x3, 0xfe, 0x80, 0xf4, 0x7}], 0x205}) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/143, 0x8f}], 0x2, 0x7, 0x562) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.554195683s ago: executing program 0 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) 1m50.288429677s ago: executing program 0 (id=407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0x2000, 0x5a, &(0x7f0000000540)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) 1m49.517799954s ago: executing program 0 (id=409): socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m49.168756396s ago: executing program 34 (id=409): socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 59.149590892s ago: executing program 7 (id=411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) 59.058379001s ago: executing program 7 (id=568): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 58.092827132s ago: executing program 7 (id=574): r0 = fanotify_init(0x20, 0x800) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1020, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) 57.726902694s ago: executing program 7 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 57.458426783s ago: executing program 7 (id=579): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) read(r1, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 56.020255371s ago: executing program 7 (id=585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 55.413894932s ago: executing program 35 (id=585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 10.305147778s ago: executing program 6 (id=750): mkdir(&(0x7f0000000280)='./file0\x00', 0x18a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10082, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) 9.505826606s ago: executing program 6 (id=753): socket$pppoe(0x18, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 7.857620809s ago: executing program 5 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB=',group_', @ANYRESDEC=0x0]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) 7.649584632s ago: executing program 6 (id=759): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202, 0x80) 6.562531922s ago: executing program 5 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$FUSE(r2, &(0x7f0000001240)={0x2020}, 0x2020) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0x20) splice(r1, &(0x7f0000000040), r3, 0x0, 0x808, 0x0) 6.327071917s ago: executing program 5 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6.168292903s ago: executing program 6 (id=766): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 6.153542748s ago: executing program 8 (id=767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000001840)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x70, &(0x7f00000001c0)=""/112, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 6.02581444s ago: executing program 4 (id=768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001840)={r3, @in6={{0xa, 0x4e22, 0x1, @private1, 0x4}}}, 0x84) 5.854648646s ago: executing program 4 (id=769): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x8, 0x3, 0x32}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.90213701s ago: executing program 8 (id=772): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 4.305915027s ago: executing program 8 (id=774): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x0, 0x101, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5008}, 0x1}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x3) 3.920363054s ago: executing program 4 (id=775): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0xee01, 0xee01) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) setuid(0x0) 3.708289181s ago: executing program 5 (id=777): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 3.511955016s ago: executing program 4 (id=778): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe", 0xc0, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 3.284729173s ago: executing program 3 (id=779): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000000a}) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x10000) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 3.262438917s ago: executing program 8 (id=780): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x6}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x128) 3.244170361s ago: executing program 4 (id=781): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x20) ftruncate(r2, 0x2007ffb) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 2.137791906s ago: executing program 8 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='inet_sk_error_report\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb) 2.135888083s ago: executing program 4 (id=783): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1.78724963s ago: executing program 6 (id=784): fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) 1.786925362s ago: executing program 3 (id=785): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x7ff, 0x0) splice(r3, 0x0, r1, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 1.472784062s ago: executing program 3 (id=786): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x2, &(0x7f0000000280)={0x1d, "adab9c9a9e4547d89bef0e7390cb22260923413d6fc20230db6c829745e60b6c5c"}}) 1.397769997s ago: executing program 5 (id=787): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = socket$inet(0x2, 0x1, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYRES32=r3], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 887.634042ms ago: executing program 5 (id=788): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 840.425049ms ago: executing program 8 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 609.743943ms ago: executing program 3 (id=790): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(0x0, 0x4b) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) r3 = dup3(r1, r2, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0) 441.894765ms ago: executing program 3 (id=791): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 109.362444ms ago: executing program 3 (id=792): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 6 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x7) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 80.443145][ T5824] cgroup: Unknown subsys name 'net' [ 80.727241][ T5824] cgroup: Unknown subsys name 'cpuset' [ 80.782813][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.561144][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.252661][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.257548][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.258694][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.260227][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.261021][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.325925][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.330194][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.333653][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.356826][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.358362][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.361266][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.364333][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.370047][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.370959][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.381045][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.383561][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.384318][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.403075][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.403816][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.432922][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.436923][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.439058][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.440259][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.441033][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.458756][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.348881][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.389096][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.440143][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.456259][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.814722][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.847784][ T1238] cfg80211: failed to load regulatory.db [ 87.282721][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.284725][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.285307][ T5839] bridge_slave_0: entered allmulticast mode [ 87.288124][ T5839] bridge_slave_0: entered promiscuous mode [ 87.313663][ T59] Bluetooth: hci0: command tx timeout [ 87.472351][ T59] Bluetooth: hci3: command tx timeout [ 87.482391][ T59] Bluetooth: hci2: command tx timeout [ 87.482572][ T59] Bluetooth: hci4: command tx timeout [ 87.482652][ T59] Bluetooth: hci1: command tx timeout [ 87.545096][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.545219][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.545744][ T5839] bridge_slave_1: entered allmulticast mode [ 87.548383][ T5839] bridge_slave_1: entered promiscuous mode [ 87.550296][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.550389][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.550549][ T5835] bridge_slave_0: entered allmulticast mode [ 87.552066][ T5835] bridge_slave_0: entered promiscuous mode [ 87.803111][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.803225][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.805486][ T5835] bridge_slave_1: entered allmulticast mode [ 87.807023][ T5835] bridge_slave_1: entered promiscuous mode [ 87.808548][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.808648][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.808755][ T5842] bridge_slave_0: entered allmulticast mode [ 87.810215][ T5842] bridge_slave_0: entered promiscuous mode [ 87.854173][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.854294][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.854795][ T5843] bridge_slave_0: entered allmulticast mode [ 87.857410][ T5843] bridge_slave_0: entered promiscuous mode [ 88.043156][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.043294][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.043419][ T5842] bridge_slave_1: entered allmulticast mode [ 88.045036][ T5842] bridge_slave_1: entered promiscuous mode [ 88.107684][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.107823][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.107994][ T5843] bridge_slave_1: entered allmulticast mode [ 88.110846][ T5843] bridge_slave_1: entered promiscuous mode [ 88.130971][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.386655][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.392092][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.454409][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454566][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.454786][ T5841] bridge_slave_0: entered allmulticast mode [ 88.456556][ T5841] bridge_slave_0: entered promiscuous mode [ 88.697383][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.700816][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.701386][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.701555][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.701732][ T5841] bridge_slave_1: entered allmulticast mode [ 88.705979][ T5841] bridge_slave_1: entered promiscuous mode [ 88.728755][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.917612][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.999806][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.005664][ T5839] team0: Port device team_slave_0 added [ 89.284789][ T5839] team0: Port device team_slave_1 added [ 89.286503][ T5835] team0: Port device team_slave_0 added [ 89.356160][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.392350][ T5849] Bluetooth: hci0: command tx timeout [ 89.524883][ T5835] team0: Port device team_slave_1 added [ 89.526637][ T5842] team0: Port device team_slave_0 added [ 89.529302][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.530774][ T5843] team0: Port device team_slave_0 added [ 89.552240][ T5849] Bluetooth: hci1: command tx timeout [ 89.552283][ T5849] Bluetooth: hci4: command tx timeout [ 89.552305][ T5849] Bluetooth: hci2: command tx timeout [ 89.552323][ T5849] Bluetooth: hci3: command tx timeout [ 89.925952][ T5842] team0: Port device team_slave_1 added [ 89.985902][ T5843] team0: Port device team_slave_1 added [ 89.988012][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.988027][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.988052][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.360232][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.360245][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.360258][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.361942][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.361952][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.361965][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.459200][ T5841] team0: Port device team_slave_0 added [ 90.546295][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.546309][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.546327][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.547816][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.547828][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.547850][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.555493][ T5841] team0: Port device team_slave_1 added [ 90.558326][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.558338][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.558358][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.575271][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.575286][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.575309][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.697389][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.697405][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.697427][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.925105][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.925122][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.925145][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.085100][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.085115][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.085131][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.321426][ T5839] hsr_slave_0: entered promiscuous mode [ 91.323215][ T5839] hsr_slave_1: entered promiscuous mode [ 91.346550][ T5835] hsr_slave_0: entered promiscuous mode [ 91.347318][ T5835] hsr_slave_1: entered promiscuous mode [ 91.348203][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 91.348288][ T5835] Cannot create hsr debugfs directory [ 91.473345][ T5849] Bluetooth: hci0: command tx timeout [ 91.523427][ T5842] hsr_slave_0: entered promiscuous mode [ 91.524773][ T5842] hsr_slave_1: entered promiscuous mode [ 91.525683][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.525705][ T5842] Cannot create hsr debugfs directory [ 91.536354][ T5843] hsr_slave_0: entered promiscuous mode [ 91.537607][ T5843] hsr_slave_1: entered promiscuous mode [ 91.538568][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 91.538589][ T5843] Cannot create hsr debugfs directory [ 91.633275][ T5845] Bluetooth: hci2: command tx timeout [ 91.633305][ T5845] Bluetooth: hci4: command tx timeout [ 91.633417][ T5849] Bluetooth: hci3: command tx timeout [ 91.652186][ T59] Bluetooth: hci1: command tx timeout [ 92.281331][ T5841] hsr_slave_0: entered promiscuous mode [ 92.282640][ T5841] hsr_slave_1: entered promiscuous mode [ 92.283556][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.283578][ T5841] Cannot create hsr debugfs directory [ 93.494156][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.535618][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.552335][ T59] Bluetooth: hci0: command tx timeout [ 93.575947][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.626639][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.712514][ T59] Bluetooth: hci3: command tx timeout [ 93.712545][ T59] Bluetooth: hci4: command tx timeout [ 93.712564][ T59] Bluetooth: hci2: command tx timeout [ 93.713066][ T5849] Bluetooth: hci1: command tx timeout [ 93.788879][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.837403][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.867517][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.906957][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.074165][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.143859][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.178312][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.231095][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.400487][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.444899][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.488072][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.533770][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.725987][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.771761][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.778013][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.823518][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.879406][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.000144][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.029546][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.065916][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.066554][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.109451][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.109634][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.173590][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.229956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.230088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.237989][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.292014][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.292295][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.379678][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.419331][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.440040][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.440276][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.497392][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.497634][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.560508][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.631061][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.631187][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.649639][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.715952][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.716177][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.829300][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.899672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.899989][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.970637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.971330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.144806][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.260798][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.520299][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.597233][ T5839] veth0_vlan: entered promiscuous mode [ 96.674496][ T5835] veth0_vlan: entered promiscuous mode [ 96.681752][ T5839] veth1_vlan: entered promiscuous mode [ 96.721546][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.751443][ T5835] veth1_vlan: entered promiscuous mode [ 96.866109][ T5842] veth0_vlan: entered promiscuous mode [ 96.882108][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.901989][ T5839] veth0_macvtap: entered promiscuous mode [ 96.979652][ T5839] veth1_macvtap: entered promiscuous mode [ 96.981463][ T5842] veth1_vlan: entered promiscuous mode [ 97.013206][ T5835] veth0_macvtap: entered promiscuous mode [ 97.068683][ T5835] veth1_macvtap: entered promiscuous mode [ 97.074406][ T5843] veth0_vlan: entered promiscuous mode [ 97.154926][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.190989][ T5843] veth1_vlan: entered promiscuous mode [ 97.220711][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.228057][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.301139][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.334688][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.344320][ T5842] veth0_macvtap: entered promiscuous mode [ 97.345904][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.365803][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.377551][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.381159][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403877][ T5842] veth1_macvtap: entered promiscuous mode [ 97.405734][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.424353][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.437394][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.634429][ T5843] veth0_macvtap: entered promiscuous mode [ 97.766762][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.771654][ T5843] veth1_macvtap: entered promiscuous mode [ 97.838498][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.940248][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940272][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.943087][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.986452][ T5841] veth0_vlan: entered promiscuous mode [ 97.987768][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.000054][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.017962][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.019828][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.023896][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.023914][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.136281][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.140084][ T1492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.140104][ T1492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.189665][ T5841] veth1_vlan: entered promiscuous mode [ 98.289450][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.289468][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.305560][ T3641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.311487][ T3641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.316496][ T3641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.383355][ T3641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.735143][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.862099][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.867926][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.957249][ T5841] veth0_macvtap: entered promiscuous mode [ 98.987188][ T5841] veth1_macvtap: entered promiscuous mode [ 99.092900][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.092921][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.236034][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.239919][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.239939][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.243714][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.307560][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.424666][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.428585][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.429274][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.429290][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.460678][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.460710][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.460750][ T5926] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 99.460771][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.467325][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.487523][ T1011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.574389][ T5926] usb 3-1: config 0 descriptor?? [ 100.118905][ T5926] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 100.134380][ T5926] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5 [ 100.165929][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.298709][ T5926] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 100.328511][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.328530][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.434169][ T5926] usb 3-1: USB disconnect, device number 2 [ 100.516553][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 100.840985][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 101.262943][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.262962][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.561702][ T5986] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 101.620468][ T5988] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 101.636564][ T5986] team0: Port device dummy0 added [ 101.718007][ T5988] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.814633][ T5988] team0: Failed to send options change via netlink (err -105) [ 101.814867][ T5988] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.815427][ T5988] team0: Port device dummy0 removed [ 101.910385][ T5988] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.997208][ T44] libceph: connect (1)[c::]:6789 error -101 [ 101.997792][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 102.019540][ T5990] ceph: No mds server is up or the cluster is laggy [ 102.041044][ T44] libceph: connect (1)[c::]:6789 error -101 [ 102.041199][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 102.324622][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 102.324837][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 102.549029][ T5994] netlink: del zone limit has 4 unknown bytes [ 102.916057][ T5991] netlink: set zone limit has 4 unknown bytes [ 103.137007][ T6004] netlink: 'syz.1.18': attribute type 13 has an invalid length. [ 103.137029][ T6004] netlink: 'syz.1.18': attribute type 17 has an invalid length. [ 103.847611][ T6004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.282272][ T5844] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 106.442858][ T5844] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 106.442886][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.442903][ T5844] usb 2-1: Product: syz [ 106.442916][ T5844] usb 2-1: Manufacturer: syz [ 106.442991][ T5844] usb 2-1: SerialNumber: syz [ 106.504418][ T5844] usb 2-1: config 0 descriptor?? [ 107.932346][ T5927] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.082217][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 108.087966][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.089307][ T5927] usb 1-1: config 4 interface 0 has no altsetting 0 [ 108.104853][ T5927] usb 1-1: string descriptor 0 read error: -22 [ 108.105009][ T5927] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 108.105034][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.207783][ T5927] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 108.328955][ T5927] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.330126][ T5927] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 108.330290][ T5927] usb 1-1: media controller created [ 108.628764][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.922556][ T5927] zl10353_read_register: readreg error (reg=127, ret==0) [ 108.990581][ T5926] usb 2-1: USB disconnect, device number 2 [ 109.243277][ T5927] usb 1-1: USB disconnect, device number 2 [ 109.742231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.742488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.662437][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.765355][ T6111] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 110.813607][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 110.821211][ T44] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.821238][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.821255][ T44] usb 1-1: Product: syz [ 110.821267][ T44] usb 1-1: Manufacturer: syz [ 110.821277][ T44] usb 1-1: SerialNumber: syz [ 110.887122][ T44] r8152-cfgselector 1-1: Unknown version 0x0000 [ 110.887148][ T44] r8152-cfgselector 1-1: config 0 descriptor?? [ 111.367768][ T44] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 113.582217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.952269][ T5851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.042680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.104605][ T5851] usb 4-1: config 0 has no interfaces? [ 115.107431][ T5851] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 115.107448][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.107461][ T5851] usb 4-1: Product: syz [ 115.107469][ T5851] usb 4-1: Manufacturer: syz [ 115.107477][ T5851] usb 4-1: SerialNumber: syz [ 115.154017][ T5851] usb 4-1: config 0 descriptor?? [ 115.448183][ T5851] usb 4-1: USB disconnect, device number 2 [ 116.060291][ T6191] uprobe: syz.2.78:6191 failed to unregister, leaking uprobe [ 116.545261][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.546993][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.722413][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 116.727429][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.742284][ T44] usb 5-1: config 4 interface 0 has no altsetting 0 [ 116.760320][ T44] usb 5-1: string descriptor 0 read error: -22 [ 116.760465][ T44] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 116.760487][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.797405][ T44] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 116.819102][ T44] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.819486][ T44] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 116.819530][ T44] usb 5-1: media controller created [ 116.865177][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.265233][ T44] usb 5-1: USB disconnect, device number 2 [ 118.462295][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.627021][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 118.641313][ T5906] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 118.641343][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.641362][ T5906] usb 2-1: Product: syz [ 118.641375][ T5906] usb 2-1: Manufacturer: syz [ 118.641389][ T5906] usb 2-1: SerialNumber: syz [ 118.684578][ T5906] usb 2-1: config 0 descriptor?? [ 119.060277][ T5906] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 120.664830][ T5906] gspca_sunplus: reg_r err -71 [ 120.664940][ T5906] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 120.668285][ T5906] usb 2-1: USB disconnect, device number 3 [ 122.774871][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 122.996926][ T6288] loop8: detected capacity change from 0 to 16384 [ 123.220958][ T6289] loop8: detected capacity change from 16384 to 16383 [ 123.261665][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 123.730527][ T6263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.935279][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 124.424635][ T6263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.502255][ T5851] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.647956][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.671714][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.678742][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.679850][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.680574][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.685484][ T5851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.685530][ T5851] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 124.729585][ T5851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.729613][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.729629][ T5851] usb 1-1: Product: syz [ 124.729642][ T5851] usb 1-1: Manufacturer: syz [ 124.729656][ T5851] usb 1-1: SerialNumber: syz [ 124.812667][ T5851] cdc_mbim 1-1:1.0: skipping garbage [ 124.978598][ T6263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.021838][ T6306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.350295][ T6263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.631465][ T6306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.632055][ T5851] cdc_mbim 1-1:1.0: setting tx_max = 32 [ 125.684559][ T5851] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 125.715800][ T5851] wwan wwan0: port wwan0mbim0 attached [ 125.767891][ T5851] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2a:e3:c9:f0:16:ff [ 125.895957][ T5844] usb 1-1: USB disconnect, device number 4 [ 125.898304][ T5844] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 126.163126][ T5844] wwan wwan0: port wwan0mbim0 disconnected [ 126.551794][ T6334] tipc: Started in network mode [ 126.551823][ T6334] tipc: Node identity 7f000001, cluster identity 4711 [ 126.584450][ T6334] tipc: Enabled bearer , priority 10 [ 126.607321][ T6263] bridge_slave_1: left allmulticast mode [ 126.607676][ T6263] bridge_slave_1: left promiscuous mode [ 126.615859][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.751535][ T6263] bridge_slave_0: left allmulticast mode [ 126.751569][ T6263] bridge_slave_0: left promiscuous mode [ 126.753143][ T5849] Bluetooth: hci1: command tx timeout [ 126.814906][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.959495][ T5849] Bluetooth: hci2: ISO packet too small [ 127.594205][ T31] tipc: Node number set to 2130706433 [ 128.835752][ T5849] Bluetooth: hci1: command tx timeout [ 129.432291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.482223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.552981][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.723104][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.723134][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.723146][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.723171][ T5906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.723182][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.730505][ T5906] usb 1-1: config 0 descriptor?? [ 130.172193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.257430][ T5906] plantronics 0003:047F:FFFF.0002: item 0 0 0 9 parsing failed [ 130.258073][ T5906] plantronics 0003:047F:FFFF.0002: parse failed [ 130.258971][ T5906] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 130.363128][ T5906] usb 1-1: USB disconnect, device number 5 [ 130.549111][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.660775][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.733086][ T6263] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 130.784697][ T6263] bond0 (unregistering): Released all slaves [ 130.912463][ T5849] Bluetooth: hci1: command tx timeout [ 131.250529][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 131.367171][ T6392] loop2: detected capacity change from 0 to 7 [ 131.392666][ T6392] loop2: [ 131.392701][ T6392] loop2: partition table partially beyond EOD, truncated [ 132.008335][ T6409] process 'syz.0.148' launched './file1' with NULL argv: empty string added [ 132.117871][ T6390] dummy0: entered allmulticast mode [ 132.127515][ T6394] dummy0: left allmulticast mode [ 132.137357][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 132.292761][ T31] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 132.292798][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.320891][ T31] usb 5-1: config 0 descriptor?? [ 132.810497][ T6308] chnl_net:caif_netlink_parms(): no params data found [ 132.944265][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944474][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992279][ T5849] Bluetooth: hci1: command tx timeout [ 133.940012][ T6263] hsr_slave_0: left promiscuous mode [ 133.978562][ T31] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 133.978591][ T31] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 133.979121][ T31] asix 5-1:0.0: probe with driver asix failed with error -71 [ 134.014609][ T31] usb 5-1: USB disconnect, device number 3 [ 134.060995][ T6263] hsr_slave_1: left promiscuous mode [ 134.065681][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.065769][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.127451][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.127483][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.261407][ T6263] veth1_macvtap: left promiscuous mode [ 134.261565][ T6263] veth0_macvtap: left promiscuous mode [ 134.274298][ T6263] veth1_vlan: left promiscuous mode [ 134.274718][ T6263] veth0_vlan: left promiscuous mode [ 134.850719][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.932430][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.023706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.108154][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.108185][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.108206][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.108247][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.108270][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.184506][ T5906] usb 4-1: config 0 descriptor?? [ 135.433312][ T6483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.643945][ T5906] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 135.648684][ T6485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.685774][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 135.731072][ T5906] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 135.982241][ T5906] usb 4-1: USB disconnect, device number 3 [ 136.119919][ T6493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.032196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.272219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.311115][ T6513] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 138.370228][ T6514] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 138.763752][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 138.993076][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 141.675421][ T6525] fuse: root generation should be zero [ 142.247524][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 142.339290][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.340146][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.340365][ T6308] bridge_slave_0: entered allmulticast mode [ 142.375005][ T6308] bridge_slave_0: entered promiscuous mode [ 142.378907][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.379043][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.379235][ T6308] bridge_slave_1: entered allmulticast mode [ 142.381848][ T6308] bridge_slave_1: entered promiscuous mode [ 143.765638][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.861773][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.314380][ T6308] team0: Port device team_slave_0 added [ 145.340373][ T6308] team0: Port device team_slave_1 added [ 145.852293][ T5851] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.002650][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 146.009855][ T5851] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 146.009885][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.009904][ T5851] usb 2-1: Product: syz [ 146.009917][ T5851] usb 2-1: Manufacturer: syz [ 146.009931][ T5851] usb 2-1: SerialNumber: syz [ 146.065818][ T5851] usb 2-1: config 0 descriptor?? [ 146.069209][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.069224][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.069246][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.105067][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.105084][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.105107][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.282366][ T5851] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 146.695055][ T6308] hsr_slave_0: entered promiscuous mode [ 146.699584][ T6308] hsr_slave_1: entered promiscuous mode [ 146.792487][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.944644][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.944675][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.944711][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.944730][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.979213][ T9] usb 4-1: config 0 descriptor?? [ 147.433904][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.433939][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.433964][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.433989][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.434014][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.434037][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.434061][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 147.455970][ T9] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 147.600703][ T9] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 148.124095][ T5851] usb write operation failed. (-71) [ 148.229172][ T6616] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 148.281786][ T5851] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.295767][ T5851] dvbdev: DVB: registering new adapter (Terratec H7) [ 148.295819][ T5851] usb 2-1: media controller created [ 148.296786][ T5851] usb read operation failed. (-71) [ 148.299277][ T5851] usb write operation failed. (-71) [ 148.341005][ T9] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 148.360836][ T5851] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 148.384390][ T5851] usb 2-1: USB disconnect, device number 4 [ 148.527328][ T9] usb 4-1: USB disconnect, device number 4 [ 148.889169][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 148.890312][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 148.978221][ T6308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.061039][ T6308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.175210][ T6308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.325162][ T6308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.932455][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.996936][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.061245][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.077028][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.079721][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.102479][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.102503][ T9] usb 4-1: config 0 has no interfaces? [ 150.102605][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.102627][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.159636][ T9] usb 4-1: config 0 descriptor?? [ 150.190937][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.191085][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.216609][ T6668] syz.4.212 (6668) used greatest stack depth: 18920 bytes left [ 150.440104][ T5971] usb 4-1: USB disconnect, device number 5 [ 151.785612][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.143301][ T6308] veth0_vlan: entered promiscuous mode [ 153.201074][ T6308] veth1_vlan: entered promiscuous mode [ 153.252767][ T6738] loop7: detected capacity change from 0 to 16384 [ 153.516808][ C1] I/O error, dev loop7, sector 15432 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.518680][ C1] I/O error, dev loop7, sector 15432 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.518930][ C1] Buffer I/O error on dev loop7, logical block 1929, async page read [ 153.590264][ C0] I/O error, dev loop7, sector 1152 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 153.590991][ C0] I/O error, dev loop7, sector 1152 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.591021][ C0] Buffer I/O error on dev loop7, logical block 144, async page read [ 153.591173][ T6743] loop7: detected capacity change from 16384 to 0 [ 153.623320][ T6308] veth0_macvtap: entered promiscuous mode [ 153.652084][ T6308] veth1_macvtap: entered promiscuous mode [ 153.782891][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.809673][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.902293][ T6441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.905775][ T6441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.906097][ T6263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.906334][ T6263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.814234][ T6440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.814255][ T6440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.182654][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.182673][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.285253][ T5906] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.328965][ T5906] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.347468][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 156.932633][ T6798] binder: 6795:6798 ioctl c0306201 2000000000c0 returned -14 [ 157.386741][ T6807] syz.1.242 (6807) used greatest stack depth: 18840 bytes left [ 157.683298][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'. [ 158.423043][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.302312][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 160.329831][ T31] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 160.329850][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.336864][ T31] usb 6-1: config 0 descriptor?? [ 160.510734][ T6849] syz.4.254: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.512083][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.512108][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.512130][ T6849] Call Trace: [ 160.512138][ T6849] [ 160.512153][ T6849] dump_stack_lvl+0x189/0x250 [ 160.512199][ T6849] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.512231][ T6849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.512272][ T6849] warn_alloc+0x22e/0x3b0 [ 160.512300][ T6849] ? __pfx_warn_alloc+0x10/0x10 [ 160.512328][ T6849] ? __get_vm_area_node+0x2bc/0x350 [ 160.512357][ T6849] ? packet_set_ring+0x6ea/0x23a0 [ 160.512385][ T6849] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 160.512419][ T6849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.512443][ T6849] ? packet_set_ring+0x6ea/0x23a0 [ 160.512466][ T6849] vzalloc_noprof+0xb2/0xf0 [ 160.512494][ T6849] ? packet_set_ring+0x6ea/0x23a0 [ 160.512519][ T6849] packet_set_ring+0x6ea/0x23a0 [ 160.512562][ T6849] ? __pfx_packet_set_ring+0x10/0x10 [ 160.512584][ T6849] ? _copy_from_user+0x94/0xb0 [ 160.512599][ T6849] packet_setsockopt+0xc5a/0x12c0 [ 160.512622][ T6849] ? __pfx_packet_setsockopt+0x10/0x10 [ 160.512651][ T6849] ? __lock_acquire+0xab9/0xd20 [ 160.512699][ T6849] ? __fget_files+0x2a/0x420 [ 160.512729][ T6849] ? __fget_files+0x2a/0x420 [ 160.512742][ T6849] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.512752][ T6849] ? __pfx_packet_setsockopt+0x10/0x10 [ 160.512764][ T6849] do_sock_setsockopt+0x17c/0x1b0 [ 160.512792][ T6849] __x64_sys_setsockopt+0x145/0x1b0 [ 160.512817][ T6849] do_syscall_64+0xfa/0x3b0 [ 160.512835][ T6849] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.512863][ T6849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.512883][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 160.512903][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.512913][ T6849] RIP: 0033:0x7fe432c1eec9 [ 160.512929][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.512938][ T6849] RSP: 002b:00007fe430e5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.512954][ T6849] RAX: ffffffffffffffda RBX: 00007fe432e76090 RCX: 00007fe432c1eec9 [ 160.512969][ T6849] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 160.512981][ T6849] RBP: 00007fe432ca1f91 R08: 000000000000001c R09: 0000000000000000 [ 160.512994][ T6849] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 160.513006][ T6849] R13: 00007fe432e76128 R14: 00007fe432e76090 R15: 00007ffcd10996b8 [ 160.513039][ T6849] [ 160.615149][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 160.803279][ T6849] Mem-Info: [ 160.803343][ T6849] active_anon:281 inactive_anon:7514 isolated_anon:0 [ 160.803343][ T6849] active_file:5620 inactive_file:37840 isolated_file:0 [ 160.803343][ T6849] unevictable:768 dirty:347 writeback:0 [ 160.803343][ T6849] slab_reclaimable:11729 slab_unreclaimable:115645 [ 160.803343][ T6849] mapped:29685 shmem:3072 pagetables:1243 [ 160.803343][ T6849] sec_pagetables:0 bounce:0 [ 160.803343][ T6849] kernel_misc_reclaimable:0 [ 160.803343][ T6849] free:1321270 free_pcp:5062 free_cma:0 [ 160.803420][ T6849] Node 0 active_anon:1124kB inactive_anon:30056kB active_file:22276kB inactive_file:151360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118740kB dirty:1384kB writeback:0kB shmem:10752kB kernel_stack:13988kB pagetables:4832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.803493][ T6849] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.803554][ T6849] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.803635][ T6849] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 160.803728][ T6849] Node 0 DMA32 free:1365028kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1120kB inactive_anon:30016kB active_file:21260kB inactive_file:151292kB unevictable:1536kB writepending:1384kB present:3129332kB managed:2572276kB mlocked:0kB bounce:0kB free_pcp:20180kB local_pcp:10872kB free_cma:0kB [ 160.803806][ T6849] lowmem_reserve[]: 0 0 1 1 1 [ 160.803892][ T6849] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1016kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 160.803976][ T6849] lowmem_reserve[]: 0 0 0 0 0 [ 160.804166][ T6849] Node 1 Normal free:3904692kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 160.804275][ T6849] lowmem_reserve[]: 0 0 0 0 0 [ 160.804361][ T6849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.804583][ T6849] Node 0 DMA32: 334*4kB (ME) 117*8kB (UME) 244*16kB (UME) 149*32kB (UME) 104*64kB (UME) 18*128kB (UME) 18*256kB (UM) 8*512kB (UME) 3*1024kB (UE) 9*2048kB (UM) 321*4096kB (UM) = 1364928kB [ 160.862268][ T5971] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.963760][ T6849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 160.963832][ T6849] Node 1 Normal: 191*4kB (UME) 39*8kB (UME) 34*16kB (UME) 219*32kB (UME) 85*64kB (UME) 26*128kB (UME) 11*256kB (UME) 5*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3904756kB [ 160.963924][ T6849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.963934][ T6849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.963942][ T6849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.963950][ T6849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.963959][ T6849] 46530 total pagecache pages [ 160.963966][ T6849] 0 pages in swap cache [ 160.963970][ T6849] Free swap = 124996kB [ 160.963974][ T6849] Total swap = 124996kB [ 160.963978][ T6849] 2097051 pages RAM [ 160.963981][ T6849] 0 pages HighMem/MovableOnly [ 160.963985][ T6849] 422084 pages reserved [ 160.963988][ T6849] 0 pages cma reserved [ 160.993707][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.009285][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.009347][ T31] usb 6-1: media controller created [ 161.054771][ T5971] usb 2-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 161.054799][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.054818][ T5971] usb 2-1: Product: syz [ 161.054831][ T5971] usb 2-1: Manufacturer: syz [ 161.054845][ T5971] usb 2-1: SerialNumber: syz [ 161.227526][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.304896][ T5971] r8152-cfgselector 2-1: Unknown version 0x0000 [ 161.304920][ T5971] r8152-cfgselector 2-1: config 0 descriptor?? [ 161.328676][ T5971] r8152 2-1:0.0: Expected endpoints are not found [ 162.212427][ T31] stb0899_attach: Driver disabled by Kconfig [ 162.212444][ T31] az6027: no front-end attached [ 162.212444][ T31] [ 162.213327][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 162.219144][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 162.280250][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 162.280273][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.534401][ T5844] usb 6-1: USB disconnect, device number 2 [ 162.751716][ T9] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 162.977316][ T5844] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.324763][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 165.119795][ T37] audit: type=1326 audit(1758848133.498:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86d5aa5d67 code=0x7ffc0000 [ 165.119961][ T37] audit: type=1326 audit(1758848133.498:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86d5a4af79 code=0x7ffc0000 [ 165.120104][ T37] audit: type=1326 audit(1758848133.498:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86d5aa5d67 code=0x7ffc0000 [ 165.120128][ T37] audit: type=1326 audit(1758848133.498:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86d5a4af79 code=0x7ffc0000 [ 165.120149][ T37] audit: type=1326 audit(1758848133.498:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 165.144424][ T37] audit: type=1326 audit(1758848133.528:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 165.144473][ T37] audit: type=1326 audit(1758848133.528:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 165.259039][ T37] audit: type=1326 audit(1758848133.638:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 165.266533][ T37] audit: type=1326 audit(1758848133.638:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 165.267410][ T37] audit: type=1326 audit(1758848133.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5aaeec9 code=0x7ffc0000 [ 166.194177][ T6941] hub 9-0:1.0: USB hub found [ 166.211719][ T6941] hub 9-0:1.0: 1 port detected [ 166.678296][ T6950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.514734][ T6965] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 167.898463][ T5848] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 167.898499][ T5848] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 167.898523][ T5848] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 167.898545][ T5848] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 167.898568][ T5848] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 167.970418][ T5848] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 168.373765][ T6990] fido_id[6990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.259590][ T9] IPVS: starting estimator thread 0... [ 169.406773][ T7018] IPVS: using max 7 ests per chain, 16800 per kthread [ 169.782381][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 171.050303][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 171.138581][ T7058] netlink: 'syz.5.331': attribute type 6 has an invalid length. [ 171.138603][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.5.331'. [ 174.171553][ T7111] loop2: detected capacity change from 0 to 7 [ 174.183833][ T7111] Dev loop2: unable to read RDB block 7 [ 174.183880][ T7111] loop2: unable to read partition table [ 174.184113][ T7111] loop2: partition table beyond EOD, truncated [ 174.184131][ T7111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.150704][ T7133] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 175.210562][ T7136] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 179.543727][ T7182] Bluetooth: MGMT ver 1.23 [ 179.543765][ T7182] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 181.264046][ T7208] overlayfs: invalid redirect (./file0) [ 182.757954][ T37] kauditd_printk_skb: 114 callbacks suppressed [ 182.757970][ T37] audit: type=1326 audit(1758848151.138:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.0.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ccc84eec9 code=0x0 [ 183.997081][ T6450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.369352][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.385442][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.386669][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.390733][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.395975][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.398086][ T6450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.070027][ T6450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.759735][ T6450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.313390][ T5906] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.464474][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.464507][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.464544][ T5906] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 186.464564][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.511223][ T5906] usb 6-1: config 0 descriptor?? [ 186.517903][ T5849] Bluetooth: hci4: command tx timeout [ 186.760454][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.779696][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.793211][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.835300][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.837293][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.010873][ T5906] hid-steam 0003:28DE:1142.0007: item fetching failed at offset 3/5 [ 187.011624][ T5906] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 187.011699][ T5906] hid-steam 0003:28DE:1142.0007: probe with driver hid-steam failed with error -22 [ 187.078190][ T6450] bridge_slave_1: left allmulticast mode [ 187.078212][ T6450] bridge_slave_1: left promiscuous mode [ 187.078372][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.137985][ T5971] usb 6-1: USB disconnect, device number 3 [ 187.200808][ T6450] bridge_slave_0: left allmulticast mode [ 187.200841][ T6450] bridge_slave_0: left promiscuous mode [ 187.201115][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.478975][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 188.592733][ T5849] Bluetooth: hci4: command tx timeout [ 189.072469][ T5849] Bluetooth: hci0: command tx timeout [ 190.687995][ T5849] Bluetooth: hci4: command tx timeout [ 190.817774][ T7346] netlink: 'syz.3.436': attribute type 8 has an invalid length. [ 190.817788][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 190.856883][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.870149][ T7347] netlink: 'syz.3.436': attribute type 8 has an invalid length. [ 190.870169][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 191.000925][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.041996][ T6450] bond0 (unregistering): Released all slaves [ 191.152392][ T5849] Bluetooth: hci0: command tx timeout [ 191.207371][ T7346] bond0: entered promiscuous mode [ 191.207393][ T7346] bond_slave_0: entered promiscuous mode [ 191.207616][ T7346] bond_slave_1: entered promiscuous mode [ 191.243885][ T7346] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 191.250515][ T7346] ip6gretap0: entered promiscuous mode [ 191.272987][ T7346] hsr1: entered promiscuous mode [ 191.420941][ T7347] Zero length message leads to an empty skb [ 192.831641][ T5849] Bluetooth: hci4: command tx timeout [ 193.275775][ T5849] Bluetooth: hci0: command tx timeout [ 193.417817][ T7372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.417831][ T7372] IPv6: NLM_F_CREATE should be set when creating new route [ 193.577222][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 194.128129][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 194.383267][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.383316][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.932326][ T6450] hsr_slave_0: left promiscuous mode [ 195.017167][ T6450] hsr_slave_1: left promiscuous mode [ 195.030697][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.030730][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.066927][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.066957][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.254220][ T6450] veth1_macvtap: left promiscuous mode [ 195.254342][ T6450] veth0_macvtap: left promiscuous mode [ 195.254631][ T6450] veth1_vlan: left promiscuous mode [ 195.254846][ T6450] veth0_vlan: left promiscuous mode [ 195.312349][ T5849] Bluetooth: hci0: command tx timeout [ 195.676451][ T7391] netlink: 'syz.3.450': attribute type 7 has an invalid length. [ 195.676471][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 196.952409][ T6761] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 197.127720][ T6761] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.127738][ T6761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.127748][ T6761] usb 6-1: Product: syz [ 197.127755][ T6761] usb 6-1: Manufacturer: syz [ 197.127762][ T6761] usb 6-1: SerialNumber: syz [ 198.345062][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 198.574593][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 198.783404][ T6761] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 198.784752][ T6761] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 198.788157][ T6761] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 198.788223][ T6761] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 198.804162][ T6761] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 198.870611][ T6761] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 198.922656][ T6761] usb 6-1: USB disconnect, device number 4 [ 199.596854][ T7406] evm: overlay not supported [ 201.727427][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.727565][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.727801][ T7264] bridge_slave_0: entered allmulticast mode [ 201.763302][ T7264] bridge_slave_0: entered promiscuous mode [ 201.812746][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.812857][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.813070][ T7264] bridge_slave_1: entered allmulticast mode [ 201.815511][ T7264] bridge_slave_1: entered promiscuous mode [ 202.497378][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.527970][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.654412][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.679230][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 202.687588][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 202.687634][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.731751][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.731779][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.731798][ T31] usb 6-1: Product: syz [ 202.731812][ T31] usb 6-1: Manufacturer: syz [ 202.731826][ T31] usb 6-1: SerialNumber: syz [ 203.190104][ T31] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 203.527063][ T7264] team0: Port device team_slave_0 added [ 203.529019][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 203.596159][ T7264] team0: Port device team_slave_1 added [ 203.997043][ T31] usb 6-1: failed to read current rate; disabling the check [ 204.356736][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.356751][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.356783][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.530969][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.530986][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.531016][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.548517][ T31] usb 6-1: USB disconnect, device number 5 [ 205.665864][ T7264] hsr_slave_0: entered promiscuous mode [ 205.673109][ T7264] hsr_slave_1: entered promiscuous mode [ 205.676112][ T7264] debugfs: 'hsr0' already exists in 'hsr' [ 205.676137][ T7264] Cannot create hsr debugfs directory [ 205.907296][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.907496][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.907716][ T7292] bridge_slave_0: entered allmulticast mode [ 205.924167][ T7292] bridge_slave_0: entered promiscuous mode [ 205.962110][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.962459][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.962701][ T7292] bridge_slave_1: entered allmulticast mode [ 205.965391][ T7292] bridge_slave_1: entered promiscuous mode [ 206.822411][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 206.976661][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.976696][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.976733][ T31] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 206.976755][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.986261][ T31] usb 6-1: config 0 descriptor?? [ 207.378974][ T6450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.442262][ T5971] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 207.482674][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482711][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482734][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482755][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482785][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482809][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.482830][ T31] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 207.491767][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.551710][ T31] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 207.619074][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.619107][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.619128][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.619169][ T5971] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 207.619191][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.650822][ T31] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 207.684784][ T5971] usb 5-1: config 0 descriptor?? [ 207.749321][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.028513][ T6450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.100075][ T5971] acrux 0003:1A34:0802.0009: global environment stack underflow [ 208.100096][ T5971] acrux 0003:1A34:0802.0009: item 0 4 1 11 parsing failed [ 208.100904][ T5971] acrux 0003:1A34:0802.0009: parse failed [ 208.100971][ T5971] acrux 0003:1A34:0802.0009: probe with driver acrux failed with error -22 [ 208.275102][ T7488] cp2112 0003:10C4:EA90.0008: Error starting transaction: -38 [ 208.286803][ T31] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 208.302647][ T31] usb 6-1: USB disconnect, device number 6 [ 208.329105][ T5971] usb 5-1: USB disconnect, device number 4 [ 208.784172][ T6450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.920378][ T7292] team0: Port device team_slave_0 added [ 209.010115][ T7292] team0: Port device team_slave_1 added [ 209.377656][ T6450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.442301][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.619732][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 209.621946][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 209.621968][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.630516][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.630543][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.630553][ T31] usb 5-1: Product: syz [ 209.630561][ T31] usb 5-1: Manufacturer: syz [ 209.630567][ T31] usb 5-1: SerialNumber: syz [ 209.687877][ T31] usb 5-1: config 0 descriptor?? [ 209.692008][ T31] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.692029][ T31] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 210.020083][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.020099][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.020122][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.137869][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.137880][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.137895][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.325410][ T31] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 210.326277][ T31] em28xx 5-1:0.0: Config register raw data: 0xf6 [ 210.326294][ T31] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 210.326302][ T31] em28xx 5-1:0.0: No AC97 audio processor [ 211.128458][ T7292] hsr_slave_0: entered promiscuous mode [ 211.138699][ T7292] hsr_slave_1: entered promiscuous mode [ 211.139651][ T7292] debugfs: 'hsr0' already exists in 'hsr' [ 211.139674][ T7292] Cannot create hsr debugfs directory [ 211.170206][ T44] usb 5-1: USB disconnect, device number 5 [ 211.292412][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 211.336651][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389199][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389278][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389340][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389402][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389569][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389631][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389692][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389754][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.389816][ T7529] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 211.452308][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 211.454931][ T31] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 211.454955][ T31] usb 6-1: config 0 has no interface number 0 [ 211.455001][ T31] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.455024][ T31] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 211.455046][ T31] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.455070][ T31] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.455109][ T31] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.455131][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.551960][ T31] usb 6-1: config 0 descriptor?? [ 211.581092][ T31] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 211.796627][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 211.796663][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 211.897839][ T5906] usb 6-1: USB disconnect, device number 7 [ 211.926069][ T5906] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 212.053145][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.234595][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.234625][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.234644][ T9] usb 5-1: Product: syz [ 212.234657][ T9] usb 5-1: Manufacturer: syz [ 212.234671][ T9] usb 5-1: SerialNumber: syz [ 212.592789][ T6450] bridge_slave_1: left allmulticast mode [ 212.592823][ T6450] bridge_slave_1: left promiscuous mode [ 212.593080][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.684877][ T6450] bridge_slave_0: left allmulticast mode [ 212.685424][ T6450] bridge_slave_0: left promiscuous mode [ 212.689166][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.811920][ T7542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.811943][ T7542] IPv6: NLM_F_CREATE should be set when creating new route [ 213.911609][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 213.912109][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 213.913201][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 213.913249][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 213.913954][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 214.011126][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 214.092668][ T9] usb 5-1: USB disconnect, device number 6 [ 214.392446][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.561071][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.561103][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.561124][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.561166][ T5906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.561187][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.598468][ T5906] usb 6-1: config 0 descriptor?? [ 215.044925][ T5906] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 215.094087][ T5906] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 215.322763][ T5906] usb 6-1: USB disconnect, device number 8 [ 215.645223][ T7570] kvm: emulating exchange as write [ 216.290481][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.375340][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.552690][ T6450] bond0 (unregistering): Released all slaves [ 216.783518][ T7264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.129887][ T7264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.586839][ T7264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.778502][ T7264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.572550][ T6450] hsr_slave_0: left promiscuous mode [ 218.622455][ T6450] hsr_slave_1: left promiscuous mode [ 218.623042][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.623059][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.674313][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.674333][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.880210][ T7606] netlink: 'syz.5.518': attribute type 1 has an invalid length. [ 218.966655][ T6450] veth1_macvtap: left promiscuous mode [ 218.966727][ T6450] veth0_macvtap: left promiscuous mode [ 218.966893][ T6450] veth1_vlan: left promiscuous mode [ 218.967007][ T6450] veth0_vlan: left promiscuous mode [ 219.142272][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 219.297239][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.297264][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.297282][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.338412][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.338440][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.338460][ T31] usb 4-1: Product: syz [ 219.338473][ T31] usb 4-1: Manufacturer: syz [ 219.338486][ T31] usb 4-1: SerialNumber: syz [ 219.794554][ T31] usb 4-1: 0:2 : does not exist [ 221.133625][ T31] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 221.237771][ T31] usb 4-1: USB disconnect, device number 6 [ 221.294639][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.423399][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 223.244788][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 223.520126][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 226.005392][ T7606] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 226.102098][ T7615] bridge_slave_1: left allmulticast mode [ 226.102877][ T7615] bridge_slave_1: left promiscuous mode [ 226.110557][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.217462][ T7615] bridge_slave_0: left allmulticast mode [ 226.217494][ T7615] bridge_slave_0: left promiscuous mode [ 226.217779][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.921916][ T7632] wg2: entered promiscuous mode [ 226.921943][ T7632] wg2: entered allmulticast mode [ 227.366490][ T7292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 227.441971][ T7292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 227.530242][ T7292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 227.599849][ T7292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.451728][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.626320][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.745428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.745574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.900772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.900929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.910320][ T7675] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.538'. [ 228.910374][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 229.314737][ T6450] IPVS: stop unused estimator thread 0... [ 229.554434][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.678194][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.734250][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.734476][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.824235][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.828764][ T6431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.940959][ T7690] warning: `syz.5.543' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 230.208182][ T7697] netlink: 'syz.3.546': attribute type 3 has an invalid length. [ 230.209569][ T7697] netlink: 'syz.3.546': attribute type 3 has an invalid length. [ 230.257578][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.313024][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.554913][ T7264] veth0_vlan: entered promiscuous mode [ 231.610884][ T7264] veth1_vlan: entered promiscuous mode [ 231.830377][ T7264] veth0_macvtap: entered promiscuous mode [ 231.884590][ T7264] veth1_macvtap: entered promiscuous mode [ 231.988251][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.054073][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.193112][ T6263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.196646][ T6263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.199800][ T6263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.203368][ T6263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.905620][ T7750] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.559'. [ 232.944555][ T7292] veth0_vlan: entered promiscuous mode [ 232.960093][ T6433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.960106][ T6433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.019580][ T7292] veth1_vlan: entered promiscuous mode [ 233.244912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.244933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.361419][ T7292] veth0_macvtap: entered promiscuous mode [ 233.377235][ T7292] veth1_macvtap: entered promiscuous mode [ 233.468302][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.530431][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.607606][ T6452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.608924][ T6452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.609856][ T6452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.642889][ T6452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.151745][ T6452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.151765][ T6452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.524144][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.524164][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.823982][ T7768] mmap: syz.6.564 (7768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 235.279921][ T7780] sctp: [Deprecated]: syz.7.411 (pid 7780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.279921][ T7780] Use struct sctp_sack_info instead [ 235.951756][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 235.951801][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 237.222768][ T5927] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.247394][ T7818] KVM: debugfs: duplicate directory 7818-5 [ 237.392407][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 237.397361][ T5927] usb 6-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 237.404681][ T5927] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 237.404710][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.404737][ T5927] usb 6-1: Product: syz [ 237.404751][ T5927] usb 6-1: Manufacturer: syz [ 237.404764][ T5927] usb 6-1: SerialNumber: syz [ 237.436093][ T5927] usb 6-1: config 0 descriptor?? [ 237.454375][ T5927] usb 6-1: bad CDC descriptors [ 237.461561][ T5927] usb 6-1: unsupported MDLM descriptors [ 238.092902][ T5971] usb 6-1: USB disconnect, device number 9 [ 239.185867][ T6447] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.524385][ T6447] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.904556][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.911194][ T6442] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 240.917439][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.936473][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.126178][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.140975][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.876682][ T6447] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.182461][ T5971] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 242.282437][ T5848] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.307575][ T6447] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.333499][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 242.338236][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.338267][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.338289][ T5971] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.338329][ T5971] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.338351][ T5971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.390140][ T5971] usb 7-1: config 0 descriptor?? [ 242.462471][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 242.465180][ T5848] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 242.465207][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.514347][ T5848] usb 6-1: config 0 descriptor?? [ 242.520793][ T5848] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 242.921797][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921831][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921858][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921884][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921909][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921935][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921960][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.921985][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.922009][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.922033][ T5971] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 242.923802][ T5971] HID 045e:07da: Invalid code 65791 type 1 [ 242.964490][ T5971] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000B/input/input9 [ 243.003052][ T5971] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 243.271195][ T5927] usb 7-1: USB disconnect, device number 2 [ 243.321553][ T7875] fanotify_encode_fh: 1051 callbacks suppressed [ 243.321573][ T7875] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 243.330247][ T7873] fido_id[7873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 243.423993][ T7875] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 243.482730][ T5849] Bluetooth: hci0: command tx timeout [ 244.179439][ T5848] gspca_vc032x: reg_w err -71 [ 244.179464][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179473][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179481][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179489][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179497][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179505][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179513][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179521][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179529][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179536][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179544][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179552][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179560][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179567][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179574][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179582][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179589][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179596][ T5848] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.179604][ T5848] gspca_vc032x: Unknown sensor... [ 244.179682][ T5848] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 244.332578][ T5848] usb 6-1: USB disconnect, device number 10 [ 244.458708][ T6447] bridge_slave_1: left allmulticast mode [ 244.458741][ T6447] bridge_slave_1: left promiscuous mode [ 244.459201][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.664497][ T6447] bridge_slave_0: left allmulticast mode [ 244.664518][ T6447] bridge_slave_0: left promiscuous mode [ 244.664738][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.560443][ T5849] Bluetooth: hci0: command tx timeout [ 246.311873][ T7904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.082100][ T7913] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 247.092292][ T7913] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 247.092363][ T7913] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 247.646715][ T5854] Bluetooth: hci1: command 0x0405 tx timeout [ 247.646749][ T5854] Bluetooth: hci0: command tx timeout [ 249.163227][ T6447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.243005][ T6447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.325727][ T6447] bond0 (unregistering): Released all slaves [ 249.721291][ T5849] Bluetooth: hci0: command tx timeout [ 250.452812][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 252.381802][ T7979] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 252.522815][ T6447] hsr_slave_0: left promiscuous mode [ 252.606362][ T6447] hsr_slave_1: left promiscuous mode [ 252.614603][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.614634][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.675543][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.675574][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.906690][ T6447] veth1_macvtap: left promiscuous mode [ 252.906812][ T6447] veth0_macvtap: left promiscuous mode [ 252.907105][ T6447] veth1_vlan: left promiscuous mode [ 252.907303][ T6447] veth0_vlan: left promiscuous mode [ 252.971059][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.639'. [ 255.807213][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807286][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.893103][ T6447] team0 (unregistering): Port device team_slave_1 removed [ 258.518093][ T6447] team0 (unregistering): Port device team_slave_0 removed [ 261.079342][ T8041] openvswitch: netlink: IPv4 tun info is not correct [ 263.212259][ T5906] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 263.369492][ T5906] usb 5-1: config 0 has no interfaces? [ 263.379696][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.379725][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.379744][ T5906] usb 5-1: Product: syz [ 263.379759][ T5906] usb 5-1: Manufacturer: syz [ 263.379772][ T5906] usb 5-1: SerialNumber: syz [ 263.417997][ T5906] usb 5-1: config 0 descriptor?? [ 263.485954][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.486095][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.486322][ T7853] bridge_slave_0: entered allmulticast mode [ 263.582606][ T7853] bridge_slave_0: entered promiscuous mode [ 263.652933][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.653096][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.653326][ T7853] bridge_slave_1: entered allmulticast mode [ 263.687364][ T7853] bridge_slave_1: entered promiscuous mode [ 264.250634][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.265924][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.436862][ T5906] usb 5-1: USB disconnect, device number 7 [ 264.756873][ T8078] Bluetooth: MGMT ver 1.23 [ 264.806538][ T7853] team0: Port device team_slave_0 added [ 264.816131][ T7853] team0: Port device team_slave_1 added [ 265.324078][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.324094][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.324118][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.531433][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.531450][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.531474][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.896518][ T8104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.055395][ T7853] hsr_slave_0: entered promiscuous mode [ 266.056733][ T7853] hsr_slave_1: entered promiscuous mode [ 266.057610][ T7853] debugfs: 'hsr0' already exists in 'hsr' [ 266.057633][ T7853] Cannot create hsr debugfs directory [ 266.834890][ T5849] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 266.851971][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 268.211902][ T8120] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 269.773772][ T7853] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.837095][ T7853] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.910183][ T7853] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.956967][ T7853] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 270.927966][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.996517][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.104996][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.105202][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.149594][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.152397][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.002903][ T8178] syz_tun: entered allmulticast mode [ 272.070585][ T8178] dvmrp8: entered allmulticast mode [ 272.208115][ T8176] syz_tun: left allmulticast mode [ 272.238596][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.769187][ T7853] veth0_vlan: entered promiscuous mode [ 274.804971][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'. [ 274.983672][ T7853] veth1_vlan: entered promiscuous mode [ 275.332378][ T5971] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.350479][ T7853] veth0_macvtap: entered promiscuous mode [ 275.482272][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 275.486140][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.486169][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.488825][ T5971] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.488841][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.488852][ T5971] usb 5-1: Product: syz [ 275.488859][ T5971] usb 5-1: Manufacturer: syz [ 275.488866][ T5971] usb 5-1: SerialNumber: syz [ 275.491954][ T5971] usb 5-1: config 0 descriptor?? [ 275.497221][ T5971] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.497239][ T5971] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 275.654646][ T7853] veth1_macvtap: entered promiscuous mode [ 275.740457][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.809775][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.912350][ T6445] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.915775][ T6445] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.916109][ T6445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.916155][ T6445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.180846][ T5971] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 276.189295][ T5971] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 277.062150][ T5971] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 277.062573][ T5971] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 277.062873][ T5971] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 277.063183][ T5971] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 277.063484][ T5971] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 277.064721][ T5971] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 277.135581][ T5971] usb 5-1: USB disconnect, device number 8 [ 277.352989][ T6433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.353011][ T6433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.698626][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.698645][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.021483][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.732'. [ 284.211820][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 284.540387][ T8329] netlink: 'syz.4.751': attribute type 13 has an invalid length. [ 284.540408][ T8329] netlink: 'syz.4.751': attribute type 17 has an invalid length. [ 284.662717][ T8327] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.662748][ T8327] overlayfs: failed to set xattr on upper [ 284.662755][ T8327] overlayfs: ...falling back to redirect_dir=nofollow. [ 284.662762][ T8327] overlayfs: ...falling back to index=off. [ 284.662769][ T8327] overlayfs: ...falling back to uuid=null. [ 286.263989][ T8329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.845342][ T8364] netlink: 'syz.8.763': attribute type 10 has an invalid length. [ 288.014009][ T8364] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 288.014206][ T8364] team0: Failed to send options change via netlink (err -105) [ 288.014222][ T8364] team0: Port device netdevsim0 added [ 288.121159][ T37] audit: type=1800 audit(1758848256.476:127): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.759" name="/" dev="9p" ino=2 res=0 errno=0 [ 288.812350][ T5851] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.981247][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.981294][ T5851] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.981314][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.048179][ T5851] usb 7-1: config 0 descriptor?? [ 289.377378][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 289.377503][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 289.400060][ T5851] usb 7-1: USB disconnect, device number 3 [ 289.933085][ T5851] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 290.098691][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.098740][ T5851] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.098762][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.171494][ T5851] usb 7-1: config 0 descriptor?? [ 290.184693][ T5851] hub 7-1:0.0: USB hub found [ 290.394751][ T5851] hub 7-1:0.0: 1 port detected [ 291.382277][ T5926] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 291.563183][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.563216][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.563255][ T5926] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 291.563276][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.643693][ T5926] usb 6-1: config 0 descriptor?? [ 291.924266][ T5971] usb 7-1: USB disconnect, device number 4 [ 292.381962][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 292.382093][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 292.398279][ T8418] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 292.437476][ T5926] usb 6-1: USB disconnect, device number 11 [ 292.465551][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 292.728827][ T8418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.805587][ T8425] netlink: 240 bytes leftover after parsing attributes in process `syz.3.785'. [ 292.826308][ T8424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.826332][ T8424] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 292.938350][ T8424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.938905][ T8424] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 293.071256][ T8424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.071279][ T8424] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 293.358116][ T8424] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.358139][ T8424] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 293.573700][ T8424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.573724][ T8424] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 294.276203][ T8420] bond1 (unregistering): Released all slaves [ 294.420922][ T8434] [ 294.420936][ T8434] ====================================================== [ 294.420944][ T8434] WARNING: possible circular locking dependency detected [ 294.420958][ T8434] syzkaller #0 Not tainted [ 294.420969][ T8434] ------------------------------------------------------ [ 294.420977][ T8434] syz.5.788/8434 is trying to acquire lock: [ 294.420989][ T8434] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 294.421046][ T8434] [ 294.421046][ T8434] but task is already holding lock: [ 294.421052][ T8434] ffff88802f946950 (&group->lock#2){+.+.}-{3:3}, at: snd_pcm_drop+0x10d/0x270 [ 294.421097][ T8434] [ 294.421097][ T8434] which lock already depends on the new lock. [ 294.421097][ T8434] [ 294.421104][ T8434] [ 294.421104][ T8434] the existing dependency chain (in reverse order) is: [ 294.421111][ T8434] [ 294.421111][ T8434] -> #2 (&group->lock#2){+.+.}-{3:3}: [ 294.421141][ T8434] lock_acquire+0x120/0x360 [ 294.421165][ T8434] rt_spin_lock+0x88/0x2c0 [ 294.421187][ T8434] _snd_pcm_stream_lock_irqsave+0x7c/0xa0 [ 294.421205][ T8434] snd_pcm_period_elapsed+0x1e/0x80 [ 294.421230][ T8434] dummy_hrtimer_callback+0x80/0x180 [ 294.421254][ T8434] __hrtimer_run_queues+0x54f/0xd40 [ 294.421281][ T8434] hrtimer_run_softirq+0x1a3/0x2e0 [ 294.421296][ T8434] handle_softirqs+0x22f/0x710 [ 294.421317][ T8434] run_ktimerd+0xcf/0x190 [ 294.421350][ T8434] smpboot_thread_fn+0x53f/0xa60 [ 294.421372][ T8434] kthread+0x70e/0x8a0 [ 294.421404][ T8434] ret_from_fork+0x436/0x7d0 [ 294.421427][ T8434] ret_from_fork_asm+0x1a/0x30 [ 294.421443][ T8434] [ 294.421443][ T8434] -> #1 (&base->softirq_expiry_lock){+...}-{3:3}: [ 294.421468][ T8434] lock_acquire+0x120/0x360 [ 294.421489][ T8434] rt_spin_lock+0x88/0x2c0 [ 294.421509][ T8434] hrtimer_run_softirq+0x7c/0x2e0 [ 294.421524][ T8434] handle_softirqs+0x22f/0x710 [ 294.421545][ T8434] run_ktimerd+0xcf/0x190 [ 294.421566][ T8434] smpboot_thread_fn+0x53f/0xa60 [ 294.421585][ T8434] kthread+0x70e/0x8a0 [ 294.421607][ T8434] ret_from_fork+0x436/0x7d0 [ 294.421627][ T8434] ret_from_fork_asm+0x1a/0x30 [ 294.421642][ T8434] [ 294.421642][ T8434] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 294.421665][ T8434] validate_chain+0xb9b/0x2140 [ 294.421689][ T8434] __lock_acquire+0xab9/0xd20 [ 294.421710][ T8434] reacquire_held_locks+0x127/0x1d0 [ 294.421735][ T8434] lock_release+0x1b4/0x3e0 [ 294.421756][ T8434] __local_bh_enable_ip+0x10c/0x270 [ 294.421777][ T8434] hrtimer_cancel+0x39/0x60 [ 294.421800][ T8434] dummy_hrtimer_stop+0xcf/0x100 [ 294.421822][ T8434] snd_pcm_do_stop+0x127/0x1c0 [ 294.421843][ T8434] snd_pcm_action+0xe4/0x240 [ 294.421860][ T8434] snd_pcm_drop+0x160/0x270 [ 294.421877][ T8434] snd_pcm_oss_sync+0x1de/0xc30 [ 294.421900][ T8434] snd_pcm_oss_release+0x102/0x250 [ 294.421922][ T8434] __fput+0x45b/0xa80 [ 294.421938][ T8434] task_work_run+0x1d4/0x260 [ 294.421954][ T8434] get_signal+0x11c5/0x1310 [ 294.421975][ T8434] arch_do_signal_or_restart+0x9a/0x750 [ 294.421995][ T8434] exit_to_user_mode_loop+0x75/0x110 [ 294.422016][ T8434] do_syscall_64+0x2bd/0x3b0 [ 294.422033][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.422050][ T8434] [ 294.422050][ T8434] other info that might help us debug this: [ 294.422050][ T8434] [ 294.422057][ T8434] Chain exists of: [ 294.422057][ T8434] (softirq_ctrl.lock) --> &base->softirq_expiry_lock --> &group->lock#2 [ 294.422057][ T8434] [ 294.422092][ T8434] Possible unsafe locking scenario: [ 294.422092][ T8434] [ 294.422098][ T8434] CPU0 CPU1 [ 294.422103][ T8434] ---- ---- [ 294.422109][ T8434] lock(&group->lock#2); [ 294.422129][ T8434] lock(&base->softirq_expiry_lock); [ 294.422142][ T8434] lock(&group->lock#2); [ 294.422158][ T8434] lock((softirq_ctrl.lock)); [ 294.422169][ T8434] [ 294.422169][ T8434] *** DEADLOCK *** [ 294.422169][ T8434] [ 294.422173][ T8434] 2 locks held by syz.5.788/8434: [ 294.422183][ T8434] #0: ffff88802f946950 (&group->lock#2){+.+.}-{3:3}, at: snd_pcm_drop+0x10d/0x270 [ 294.422231][ T8434] #1: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 294.422275][ T8434] [ 294.422275][ T8434] stack backtrace: [ 294.422287][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.5.788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 294.422309][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.422320][ T8434] Call Trace: [ 294.422326][ T8434] [ 294.422335][ T8434] dump_stack_lvl+0x189/0x250 [ 294.422362][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.422392][ T8434] ? __pfx__printk+0x10/0x10 [ 294.422410][ T8434] ? print_lock_name+0xde/0x100 [ 294.422430][ T8434] print_circular_bug+0x2ee/0x310 [ 294.422449][ T8434] check_noncircular+0x134/0x160 [ 294.422480][ T8434] validate_chain+0xb9b/0x2140 [ 294.422511][ T8434] ? do_raw_spin_lock+0x121/0x290 [ 294.422537][ T8434] __lock_acquire+0xab9/0xd20 [ 294.422564][ T8434] reacquire_held_locks+0x127/0x1d0 [ 294.422590][ T8434] ? __local_bh_disable_ip+0x264/0x400 [ 294.422616][ T8434] lock_release+0x1b4/0x3e0 [ 294.422638][ T8434] ? __local_bh_enable_ip+0x100/0x270 [ 294.422662][ T8434] __local_bh_enable_ip+0x10c/0x270 [ 294.422684][ T8434] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 294.422708][ T8434] ? rt_spin_unlock+0x65/0x80 [ 294.422733][ T8434] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 294.422760][ T8434] ? hrtimer_cancel_wait_running+0x142/0x180 [ 294.422787][ T8434] hrtimer_cancel+0x39/0x60 [ 294.422812][ T8434] dummy_hrtimer_stop+0xcf/0x100 [ 294.422837][ T8434] snd_pcm_do_stop+0x127/0x1c0 [ 294.422862][ T8434] snd_pcm_action+0xe4/0x240 [ 294.422883][ T8434] snd_pcm_drop+0x160/0x270 [ 294.422903][ T8434] snd_pcm_oss_sync+0x1de/0xc30 [ 294.422930][ T8434] ? do_syscall_64+0xfa/0x3b0 [ 294.422950][ T8434] snd_pcm_oss_release+0x102/0x250 [ 294.422974][ T8434] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 294.422999][ T8434] __fput+0x45b/0xa80 [ 294.423023][ T8434] task_work_run+0x1d4/0x260 [ 294.423043][ T8434] ? __pfx_task_work_run+0x10/0x10 [ 294.423065][ T8434] get_signal+0x11c5/0x1310 [ 294.423086][ T8434] ? kick_process+0xeb/0x160 [ 294.423110][ T8434] ? task_work_add+0x377/0x420 [ 294.423129][ T8434] ? __pfx_task_work_add+0x10/0x10 [ 294.423146][ T8434] ? __pfx_vfs_read+0x10/0x10 [ 294.423171][ T8434] arch_do_signal_or_restart+0x9a/0x750 [ 294.423193][ T8434] ? __pfx___fput_deferred+0x10/0x10 [ 294.423210][ T8434] ? __fget_files+0x2a/0x420 [ 294.423236][ T8434] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 294.423265][ T8434] ? exit_to_user_mode_loop+0x40/0x110 [ 294.423290][ T8434] exit_to_user_mode_loop+0x75/0x110 [ 294.423313][ T8434] do_syscall_64+0x2bd/0x3b0 [ 294.423330][ T8434] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.423355][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.423372][ T8434] ? clear_bhb_loop+0x60/0xb0 [ 294.423399][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.423418][ T8434] RIP: 0033:0x7f73c0f0eec9 [ 294.423435][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.423451][ T8434] RSP: 002b:00007f73bf16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.423470][ T8434] RAX: fffffffffffffe00 RBX: 00007f73c1165fa0 RCX: 00007f73c0f0eec9 [ 294.423485][ T8434] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000004 [ 294.423498][ T8434] RBP: 00007f73c0f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.423511][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.423523][ T8434] R13: 00007f73c1166038 R14: 00007f73c1165fa0 R15: 00007ffedecd2978 [ 294.423545][ T8434] [ 295.188361][ T8444] sch_tbf: burst 19872 is lower than device lo mtu (65550) !