last executing test programs: 3m40.659449467s ago: executing program 32 (id=161): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(0x0, r0, 0x3e, &(0x7f0000000080)={0x1f, 0xfffffffc, 0xffff}) 2m19.497586884s ago: executing program 4 (id=1295): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) splice(r0, 0x0, r2, 0x0, 0x800000000082, 0xf) 2m19.434400029s ago: executing program 4 (id=1298): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000cde000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2m19.236031427s ago: executing program 4 (id=1301): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 2m19.154662121s ago: executing program 4 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') 2m19.071064933s ago: executing program 4 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d5}, 0x20040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 2m19.002609398s ago: executing program 4 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m18.950519198s ago: executing program 33 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m41.307019592s ago: executing program 2 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1m41.227462862s ago: executing program 2 (id=1939): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e4, 0x0, 0x111, 0x4b4, 0x148, 0x700, 0x254, 0x278, 0x278, 0x254, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x2000], [0x0, 0x1]}}, @common=@unspec=@connlabel={{0x24}, {0x5, 0x1001}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x3}, {0x0, 0x4}, 0xf}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x4}, {0x4, 0x1, 0x4}, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m41.129075142s ago: executing program 2 (id=1942): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) setns(0xc9, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.02986014s ago: executing program 2 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 1m40.980950122s ago: executing program 2 (id=1944): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) getdents64(r0, &(0x7f0000000180)=""/172, 0xac) 1m40.720004628s ago: executing program 2 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) 1m40.646459139s ago: executing program 34 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) 1m24.366306474s ago: executing program 6 (id=2215): syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_ra={0x88}}}}}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1m24.129850503s ago: executing program 6 (id=2217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x4, 0x0, 0x2, 0x4, 0xffff, 0x6, {0xfffffffffffffffb, 0x0, 0x1, 0x8001, 0xb905, 0x3, 0x40, 0xfffffffd, 0x6, 0x2000, 0x0, 0x0, r2, 0x7ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000, 0x200, 0x2, 0x5, 0x3}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 1m23.97332056s ago: executing program 6 (id=2218): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r5], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m23.765439698s ago: executing program 6 (id=2228): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1m23.571436746s ago: executing program 6 (id=2222): socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) 1m23.046175084s ago: executing program 6 (id=2226): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) 1m22.783488817s ago: executing program 35 (id=2226): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) 1m15.958680959s ago: executing program 0 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008844) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 1m15.66032592s ago: executing program 0 (id=2305): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m15.551035412s ago: executing program 0 (id=2306): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) 1m15.169289983s ago: executing program 0 (id=2310): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 1m15.12528514s ago: executing program 0 (id=2312): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m14.871523509s ago: executing program 0 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1m14.804374416s ago: executing program 36 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 53.302242015s ago: executing program 7 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x44}}, 0x40850) 53.148757255s ago: executing program 7 (id=2433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0xa, 0xa}], 0x10, 0x7fb}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 53.061981091s ago: executing program 7 (id=2434): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 52.96005983s ago: executing program 7 (id=2437): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 52.864330687s ago: executing program 7 (id=2438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x30}]) 52.637192413s ago: executing program 7 (id=2442): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xa, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c) 52.419711796s ago: executing program 37 (id=2442): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xa, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c) 33.464233143s ago: executing program 3 (id=2711): openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='* ./export_dir \\00x000000 8194 0 0 0\n', 0x25) 33.441057648s ago: executing program 3 (id=2712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) 33.341500276s ago: executing program 3 (id=2714): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x88}, {r4, 0x40d}], 0x2, 0x6) 33.341164571s ago: executing program 3 (id=2715): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x5202, 0x0) 33.291559719s ago: executing program 3 (id=2716): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) 32.681560915s ago: executing program 3 (id=2720): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 32.608838958s ago: executing program 38 (id=2720): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.550287004s ago: executing program 1 (id=3047): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x5, 0x1) getdents64(r0, 0x0, 0x0) 5.320815596s ago: executing program 1 (id=3049): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4.57503479s ago: executing program 1 (id=3053): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) set_mempolicy(0x8001, &(0x7f0000000040)=0x9, 0xd2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x2, 0x1, 0x1, 0x0, 0x7}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r0, r0, 0x0) 3.88427447s ago: executing program 1 (id=3060): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0xe1b31c0aaf6f5dc5}}, 0x40) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x4, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 3.56780163s ago: executing program 1 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write(r1, 0x0, 0x0) 2.647189496s ago: executing program 9 (id=3081): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.646829593s ago: executing program 8 (id=3082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40045) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2, 0x0, 0x18}, 0x0) 2.620326811s ago: executing program 9 (id=3083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x1, 0x106e, 0xc, 0x8000000000000, 0x80000004000080, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x6, 0x7ffd], 0x41000, 0x3c4210}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x1cbae1f0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.6067009s ago: executing program 8 (id=3084): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='./file0\x00', &(0x7f0000000700)='ocfs2\x00', 0x0, &(0x7f0000000800)='heartbeat=none\x00') pwrite64(r0, &(0x7f0000000900)='garbage\x00', 0x7, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/node\x00', 0x81ff, 0x0) 2.447619331s ago: executing program 1 (id=3085): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x80005) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0xcb9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.192436561s ago: executing program 9 (id=3086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.436754329s ago: executing program 8 (id=3088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.401085042s ago: executing program 5 (id=3089): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000280)={r3}) 1.324902056s ago: executing program 9 (id=3090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 1.240671339s ago: executing program 5 (id=3091): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 1.211423498s ago: executing program 9 (id=3092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 1.08356008s ago: executing program 8 (id=3093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x50000, {}, 0x1, 0x6}, {"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", "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"}}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.058392643s ago: executing program 8 (id=3094): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='cdns2-pci\n\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/cdns2-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:00.0\n\x00', 0xd) close(r1) 953.705519ms ago: executing program 8 (id=3095): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 741.55955ms ago: executing program 5 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bpf$MAP_CREATE(0x2000000000000011, &(0x7f0000000040)=@base={0x8, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0xfffffffe}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) 515.94112ms ago: executing program 5 (id=3097): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xfffffffff24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee00, 0xee01, 0x1000) 349.343296ms ago: executing program 5 (id=3098): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:03/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='00:03\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disable', 0x7) write(r1, &(0x7f00000001c0)='set io 0-0', 0xa) write(r1, &(0x7f0000000200)='activate', 0x8) 264.357543ms ago: executing program 9 (id=3099): ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2a, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) 0s ago: executing program 5 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x108242, 0x78e22799f4a46fa9) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='fi', 0x2) kernel console output (not intermixed with test programs): 160.338196][T10121] misc userio: Can't change port id on an already running userio instance [ 160.518854][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.990100][T10139] jffs2: notice: (10139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.070025][T10144] device-mapper: table: 248:0: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 161.074479][T10144] device-mapper: ioctl: error adding target to table [ 161.317991][T10169] kernel read not supported for file /eth0 (pid: 10169 comm: syz.5.1621) [ 161.325123][ T42] audit: type=1800 audit(1785883729.547:10456): pid=10169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1621" name="eth0" dev="mqueue" ino=33550 res=0 errno=0 [ 161.390078][T10179] gadgetfs: bound to dummy_udc driver [ 162.062612][ T42] audit: type=1800 audit(1785883730.287:10457): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1646" name="enable" dev="configfs" ino=36011 res=0 errno=0 [ 162.781100][T10266] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 162.804779][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 163.252822][T10306] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1684'. [ 163.378003][T10311] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 164.224805][ T42] audit: type=1800 audit(1785883732.447:10458): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1711" name="enable" dev="configfs" ino=34443 res=0 errno=0 [ 164.436567][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 164.735325][T10384] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 164.918732][ T5759] Bluetooth: hci0: command 0x1407 tx timeout [ 164.923148][ T5752] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 165.766842][T10430] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 165.881551][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 165.884648][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 165.971079][ T1489] IPVS: starting estimator thread 0... [ 165.973570][T10443] ceph: No mds server is up or the cluster is laggy [ 166.068697][T10452] IPVS: using max 31 ests per chain, 74400 per kthread [ 166.454934][T10478] Mass Storage Function, version: 2009/09/11 [ 166.457511][T10478] LUN: removable file: (no medium) [ 166.749599][ T1349] libceph: connect (1)[c::]:6789 error -99 [ 166.755019][ T1349] libceph: mon0 (1)[c::]:6789 connect error [ 166.844481][T10497] ceph: No mds server is up or the cluster is laggy [ 167.110913][T10519] block nbd0: shutting down sockets [ 167.167774][T10527] 9pnet: p9_errstr2errno: server reported unknown error [ 167.300413][T10539] input: syz0 as /devices/virtual/input/input20 [ 167.701276][T10573] netlink: 'syz.5.1792': attribute type 2 has an invalid length. [ 167.704589][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 167.905312][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1798'. [ 168.183060][T10608] sctp: [Deprecated]: syz.0.1802 (pid 10608) Use of int in max_burst socket option deprecated. [ 168.183060][T10608] Use struct sctp_assoc_value instead [ 168.531530][ T845] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.698646][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 168.701857][ T845] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 168.704673][ T845] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.708221][ T845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.712246][ T845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.715629][ T845] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.719822][ T845] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.722808][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.048737][ T1489] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 169.218789][ T1489] usb 10-1: Using ep0 maxpacket: 8 [ 169.222403][ T1489] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 169.225893][ T1489] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 169.229837][ T1489] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.233616][ T1489] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 169.238038][ T1489] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.242685][ T1489] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.248515][ T1489] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.252401][ T1489] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.465165][ T1489] usb 10-1: GET_CAPABILITIES returned 0 [ 169.467689][ T1489] usbtmc 10-1:16.0: can't read capabilities [ 169.669284][ T40] usb 10-1: USB disconnect, device number 2 [ 169.686769][ T5845] usb 5-1: USB disconnect, device number 13 [ 170.235464][T10653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.265632][T10653] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 170.270734][T10653] overlayfs: failed to look up (tracing) for ino (-66) [ 170.289690][ T5761] Bluetooth: hci0: command 0x1407 tx timeout [ 170.289742][ T5762] Bluetooth: hci2: command 0x0406 tx timeout [ 170.292376][ T5748] Bluetooth: hci3: command 0x0406 tx timeout [ 170.628636][ T1489] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 170.780879][ T1489] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.786557][ T1489] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.794219][ T1489] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.797317][ T1489] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.011214][ T1489] usb 10-1: usb_control_msg returned -32 [ 171.013639][ T1489] usbtmc 10-1:16.0: can't read capabilities [ 171.324117][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 171.363570][T10686] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -32 [ 171.472336][T10689] bridge0: port 1(syz_tun) entered blocking state [ 171.475265][T10689] bridge0: port 1(syz_tun) entered forwarding state [ 171.481959][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.506383][T10689] 8021q: adding VLAN 0 to HW filter on device eth0 [ 171.511149][T10689] 8021q: adding VLAN 0 to HW filter on device eth1 [ 171.514661][T10689] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.518428][T10689] 8021q: adding VLAN 0 to HW filter on device eth3 [ 173.421481][ T59] usb 10-1: USB disconnect, device number 3 [ 173.471746][T10733] all: renamed from lo [ 174.294223][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 175.090261][T10789] ceph: No mds server is up or the cluster is laggy [ 175.185757][ T42] audit: type=1800 audit(1785883743.407:10459): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1888" name="midi1_first_group" dev="configfs" ino=39165 res=0 errno=0 [ 175.369207][T10812] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 175.380298][T10812] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 175.382991][T10812] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 175.386610][T10812] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 175.409756][T10812] pci 0000:00:05.0: Adding to iommu group 5 [ 175.425866][T10812] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 175.431900][T10812] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 175.440144][T10812] pci 0000:00:1d.7: Adding to iommu group 7 [ 175.446727][T10812] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 175.452715][T10812] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 175.454987][T10824] syzkaller1: entered promiscuous mode [ 175.456756][T10812] pci 0000:00:1d.7: BAR 0 [mem 0x81002000-0x81002fff]: assigned [ 175.459424][T10824] syzkaller1: entered allmulticast mode [ 175.464092][T10812] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 175.547513][T10826] pim6reg1: entered promiscuous mode [ 175.549865][T10826] pim6reg1: entered allmulticast mode [ 175.655165][T10812] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 105078 usecs [ 175.745624][ T9279] usb 2-1: USB disconnect, device number 2 [ 176.008901][ T9279] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 176.035723][ T9279] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 38 [ 176.043622][ T9279] ehci-pci 0000:00:1d.7: irq 19, io mem 0x81002000 [ 176.103118][ T845] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.133491][ T9279] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 176.150468][ T9279] usb usb38: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 176.155949][ T9279] usb usb38: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 176.160298][ T9279] usb usb38: Product: EHCI Host Controller [ 176.162823][ T9279] usb usb38: Manufacturer: Linux syzkaller ehci_hcd [ 176.165552][ T9279] usb usb38: SerialNumber: 0000:00:1d.7 [ 176.253131][ T9279] hub 38-0:1.0: USB hub found [ 176.281536][ T9279] hub 38-0:1.0: 6 ports detected [ 176.288653][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 176.292370][ T845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.298361][ T845] usb 5-1: config 0 has no interfaces? [ 176.305023][ T845] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 176.309999][ T845] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 176.315366][ T845] usb 5-1: Product: syz [ 176.316723][ T845] usb 5-1: SerialNumber: syz [ 176.337127][ T845] usb 5-1: config 0 descriptor?? [ 176.365684][ T9279] hub 2-0:1.0: USB hub found [ 176.370058][ T9279] hub 2-0:1.0: 2 ports detected [ 176.426870][ T9279] hub 3-0:1.0: USB hub found [ 176.429774][ T9279] hub 3-0:1.0: 2 ports detected [ 176.485003][ T9279] hub 4-0:1.0: USB hub found [ 176.488025][ T9279] hub 4-0:1.0: 2 ports detected [ 176.561235][ T1489] usb 5-1: USB disconnect, device number 14 [ 176.568664][ T5750] usb 38-1: new high-speed USB device number 2 using ehci-pci [ 176.753210][ T5750] usb 38-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 176.756026][ T5750] usb 38-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 176.758500][ T5750] usb 38-1: Product: QEMU USB Tablet [ 176.760547][ T5750] usb 38-1: Manufacturer: QEMU [ 176.762014][ T5750] usb 38-1: SerialNumber: 28754-0000:00:1d.7-1 [ 176.792826][ T5750] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb38/38-1/38-1:1.0/0003:0627:0001.0004/input/input21 [ 176.870256][ T5750] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 177.158668][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.370041][T10912] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 178.518212][ T42] audit: type=1800 audit(1785883746.737:10460): pid=10928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1937" name="use" dev="configfs" ino=38250 res=0 errno=0 [ 178.601201][T10939] i8042 aux 00:01: in use; can't configure [ 178.605863][T10939] i8042 aux 00:01: in use; can't configure [ 178.610221][T10939] i8042 aux 00:01: in use; can't configure [ 178.876368][T10784] bridge0: port 1(syz_tun) entered disabled state [ 178.907765][T10784] syz_tun (unregistering): left allmulticast mode [ 178.910893][T10784] syz_tun (unregistering): left promiscuous mode [ 178.913547][T10784] bridge0: port 1(syz_tun) entered disabled state [ 179.005368][T10960] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 179.083355][T10966] netlink: 'syz.5.1951': attribute type 2 has an invalid length. [ 179.086501][T10966] netlink: 'syz.5.1951': attribute type 2 has an invalid length. [ 179.089223][T10966] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1951'. [ 179.127326][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.221277][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.242368][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.245578][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.249488][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.252514][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.255263][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.276931][T10979] snd_virmidi snd_virmidi.0: control 1:5120:195:¡:53367 is already present [ 179.379620][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.491825][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.498229][T11002] kvm: user requested TSC rate below hardware speed [ 179.552041][T11005] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 179.566932][T11005] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f] [ 179.569712][T11005] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff] [ 179.572896][T11005] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 179.612850][T11005] pci 0000:00:05.0: Adding to iommu group 5 [ 179.632182][T11005] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 179.641601][T11005] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 179.645067][T11005] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 179.836222][ T12] bridge0: left allmulticast mode [ 180.117752][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 180.121452][ T12] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 180.130326][ T12] bridge0 (unregistering): left promiscuous mode [ 180.178900][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 180.185198][ T12] team0: left promiscuous mode [ 180.190566][ T12] bond0 (unregistering): Released all slaves [ 180.198286][ T12] bond1 (unregistering): Released all slaves [ 180.339464][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.343114][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.346106][T10974] bridge_slave_0: entered allmulticast mode [ 180.352305][T10974] bridge_slave_0: entered promiscuous mode [ 180.357162][T10974] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.362012][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.365005][T10974] bridge_slave_1: entered allmulticast mode [ 180.367747][T10974] bridge_slave_1: entered promiscuous mode [ 180.370744][ T12] : left promiscuous mode [ 180.441311][T10974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.446162][T10974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.500455][T10974] team0: Port device team_slave_0 added [ 180.508088][T10974] team0: Port device team_slave_1 added [ 180.549587][T10974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.554272][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.562794][T10974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.568255][T10974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.571702][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.579715][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.584452][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 180.612180][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1972'. [ 180.633368][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1972'. [ 180.636387][T10974] hsr_slave_0: entered promiscuous mode [ 180.636934][T10974] hsr_slave_1: entered promiscuous mode [ 180.644204][T10974] debugfs: 'hsr0' already exists in 'hsr' [ 180.646049][T10974] Cannot create hsr debugfs directory [ 180.818915][ T12] hsr_slave_0: left promiscuous mode [ 180.821996][ T12] hsr_slave_1: left promiscuous mode [ 180.839219][ T12] veth1_macvtap: left promiscuous mode [ 180.842880][ T12] veth0_macvtap: left promiscuous mode [ 180.847805][ T12] veth1_vlan: left promiscuous mode [ 180.854293][ T12] veth0_vlan: left promiscuous mode [ 180.978227][T11062] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input22 [ 181.235346][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7 [ 181.283027][T10974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.293722][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.297694][T10974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.310847][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.316989][T10974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.319106][ T5101] Bluetooth: hci2: command tx timeout [ 181.340304][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.343741][T10974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.353965][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.557251][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'. [ 181.564398][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1991'. [ 181.568512][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8 [ 181.657598][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.674858][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.680929][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.683240][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.693032][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.694156][T11099] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 181.695667][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.713466][T11099] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f] [ 181.725238][T11099] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff] [ 181.736538][T11099] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 181.773574][T11099] pci 0000:00:05.0: Adding to iommu group 5 [ 181.786334][T11099] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 181.792943][T11099] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 181.795787][T11099] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 181.922681][T11126] random: crng reseeded on system resumption [ 181.927453][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 181.982707][T11130] lo speed is unknown, defaulting to 1000 [ 181.994642][T11130] lo speed is unknown, defaulting to 1000 [ 182.016760][T11130] lo speed is unknown, defaulting to 1000 [ 182.064922][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.219481][T11130] infiniband syz2: set active [ 182.226239][ T845] lo speed is unknown, defaulting to 1000 [ 182.228970][T10974] veth0_vlan: entered promiscuous mode [ 182.234828][T10974] veth1_vlan: entered promiscuous mode [ 182.240940][T11130] infiniband syz2: added lo [ 182.255795][T10974] veth0_macvtap: entered promiscuous mode [ 182.261928][T11130] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 182.263416][T10974] veth1_macvtap: entered promiscuous mode [ 182.267849][T11130] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 182.275632][T11130] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 182.283989][T10974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.292440][T10974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.319645][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.344748][ T6216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.347199][T11130] RDS/IB: syz2: added [ 182.363784][ T6216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.372910][T11130] smc: adding ib device syz2 with port count 1 [ 182.376458][T11130] smc: ib device syz2 port 1 has no pnetid [ 182.394580][ T845] lo speed is unknown, defaulting to 1000 [ 182.465647][T11130] lo speed is unknown, defaulting to 1000 [ 182.485803][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.494818][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.585908][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.593486][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.618675][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.753236][T11183] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2014'. [ 182.801770][T11130] lo speed is unknown, defaulting to 1000 [ 182.853509][T11193] Mass Storage Function, version: 2009/09/11 [ 182.864756][T11193] LUN: removable file: (no medium) [ 182.974060][T11130] lo speed is unknown, defaulting to 1000 [ 182.991014][ T42] audit: type=1800 audit(1785883751.217:10461): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2020" name="bmControls" dev="configfs" ino=38804 res=0 errno=0 [ 183.113981][T11130] lo speed is unknown, defaulting to 1000 [ 183.244804][T11130] lo speed is unknown, defaulting to 1000 [ 183.288174][T11213] overlayfs: statfs failed on './file0' [ 183.343493][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 183.401588][ T5101] Bluetooth: hci2: command tx timeout [ 183.656508][ T42] audit: type=1800 audit(1785883751.877:10462): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2034" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 183.949465][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 183.955225][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 183.968494][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 183.988732][ T1041] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 184.012180][T11247] loop6: detected capacity change from 0 to 2640 [ 184.017251][T11247] buffer_io_error: 27 callbacks suppressed [ 184.017266][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.022581][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.024975][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.027315][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.030122][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.032553][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.035148][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.037628][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.040854][T11247] ldm_validate_partition_table(): Disk read failed. [ 184.043213][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.046026][T11247] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.048499][T11247] Dev loop6: unable to read RDB block 0 [ 184.051246][T11247] loop6: unable to read partition table [ 184.055442][T11247] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 184.080313][ T5153] ldm_validate_partition_table(): Disk read failed. [ 184.082403][ T5153] Dev loop6: unable to read RDB block 0 [ 184.084206][ T5153] loop6: unable to read partition table [ 184.128291][T11251] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 184.149921][ T1041] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.154766][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.162889][ T1041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.166420][ T1041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.171172][ T1041] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.174085][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.177910][ T1041] usb 5-1: Product: syz [ 184.179565][ T1041] usb 5-1: Manufacturer: syz [ 184.186148][ T1041] cdc_wdm 5-1:1.0: skipping garbage [ 184.190390][ T1041] cdc_wdm 5-1:1.0: skipping garbage [ 184.196849][ T1041] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 184.200157][ T1041] cdc_wdm 5-1:1.0: Unknown control protocol [ 184.425822][T11265] input: syz1 as /devices/virtual/input/input23 [ 184.457785][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 184.458114][ T5845] usb 5-1: USB disconnect, device number 15 [ 184.460379][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 184.460397][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.674892][T11279] capability: warning: `syz.5.2054' uses 32-bit capabilities (legacy support in use) [ 184.676259][ T42] audit: type=1800 audit(1785883752.897:10463): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2054" name="scan_secs" dev="configfs" ino=38883 res=0 errno=0 [ 184.911113][T11294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.916697][T11294] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 184.935582][T11294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.938052][T11294] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 184.960810][T11294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.963476][T11294] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.997510][T11294] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.011829][T11294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.013708][T11294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.017437][T11294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.024232][ T9] lo speed is unknown, defaulting to 1000 [ 185.568359][T11346] binder: 11345:11346 ioctl c0306201 80000080 returned -14 [ 185.715631][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2090'. [ 185.907937][T10890] udevd[10890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 185.949241][T11363] nbd6: detected capacity change from 0 to 8 [ 185.964430][T11368] block nbd6: shutting down sockets [ 185.969312][ T5118] blk_print_req_error: 104 callbacks suppressed [ 185.969331][ T5118] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.979769][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 185.985922][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.003699][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.007505][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.011400][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.014813][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.018458][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.022074][T10890] ldm_validate_partition_table(): Disk read failed. [ 186.025426][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.029581][ T5113] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.033988][T10890] Dev nbd6: unable to read RDB block 0 [ 186.035977][T10890] nbd6: unable to read partition table [ 186.039977][T10890] nbd6: partition table beyond EOD, truncated [ 186.043126][ T5153] ldm_validate_partition_table(): Disk read failed. [ 186.046906][ T5153] Dev nbd6: unable to read RDB block 0 [ 186.049808][ T5153] nbd6: unable to read partition table [ 186.052312][ T5153] nbd6: partition table beyond EOD, truncated [ 186.058021][T10890] ldm_validate_partition_table(): Disk read failed. [ 186.065933][T10890] Dev nbd6: unable to read RDB block 0 [ 186.070863][T10890] nbd6: unable to read partition table [ 186.076255][T10890] nbd6: partition table beyond EOD, truncated [ 186.212323][T11377] gadgetfs: bound to dummy_udc driver [ 186.846071][T11396] netlink: 'syz.0.2104': attribute type 1 has an invalid length. [ 186.858503][T11396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.880332][T11396] bond6: (slave geneve2): making interface the new active one [ 186.883612][T11396] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 186.909092][ T6216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.911902][ T6216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.914512][ T6216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.917203][ T6216] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.919109][ T5101] Bluetooth: hci0: command 0x1407 tx timeout [ 186.998751][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.001896][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 187.081069][ T5759] Bluetooth: hci2: command 0x0419 tx timeout [ 187.393053][T11423] syzkaller1: entered promiscuous mode [ 187.395280][T11423] syzkaller1: entered allmulticast mode [ 187.679525][ T42] audit: type=1326 audit(1785883755.897:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.0.2123" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 187.829519][T11448] nbd5: detected capacity change from 0 to 8 [ 187.841332][T11452] block nbd5: shutting down sockets [ 187.851516][T10890] ldm_validate_partition_table(): Disk read failed. [ 187.856649][T10890] Dev nbd5: unable to read RDB block 0 [ 187.859365][T10890] nbd5: unable to read partition table [ 187.862005][T10890] nbd5: partition table beyond EOD, truncated [ 187.867614][ T5153] ldm_validate_partition_table(): Disk read failed. [ 187.873652][ T5153] Dev nbd5: unable to read RDB block 0 [ 187.875657][ T5153] nbd5: unable to read partition table [ 187.877736][ T5153] nbd5: partition table beyond EOD, truncated [ 187.885536][T10890] ldm_validate_partition_table(): Disk read failed. [ 187.891333][T10890] Dev nbd5: unable to read RDB block 0 [ 187.897556][T10890] nbd5: unable to read partition table [ 187.902376][T10890] nbd5: partition table beyond EOD, truncated [ 188.269326][ T1349] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 188.418791][ T1349] usb 10-1: Using ep0 maxpacket: 16 [ 188.425050][ T1349] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.432077][ T1349] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.437622][ T1349] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.445542][ T1349] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.455953][ T1349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.472794][ T1349] usb 10-1: config 0 descriptor?? [ 188.851880][T11469] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 188.912287][ T1349] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0005/input/input24 [ 188.982562][ T1349] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 189.000348][ T5759] Bluetooth: hci0: command 0x1407 tx timeout [ 189.078929][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.078923][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 189.091257][ T1041] usb 10-1: USB disconnect, device number 5 [ 189.158948][ T5759] Bluetooth: hci2: command 0x0419 tx timeout [ 189.418969][T11489] kernel read not supported for file /cpuacct.usage_percpu (pid: 11489 comm: syz.3.2141) [ 189.424901][ T42] audit: type=1800 audit(1785883757.647:10465): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2141" name="cpuacct.usage_percpu" dev="mqueue" ino=43279 res=0 errno=0 [ 189.779065][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 189.848711][ T1349] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.878637][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 189.998734][ T1349] usb 5-1: Using ep0 maxpacket: 8 [ 190.005693][ T1349] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.008927][ T1349] usb 5-1: config 0 has no interface number 0 [ 190.011273][ T1349] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.015495][ T1349] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.019158][ T1349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.028398][ T1349] usb 5-1: config 0 descriptor?? [ 190.044384][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.049590][ T1349] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.053597][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.064197][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.070241][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.075116][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.078335][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.081338][ T24] usb 10-1: Product: syz [ 190.082722][ T24] usb 10-1: Manufacturer: syz [ 190.089524][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 190.093231][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 190.098370][ T24] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 190.100822][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 190.127107][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.162761][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.178625][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 190.207027][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.242027][ T10] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 190.245142][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.299907][ T34] usb 10-1: USB disconnect, device number 6 [ 190.496316][ T10] opticon 8-1:1.0: opticon converter detected [ 190.556677][ T10] usb 8-1: opticon converter now attached to ttyUSB0 [ 190.690178][ T10] usb 8-1: USB disconnect, device number 11 [ 190.809508][ T24] usb 5-1: USB disconnect, device number 16 [ 190.861262][ T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 190.879266][ T10] opticon 8-1:1.0: device disconnected [ 190.895502][T11511] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 191.158784][ T5759] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.239275][ T5759] Bluetooth: hci2: command 0x0419 tx timeout [ 191.346621][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2152'. [ 191.509053][T10890] udevd[10890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 191.596017][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2163'. [ 191.941786][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2169'. [ 192.070303][T11569] kvm: user requested TSC rate below hardware speed [ 192.080202][T10890] udevd[10890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 192.178680][ T1041] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 192.330313][ T1041] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 192.334308][ T1041] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.339062][ T1041] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.342923][ T1041] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.347125][ T1041] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.350705][ T1041] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.363111][ T1041] usb 11-1: config 0 descriptor?? [ 192.787639][ T1041] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 192.794085][ T1041] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 193.051339][T11619] input: syz0 as /devices/virtual/input/input26 [ 193.093257][ T34] usb 11-1: USB disconnect, device number 2 [ 193.318861][ T5759] Bluetooth: hci2: command 0x0419 tx timeout [ 193.539037][T11652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.803124][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.805901][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.001324][T11672] syz_tun: entered allmulticast mode [ 194.009432][T11671] syz_tun: left allmulticast mode [ 195.321734][T11699] kvm: user requested TSC rate below hardware speed [ 195.385362][T11703] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 195.413482][T11703] bond7: entered promiscuous mode [ 195.416241][T11703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.871995][T11710] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.875223][T11710] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 195.880782][T11710] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 195.915752][T11710] bond7: (slave gre2): making interface the new active one [ 195.918377][T11710] gre2: entered promiscuous mode [ 195.933547][T11710] bond7: (slave gre2): Enslaving as an active interface with an up link [ 196.098984][ T1349] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 196.120844][T11721] [ 196.140961][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 196.182139][T11726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 196.250370][ T1349] usb 10-1: config index 0 descriptor too short (expected 8251, got 59) [ 196.256291][ T1349] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.261784][ T1349] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.267468][ T1349] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.285240][ T1349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.290912][ T1349] usb 10-1: SerialNumber: syz [ 196.297904][ T1349] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 196.829846][ T10] usb 10-1: USB disconnect, device number 7 [ 196.863638][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.874910][T11735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 196.974104][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.092982][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.102339][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.109529][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.120084][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.139080][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.230716][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.373986][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.619615][ T12] bridge_slave_1: left allmulticast mode [ 197.623164][ T12] bridge_slave_1: left promiscuous mode [ 197.640519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.652290][ T12] bridge_slave_0: left allmulticast mode [ 197.654690][ T12] bridge_slave_0: left promiscuous mode [ 197.657057][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.862131][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.866889][T11784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 197.875013][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.882001][ T12] bond0 (unregistering): Released all slaves [ 197.891245][T11740] lo speed is unknown, defaulting to 1000 [ 197.913737][T11788] tipc: Started in network mode [ 197.915672][T11788] tipc: Node identity 3ebd74584bae, cluster identity 4711 [ 197.918050][T11788] tipc: Enabled bearer , priority 1 [ 197.924895][T11787] tipc: Resetting bearer [ 197.946815][T11787] tipc: Disabling bearer [ 198.245755][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 198.925903][ T12] hsr_slave_0: left promiscuous mode [ 198.931292][ T12] hsr_slave_1: left promiscuous mode [ 198.934065][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.942068][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.949460][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.951993][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.972763][ T12] veth1_macvtap: left promiscuous mode [ 198.978099][ T12] veth0_macvtap: left promiscuous mode [ 198.980280][ T12] veth1_vlan: left promiscuous mode [ 198.985422][ T12] veth0_vlan: left promiscuous mode [ 199.198710][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.210356][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.230434][T11845] kvm: apic: phys broadcast and lowest prio [ 199.238696][ T5101] Bluetooth: hci2: command tx timeout [ 199.336343][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11 [ 199.343978][T11832] syzkaller1: entered promiscuous mode [ 199.350911][T11832] syzkaller1: entered allmulticast mode [ 199.368713][ T59] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 199.525744][ T59] usb 8-1: unable to get BOS descriptor or descriptor too short [ 199.529847][ T59] usb 8-1: not running at top speed; connect to a high speed hub [ 199.542763][ T59] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 199.561838][ T59] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 199.569109][ T59] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 199.578892][ T59] usb 8-1: config 14 has no interface number 0 [ 199.585556][ T59] usb 8-1: config 14 has no interface number 1 [ 199.590970][ T59] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 199.600034][ T59] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 199.604034][ T59] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.608475][ T59] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.621280][ T59] usb 8-1: config 14 interface 57 has no altsetting 0 [ 199.637302][ T59] usb 8-1: config 14 interface 228 has no altsetting 0 [ 199.644811][ T59] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 199.648271][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.668847][ T59] usb 8-1: Product: syz [ 199.670785][ T59] usb 8-1: Manufacturer: syz [ 199.678661][ T59] usb 8-1: SerialNumber: syz [ 199.704543][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12 [ 199.794065][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.797564][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.801068][T11740] bridge_slave_0: entered allmulticast mode [ 199.805833][T11740] bridge_slave_0: entered promiscuous mode [ 199.812202][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.815455][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.818410][T11740] bridge_slave_1: entered allmulticast mode [ 199.822623][T11740] bridge_slave_1: entered promiscuous mode [ 199.877561][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.892182][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.949642][T11740] team0: Port device team_slave_0 added [ 199.954631][T11740] team0: Port device team_slave_1 added [ 199.982958][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.985660][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.994778][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.000386][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.002706][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.011595][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.047573][T11740] hsr_slave_0: entered promiscuous mode [ 200.051416][T11740] hsr_slave_1: entered promiscuous mode [ 200.053867][T11740] debugfs: 'hsr0' already exists in 'hsr' [ 200.055865][T11740] Cannot create hsr debugfs directory [ 200.109610][ T59] legousbtower 8-1:14.57: interrupt endpoints not found [ 200.135395][ T5455] 8021q: adding VLAN 0 to HW filter on device eth13 [ 200.309254][T11740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 200.315977][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.320136][T11740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 200.329190][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.333218][T11740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 200.342369][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.346345][T11740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 200.354569][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.401461][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.404717][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.407927][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.411118][T11740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.502473][T11740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.513280][ T59] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 200.521339][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.522069][ T59] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 200.532457][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.603716][T11740] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.631478][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.634553][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.655027][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.658083][ T9208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.078282][T11920] usb 8-1: Couldn't submit interrupt_in_urb -90 [ 201.197065][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.278613][ T59] usb 8-1: USB disconnect, device number 12 [ 201.287277][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 201.294082][ T59] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 201.319505][ T5101] Bluetooth: hci2: command tx timeout [ 201.515547][T11740] veth0_vlan: entered promiscuous mode [ 201.546544][T11740] veth1_vlan: entered promiscuous mode [ 201.574386][T11740] veth0_macvtap: entered promiscuous mode [ 201.586457][T11740] veth1_macvtap: entered promiscuous mode [ 201.602692][T11740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.627869][T11740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.737075][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.744464][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.776855][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.785887][ T5594] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.793507][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.796749][ T5594] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.828823][ T5594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.839196][ T5594] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.893115][T12010] Invalid source name [ 202.894537][T12010] UBIFS error (pid: 12010): cannot open "./file0", error -22 [ 203.054343][T12021] kvm: apic: phys broadcast and lowest prio [ 203.338684][ T24] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 203.399452][ T5101] Bluetooth: hci2: command tx timeout [ 203.510916][ T24] usb 10-1: not running at top speed; connect to a high speed hub [ 203.519921][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 203.532355][ T24] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 203.535239][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.538761][ T24] usb 10-1: Product: syz [ 203.540130][ T24] usb 10-1: Manufacturer: syz [ 203.543684][ T24] usb 10-1: SerialNumber: syz [ 203.548028][ T24] oti6858 10-1:1.0: oti6858 converter detected [ 203.554160][ T24] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 204.067060][T12039] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.124841][ T9872] usb 10-1: USB disconnect, device number 8 [ 204.144088][ T9872] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 204.149182][ T9872] oti6858 10-1:1.0: device disconnected [ 204.441822][T12053] kvm: apic: phys broadcast and lowest prio [ 204.518705][ T5845] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 204.690205][ T5845] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 204.698954][ T5845] usb 8-1: config 0 interface 0 has no altsetting 0 [ 204.706780][ T5845] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.712121][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.718336][ T5845] usb 8-1: Product: syz [ 204.723026][ T5845] usb 8-1: Manufacturer: syz [ 204.725505][ T5845] usb 8-1: SerialNumber: syz [ 204.739682][ T5845] usb 8-1: config 0 descriptor?? [ 204.742822][T12049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.768673][ T5845] usb 8-1: selecting invalid altsetting 0 [ 204.955691][T12049] usb 8-1: BOGUS urb xfer, pipe 0 != type 3 [ 205.008888][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 205.084125][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.097411][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.103231][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.107165][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.110928][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.160225][ T24] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 205.164341][ T24] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 205.170027][ T24] usb 12-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 205.173625][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.176659][ T24] usb 12-1: Product: syz [ 205.179074][ T24] usb 12-1: Manufacturer: syz [ 205.181208][ T24] usb 12-1: SerialNumber: syz [ 205.188767][T12066] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 205.193246][T12066] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 205.198812][ T24] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 205.203682][ T24] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 205.208281][ T24] usbserial_generic 12-1:1.0: generic converter detected [ 205.217387][ T24] usb 12-1: generic converter now attached to ttyUSB0 [ 205.343522][ T5759] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 205.362136][T12078] lo speed is unknown, defaulting to 1000 [ 205.468570][ C2] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 205.476946][ T24] usb 12-1: USB disconnect, device number 2 [ 205.478688][ T5759] Bluetooth: hci2: command tx timeout [ 205.493804][ T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 205.498200][ T24] usbserial_generic 12-1:1.0: device disconnected [ 205.613026][T12105] netlink: 'syz.5.2325': attribute type 1 has an invalid length. [ 205.657223][T12105] gretap1: entered allmulticast mode [ 205.664925][T12105] bond1: (slave gretap1): making interface the new active one [ 205.668169][T12105] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 205.730387][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.733625][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.736890][T12078] bridge_slave_0: entered allmulticast mode [ 205.741272][T12078] bridge_slave_0: entered promiscuous mode [ 205.746262][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.749770][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.752999][T12078] bridge_slave_1: entered allmulticast mode [ 205.759826][T12078] bridge_slave_1: entered promiscuous mode [ 205.789221][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.795956][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.823137][T12078] team0: Port device team_slave_0 added [ 205.828162][T12078] team0: Port device team_slave_1 added [ 205.852376][T12078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.855438][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.866512][T12078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.872665][T12078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.875688][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.887622][T12078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.928235][T12078] hsr_slave_0: entered promiscuous mode [ 205.931825][T12078] hsr_slave_1: entered promiscuous mode [ 205.934901][T12078] debugfs: 'hsr0' already exists in 'hsr' [ 205.937325][T12078] Cannot create hsr debugfs directory [ 205.948636][ T9872] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 206.101524][ T9872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.110445][ T9872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.118975][ T9872] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.127974][ T9872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.143662][ T9872] usb 10-1: config 0 descriptor?? [ 206.145771][T12078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 206.160629][T12078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.164721][T12078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 206.172406][T12078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.176526][T12078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 206.185937][T12078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.190458][T12078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.200373][T12078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.281042][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.302982][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.312851][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.315236][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.324609][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.327589][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.507422][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 206.519708][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 206.579956][ T9872] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 206.582473][ T9872] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 206.586512][ T9872] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.0007/input/input27 [ 206.639065][ T9872] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 206.739991][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.793889][ T9872] usb 10-1: USB disconnect, device number 9 [ 206.842129][T12136] fido_id[12136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 206.864308][ T59] usb 8-1: USB disconnect, device number 13 [ 206.996790][T12078] veth0_vlan: entered promiscuous mode [ 207.010287][T12078] veth1_vlan: entered promiscuous mode [ 207.048473][T12078] veth0_macvtap: entered promiscuous mode [ 207.057431][T12078] veth1_macvtap: entered promiscuous mode [ 207.077769][T12078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.090021][T12078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.161208][ T5759] Bluetooth: hci3: command tx timeout [ 207.177822][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.188894][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.211754][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.231191][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.252158][ T9208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.255579][ T9208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.269053][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.272606][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.735544][T12164] : renamed from bond0 (while UP) [ 207.738656][ T9872] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 207.890598][ T9872] usb 10-1: unable to get BOS descriptor or descriptor too short [ 207.901640][ T9872] usb 10-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 207.908407][ T9872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.914838][ T9872] usb 10-1: Product: syz [ 207.919152][ T9872] usb 10-1: Manufacturer: syz [ 207.927117][ T9872] usb 10-1: SerialNumber: syz [ 208.159271][T12176] usb 10-1: Unknown version 0x0000 [ 208.277339][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2344'. [ 208.559826][T12192] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 208.594184][T12192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.654154][T12192] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 208.709408][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 208.839230][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 208.898637][ T9872] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 209.048640][ T9872] usb 12-1: Using ep0 maxpacket: 8 [ 209.051617][ T9872] usb 12-1: config 0 has an invalid interface number: 186 but max is 0 [ 209.054794][ T9872] usb 12-1: config 0 has no interface number 0 [ 209.056832][ T9872] usb 12-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.060718][ T9872] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.063911][ T9872] usb 12-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 209.068078][ T9872] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 209.071810][ T9872] usb 12-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.081078][ T9872] usb 12-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 209.085000][ T9872] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.087590][ T9872] usb 12-1: Product: syz [ 209.089455][ T9872] usb 12-1: Manufacturer: syz [ 209.091056][ T9872] usb 12-1: SerialNumber: syz [ 209.094592][ T9872] usb 12-1: config 0 descriptor?? [ 209.166682][ T845] usb 10-1: USB disconnect, device number 10 [ 209.248649][ T5759] Bluetooth: hci3: command tx timeout [ 209.306383][ T9872] iowarrior 12-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 209.511508][ C3] iowarrior 12-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 209.516187][ T24] usb 12-1: USB disconnect, device number 3 [ 209.739316][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2355'. [ 210.118038][T12223] ehci-pci 0000:00:1d.7: remove, state 1 [ 210.125925][T12223] usb usb38: USB disconnect, device number 1 [ 210.130189][T12223] usb 38-1: USB disconnect, device number 2 [ 210.284258][T12221] syz.3.2361 (12221) used greatest stack depth: 19104 bytes left [ 210.432741][T12223] ehci-pci 0000:00:1d.7: USB bus 38 deregistered [ 210.457998][T12239] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 210.698652][ T59] usb 2-1: new full-speed USB device number 3 using uhci_hcd [ 210.864407][ T59] usb 2-1: not running at top speed; connect to a high speed hub [ 210.888183][ T59] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 210.894140][ T59] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 210.897611][ T59] usb 2-1: Product: QEMU USB Tablet [ 210.900191][ T59] usb 2-1: Manufacturer: QEMU [ 210.902237][ T59] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 210.945142][ T59] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input29 [ 211.017542][ T59] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 211.054382][T12229] usb 2-1: USB disconnect, device number 3 [ 211.112033][T12267] fido_id[12267]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 211.328977][ T5759] Bluetooth: hci3: command tx timeout [ 211.443627][T12283] xfrm1: entered allmulticast mode [ 211.450611][T12283] ip6gretap1: entered promiscuous mode [ 211.474172][T12229] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 211.489388][T12229] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 38 [ 211.496274][T12229] ehci-pci 0000:00:1d.7: irq 19, io mem 0x81002000 [ 211.521694][T12229] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 211.537722][T12229] usb usb38: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 211.540980][T12229] usb usb38: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 211.545205][T12229] usb usb38: Product: EHCI Host Controller [ 211.547751][T12229] usb usb38: Manufacturer: Linux syzkaller ehci_hcd [ 211.550137][T12229] usb usb38: SerialNumber: 0000:00:1d.7 [ 211.577427][T12229] hub 38-0:1.0: USB hub found [ 211.585142][T12229] hub 38-0:1.0: 6 ports detected [ 211.700902][T12229] hub 2-0:1.0: USB hub found [ 211.719880][T12229] hub 2-0:1.0: 2 ports detected [ 211.790554][T12229] hub 3-0:1.0: USB hub found [ 211.793210][T12229] hub 3-0:1.0: 2 ports detected [ 211.858785][T12229] hub 4-0:1.0: USB hub found [ 211.861232][T12229] hub 4-0:1.0: 2 ports detected [ 211.931791][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2385'. [ 211.937582][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2385'. [ 211.938772][ T845] usb 38-1: new high-speed USB device number 2 using ehci-pci [ 211.947953][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2385'. [ 212.149268][ T845] usb 38-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 212.156496][ T845] usb 38-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 212.160395][ T845] usb 38-1: Product: QEMU USB Tablet [ 212.162628][ T845] usb 38-1: Manufacturer: QEMU [ 212.164824][ T845] usb 38-1: SerialNumber: 28754-0000:00:1d.7-1 [ 212.206640][ T845] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb38/38-1/38-1:1.0/0003:0627:0001.0009/input/input30 [ 212.281287][ T845] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 213.408936][ T5759] Bluetooth: hci3: command tx timeout [ 213.610744][T12328] uprobe: syz.7.2395:12328 failed to unregister, leaking uprobe [ 225.429715][T12370] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 225.435587][T12370] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 225.442834][T12370] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 225.451391][T12370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.470971][T12370] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 225.584396][T12370] ib_srp: QP creation failed for dev syz0: -22 [ 226.826569][T12430] tipc: Enabled bearer , priority 1 [ 226.845162][T12428] tipc: Resetting bearer [ 226.870251][T12428] tipc: Disabling bearer [ 227.239543][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.413772][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.462783][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.468154][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.476622][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.485464][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.497151][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.578433][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.738438][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.843206][T12447] lo speed is unknown, defaulting to 1000 [ 228.019997][ T13] bridge_slave_1: left allmulticast mode [ 228.021871][ T13] bridge_slave_1: left promiscuous mode [ 228.025633][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.045517][ T13] bridge_slave_0: left allmulticast mode [ 228.051247][ T13] bridge_slave_0: left promiscuous mode [ 228.058139][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.233052][ T13]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.240865][ T13]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.250156][ T13]  (unregistering): Released all slaves [ 228.272537][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 228.423692][T12487] evm: overlay not supported [ 228.593625][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 228.600296][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.603240][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.606490][T12447] bridge_slave_0: entered allmulticast mode [ 228.610137][T12447] bridge_slave_0: entered promiscuous mode [ 228.617394][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.628755][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.631132][T12447] bridge_slave_1: entered allmulticast mode [ 228.634054][T12447] bridge_slave_1: entered promiscuous mode [ 228.695434][T12447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.760508][T12447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.764408][T12510] bridge0: port 3(syz_tun) entered blocking state [ 228.766960][T12510] bridge0: port 3(syz_tun) entered disabled state [ 228.770783][T12510] syz_tun: entered allmulticast mode [ 228.774889][T12510] syz_tun: entered promiscuous mode [ 228.777695][T12510] bridge0: port 3(syz_tun) entered blocking state [ 228.780988][T12510] bridge0: port 3(syz_tun) entered forwarding state [ 228.802593][ T845] IPVS: starting estimator thread 0... [ 228.902925][T12447] team0: Port device team_slave_0 added [ 228.906967][T12447] team0: Port device team_slave_1 added [ 228.932493][T12518] kvm: MWAIT instruction emulated as NOP! [ 228.949013][T12513] IPVS: using max 42 ests per chain, 100800 per kthread [ 229.068336][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16 [ 229.077354][T12447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.079948][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.101238][T12447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.114104][T12447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.116636][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.142416][T12447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.202994][ T13] hsr_slave_0: left promiscuous mode [ 229.206717][ T13] hsr_slave_1: left promiscuous mode [ 229.218400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.221289][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.227296][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.232434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.244787][ T13] veth1_macvtap: left promiscuous mode [ 229.251577][ T13] veth0_macvtap: left promiscuous mode [ 229.257023][ T13] veth1_vlan: left promiscuous mode [ 229.258947][ T13] veth0_vlan: left promiscuous mode [ 229.534968][ T13] team0 (unregistering): Port device team_slave_1 removed [ 229.547427][ T13] team0 (unregistering): Port device team_slave_0 removed [ 229.566835][ T5759] Bluetooth: hci2: command tx timeout [ 229.706583][ T105] smbdirect: ib_dev[syz0] removed [ 229.742842][ T34] syz0: Port: 1 Link DOWN [ 229.772268][T12447] hsr_slave_0: entered promiscuous mode [ 229.782118][T12447] hsr_slave_1: entered promiscuous mode [ 229.787885][T12447] debugfs: 'hsr0' already exists in 'hsr' [ 229.795330][T12447] Cannot create hsr debugfs directory [ 230.009798][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17 [ 230.142822][T12447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 230.150384][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.153880][T12447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 230.163761][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.166720][T12447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 230.175881][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.179755][T12447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 230.245229][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.359821][T12447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.393639][T12447] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.405206][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.407455][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.424128][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.426472][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.834576][T12598] lo speed is unknown, defaulting to 1000 [ 230.891492][T12447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.147969][T12447] veth0_vlan: entered promiscuous mode [ 231.177366][ T42] audit: type=1800 audit(1785884055.399:10466): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2492" name="nullb0" dev="tmpfs" ino=270 res=0 errno=0 [ 231.208038][T12447] veth1_vlan: entered promiscuous mode [ 231.225260][T12635] syz.8.2494 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.242570][T12631] syz.5.2491 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 231.247515][T12631] CPU: 0 UID: 0 PID: 12631 Comm: syz.5.2491 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.247537][T12631] Tainted: [L]=SOFTLOCKUP [ 231.247542][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.247550][T12631] Call Trace: [ 231.247555][T12631] [ 231.247562][T12631] dump_stack_lvl+0x100/0x190 [ 231.247581][T12631] dump_header+0xfb/0x606 [ 231.247595][T12631] oom_kill_process.cold+0xd/0x330 [ 231.247611][T12631] out_of_memory+0x340/0x14f0 [ 231.247636][T12631] ? __pfx_out_of_memory+0x10/0x10 [ 231.247661][T12631] mem_cgroup_out_of_memory+0xc6/0x130 [ 231.247674][T12631] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 231.247686][T12631] ? find_held_lock+0x2b/0x80 [ 231.247704][T12631] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.247717][T12631] ? _raw_spin_unlock+0x28/0x50 [ 231.247732][T12631] try_charge_memcg+0x6e5/0xdf0 [ 231.247752][T12631] ? __pfx_try_charge_memcg+0x10/0x10 [ 231.247768][T12631] ? find_held_lock+0x2b/0x80 [ 231.247782][T12631] ? rcu_read_unlock+0x17/0x60 [ 231.247798][T12631] ? rcu_read_unlock+0x17/0x60 [ 231.247820][T12631] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 231.247842][T12631] ? kasan_unpoison+0x27/0x60 [ 231.247857][T12631] __kvmalloc_node_noprof+0x73d/0x970 [ 231.247871][T12631] ? apparmor_capable+0x1c1/0x4d0 [ 231.247901][T12631] ? groups_alloc+0x77/0x120 [ 231.247922][T12631] groups_alloc+0x77/0x120 [ 231.247941][T12631] __ia32_sys_setgroups16+0x99/0x190 [ 231.247958][T12631] __do_fast_syscall_32+0xe7/0x970 [ 231.247980][T12631] do_fast_syscall_32+0x32/0x70 [ 231.247996][T12631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.248011][T12631] RIP: 0023:0xf701efec [ 231.248026][T12631] Code: Unable to access opcode bytes at 0xf701efc2. [ 231.248031][T12631] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000051 [ 231.248043][T12631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 231.248050][T12631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.248056][T12631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.248062][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.248069][T12631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.248088][T12631] [ 231.248146][T12631] memory: usage 0kB, limit 0kB, failcnt 19 [ 231.330948][T12631] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 231.333643][T12631] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 231.335828][T12631] Memory cgroup stats for /syz5/test: [ 231.336083][T12631] cache 0 [ 231.340240][T12631] rss 0 [ 231.341218][T12631] rss_huge 0 [ 231.342225][T12631] shmem 0 [ 231.343204][T12631] mapped_file 0 [ 231.344450][T12631] dirty 0 [ 231.345396][T12631] writeback 0 [ 231.346443][T12631] workingset_refault_anon 0 [ 231.347929][T12631] workingset_refault_file 0 [ 231.349789][T12631] swap 0 [ 231.350818][T12631] swapcached 0 [ 231.352102][T12631] pgpgin 0 [ 231.353450][T12631] pgpgout 0 [ 231.354589][T12631] pgfault 3 [ 231.355629][T12631] pgmajfault 0 [ 231.356740][T12631] inactive_anon 0 [ 231.357981][T12631] active_anon 0 [ 231.361506][T12631] inactive_file 0 [ 231.362990][T12631] active_file 0 [ 231.365002][T12631] unevictable 0 [ 231.366173][T12631] hierarchical_memory_limit 0 [ 231.366611][T12635] bridge_slave_0: left allmulticast mode [ 231.368838][T12631] hierarchical_memsw_limit 9223372036854771712 [ 231.370827][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.371596][T12631] total_cache 0 [ 231.374932][T12631] total_rss 0 [ 231.376027][T12631] total_rss_huge 0 [ 231.377256][T12631] total_shmem 0 [ 231.378430][T12631] total_mapped_file 0 [ 231.380678][T12631] total_dirty 0 [ 231.381842][T12631] total_writeback 0 [ 231.383453][T12631] total_workingset_refault_anon 0 [ 231.385157][T12631] total_workingset_refault_file 0 [ 231.386833][T12631] total_swap 0 [ 231.388012][T12631] total_swapcached 0 [ 231.396115][T12631] total_pgpgin 0 [ 231.397660][T12631] total_pgpgout 0 [ 231.398914][T12631] total_pgfault 3 [ 231.400207][T12631] total_pgmajfault 0 [ 231.401524][T12631] total_inactive_anon 0 [ 231.403114][T12631] total_active_anon 0 [ 231.404527][T12631] total_inactive_file 0 [ 231.406040][T12631] total_active_file 0 [ 231.407420][T12631] total_unevictable 0 [ 231.409018][T12631] anon_cost 0 [ 231.410157][T12631] file_cost 0 [ 231.411313][T12631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.2491,pid=12630,uid=0 [ 231.423711][T12631] Memory cgroup out of memory: Killed process 12630 (syz.5.2491) total-vm:104072kB, anon-rss:1304kB, file-rss:22828kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 231.434803][T12635] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.532470][T12447] veth0_macvtap: entered promiscuous mode [ 231.537830][T12447] veth1_macvtap: entered promiscuous mode [ 231.564989][T12447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.585938][T12447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.629339][ T5824] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.655970][ T5824] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.659042][ T5759] Bluetooth: hci2: command tx timeout [ 231.678729][ T5824] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.768789][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.781887][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.784264][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.822915][ T9279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.825995][ T9279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.987334][T12678] netlink: 'syz.8.2507': attribute type 1 has an invalid length. [ 232.101234][T12683] bond1: (slave geneve2): making interface the new active one [ 232.115318][T12683] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.149525][ T5824] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.153007][ T5824] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.156277][ T5824] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.163610][ T5824] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.307922][T12693] block nbd9: shutting down sockets [ 232.568699][ T845] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 232.604914][T12705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.718731][ T845] usb 14-1: Using ep0 maxpacket: 32 [ 232.742587][ T845] usb 14-1: unable to get BOS descriptor or descriptor too short [ 232.748648][ T845] usb 14-1: no configurations [ 232.750626][ T845] usb 14-1: can't read configurations, error -22 [ 232.862009][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 233.279151][T12745] netlink: 'syz.5.2525': attribute type 1 has an invalid length. [ 233.315983][T12745] bond2: entered promiscuous mode [ 233.318370][T12745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.341350][T12745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.344039][T12745] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 233.347214][T12745] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 233.353103][T12745] bond2: (slave ipip0): making interface the new active one [ 233.355487][T12745] ipip0: entered promiscuous mode [ 233.358211][T12745] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 233.477517][T12755] bridge0: port 4(wlan1) entered blocking state [ 233.482863][T12755] bridge0: port 4(wlan1) entered disabled state [ 233.487735][T12755] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 233.718786][ T5759] Bluetooth: hci2: command tx timeout [ 234.056886][ T42] audit: type=1804 audit(1785884058.279:10467): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2535" name="file1" dev="tmpfs" ino=349 res=1 errno=0 [ 235.790158][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2555'. [ 235.797274][T12839] netlink: 'syz.9.2557': attribute type 1 has an invalid length. [ 235.810198][ T5759] Bluetooth: hci2: command tx timeout [ 235.839384][T12839] gretap1: entered allmulticast mode [ 235.893271][T12843] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 235.911620][T12843] bond3: entered promiscuous mode [ 235.917001][T12843] bond3: entered allmulticast mode [ 235.919829][T12843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.972616][T12843] erspan1: entered allmulticast mode [ 235.981031][T12843] bond3: (slave erspan1): making interface the new active one [ 235.984447][T12843] erspan1: entered promiscuous mode [ 235.989735][T12843] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 236.053327][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 236.056490][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 236.305096][T12856] bridge0: port 1(wlan1) entered blocking state [ 236.311837][T12856] bridge0: port 1(wlan1) entered disabled state [ 236.315470][T12856] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 236.362483][T12856] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 236.375966][T12856] bridge0: port 1(wlan1) entered blocking state [ 236.378797][T12856] bridge0: port 1(wlan1) entered forwarding state [ 236.397149][T12866] gadgetfs: bound to dummy_udc driver [ 236.879438][ T9228] bridge0: port 1(wlan1) entered disabled state [ 237.023191][T12902] overlayfs: failed to clone upperpath [ 237.131752][ T42] audit: type=1804 audit(1785884061.359:10468): pid=12913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2589" name="file0" dev="tmpfs" ino=443 res=1 errno=0 [ 238.479871][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2599'. [ 238.622591][T12940] bridge0: port 3(syz_tun) entered disabled state [ 238.631528][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.741307][T12940] bridge_slave_0: left promiscuous mode [ 238.757848][T12940] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 239.177273][ T42] audit: type=1804 audit(1785884063.399:10469): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2608" name="file1" dev="ramfs" ino=51827 res=1 errno=0 [ 239.674204][T13006] overlayfs: failed to clone upperpath [ 240.279556][T13030] lo speed is unknown, defaulting to 1000 [ 240.701138][T13059] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 240.718342][T13059] bond4: entered promiscuous mode [ 240.721994][T13059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.875929][T13059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.879043][T13059] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 240.882840][T13059] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 240.888343][T13059] bond4: (slave ip6gre1): making interface the new active one [ 240.891622][T13059] ip6gre1: entered promiscuous mode [ 240.895345][T13059] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 241.472912][T13099] bond4: entered allmulticast mode [ 241.475350][T13099] ip6gre1: entered allmulticast mode [ 241.729243][T13098] bond4: left allmulticast mode [ 241.730903][T13098] ip6gre1: left allmulticast mode [ 241.931503][T13122] fuse: fd is not a fuse device [ 242.203839][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2668'. [ 242.218952][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2668'. [ 242.236021][T13134] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2668'. [ 242.240517][T13134] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2668'. [ 242.316633][ T42] audit: type=1326 audit(1785884066.489:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.5.2669" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 242.556730][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.559399][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.605505][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.611446][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.691454][ T5824] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.696992][ T5824] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.700932][ T5824] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.704551][ T5824] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.894461][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2675'. [ 242.941834][ T3386] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 3386 comm: kworker/1:2) [ 243.144954][T13164] netlink: 'syz.9.2678': attribute type 1 has an invalid length. [ 243.175604][T13164] bond1: entered promiscuous mode [ 243.178470][T13164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.218203][T13164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.229776][T13164] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 243.234526][T13164] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 243.254286][T13164] bond1: (slave ip6gre1): making interface the new active one [ 243.257530][T13164] ip6gre1: entered promiscuous mode [ 243.266479][ T42] audit: type=1800 audit(1785884067.489:10471): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2681" name="c_ssize" dev="configfs" ino=54333 res=0 errno=0 [ 243.274701][T13164] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 243.859603][ T1349] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 244.022470][ T1349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.032012][ T1349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.040350][ T1349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 244.050666][ T1349] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.059153][ T1349] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.070233][ T1349] usb 14-1: config 0 descriptor?? [ 244.186927][ T42] audit: type=1326 audit(1785884068.409:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.3.2688" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7fec code=0x0 [ 244.495650][ T1349] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 244.499922][ T1349] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 244.505064][ T1349] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 244.513154][ T1349] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 244.569484][ T1349] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 244.787388][T13201] 9p: Bad value for 'rfdno' [ 245.055790][T13213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2761322500 (353449280000 ns) > initial count (313845741312 ns). Using initial count to start timer. [ 245.720773][ T5831] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 246.007271][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.011436][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.014779][ T5831] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.018118][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.309498][ T5831] usb 10-1: config 0 descriptor?? [ 246.356487][T13247] lo speed is unknown, defaulting to 1000 [ 246.362243][T13247] lo speed is unknown, defaulting to 1000 [ 246.366351][T13247] lo speed is unknown, defaulting to 1000 [ 246.369563][T13247] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 246.375304][T13247] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 246.382108][T13247] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 246.394067][T13247] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.425073][T13247] lo speed is unknown, defaulting to 1000 [ 246.429186][T13247] lo speed is unknown, defaulting to 1000 [ 246.433087][T13247] lo speed is unknown, defaulting to 1000 [ 246.436975][T13247] lo speed is unknown, defaulting to 1000 [ 246.440723][T13247] lo speed is unknown, defaulting to 1000 [ 246.444523][T13247] lo speed is unknown, defaulting to 1000 [ 246.483536][T13247] ib_srp: QP creation failed for dev syz0: -22 [ 246.580132][ T9976] bridge0: port 1(syz_tun) entered disabled state [ 246.626347][ T29] usb 14-1: USB disconnect, device number 4 [ 246.795156][ T9976] syz_tun (unregistering): left allmulticast mode [ 246.797271][ T9976] syz_tun (unregistering): left promiscuous mode [ 246.799640][ T9976] bridge0: port 1(syz_tun) entered disabled state [ 247.087273][ T5824] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.113685][ T5831] usbhid 10-1:0.0: can't add hid device: -71 [ 247.116276][ T5831] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 247.161069][ T5831] usb 10-1: USB disconnect, device number 11 [ 247.209419][ T5824] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.291559][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.297466][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.303421][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.314246][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.320530][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.347227][ T5824] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.391131][T13289] 9pnet_fd: p9_fd_create_unix (13289): problem connecting socket: ./nonexistent: -2 [ 247.486753][ T5824] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.492889][ T5831] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 247.666493][ T5831] usb 10-1: Using ep0 maxpacket: 16 [ 247.699530][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.720927][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.742287][ T5831] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 247.753450][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.821318][ T5824] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 247.824382][ T5824] ip6gre1 (unregistering): left promiscuous mode [ 247.982174][ T5824] bond3 (unregistering): (slave erspan1): Releasing active interface [ 247.983212][ T5831] usb 10-1: config 0 descriptor?? [ 247.985121][ T5824] erspan1 (unregistering): left promiscuous mode [ 248.031106][ T5824] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 248.036504][ T5824] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 248.070355][ T5824] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 248.073302][ T5824] bridge1 (unregistering): left promiscuous mode [ 248.082557][ T5824] bond0 (unregistering): Released all slaves [ 248.089281][ T5824] bond1 (unregistering): Released all slaves [ 248.101329][ T5824] bond2 (unregistering): Released all slaves [ 248.160412][ T5824] bond3 (unregistering): Released all slaves [ 248.170615][ T5824] bond4 (unregistering): Released all slaves [ 248.206734][T13284] lo speed is unknown, defaulting to 1000 [ 248.292222][T13284] lo speed is unknown, defaulting to 1000 [ 248.481491][ T5831] kye 0003:0458:5016.000B: control desc unexpectedly large [ 248.488247][ T5831] kye 0003:0458:5016.000B: control desc unexpectedly large [ 248.659168][ T5831] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5016.000B/input/input31 [ 248.668940][ T5455] 8021q: adding VLAN 0 to HW filter on device eth18 [ 248.698659][ T1041] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 248.849150][ T1041] usb 14-1: Using ep0 maxpacket: 8 [ 248.852330][ T1041] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 248.855321][ T1041] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.858667][ T1041] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.861665][ T1041] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.864977][ T1041] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.870753][ T1041] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.879498][ T1041] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.905723][ T5831] kye 0003:0458:5016.000B: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 248.937536][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.943022][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.946123][T13284] bridge_slave_0: entered allmulticast mode [ 249.023353][T13284] bridge_slave_0: entered promiscuous mode [ 249.039616][ T5831] usb 10-1: USB disconnect, device number 12 [ 249.048965][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.054173][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.060629][T13284] bridge_slave_1: entered allmulticast mode [ 249.072622][T13284] bridge_slave_1: entered promiscuous mode [ 249.110836][T13284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.117396][T13284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.186530][ T1041] usb 14-1: usb_control_msg returned -32 [ 249.188329][ T1041] usbtmc 14-1:16.0: can't read capabilities [ 249.290684][ T5455] 8021q: adding VLAN 0 to HW filter on device eth19 [ 249.310993][ T42] audit: type=1800 audit(1785884073.539:10473): pid=13338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2732" name="bmaControls" dev="configfs" ino=53128 res=0 errno=0 [ 249.311442][T13284] team0: Port device team_slave_0 added [ 249.360257][T13284] team0: Port device team_slave_1 added [ 249.409419][ T5759] Bluetooth: hci0: command tx timeout [ 249.497702][ T6482] usb 14-1: USB disconnect, device number 5 [ 249.576709][T13284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.579911][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.591943][T13284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.606357][T13284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.609801][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.620882][T13284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.568134][ T5824] hsr_slave_0: left promiscuous mode [ 250.589697][ T5824] hsr_slave_1: left promiscuous mode [ 250.616432][ T5824] veth1_macvtap: left promiscuous mode [ 250.618870][ T5824] veth0_macvtap: left promiscuous mode [ 250.620946][ T5824] veth1_vlan: left promiscuous mode [ 250.622762][ T5824] veth0_vlan: left promiscuous mode [ 250.749900][T13388] fuse: fd is not a fuse device [ 251.059801][ T9224] smc: removing ib device syz2 [ 251.092195][ T9224] smbdirect: ib_dev[syz2] removed [ 251.114158][ T5455] 8021q: adding VLAN 0 to HW filter on device eth20 [ 251.124637][ T1041] lo speed is unknown, defaulting to 1000 [ 251.128142][ T1041] syz2: Port: 1 Link DOWN [ 251.133552][T13284] hsr_slave_0: entered promiscuous mode [ 251.137090][T13284] hsr_slave_1: entered promiscuous mode [ 251.158180][T13284] debugfs: 'hsr0' already exists in 'hsr' [ 251.167661][T13284] Cannot create hsr debugfs directory [ 251.199901][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2744'. [ 251.230086][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2746'. [ 251.478636][ T5759] Bluetooth: hci0: command tx timeout [ 251.899021][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21 [ 252.653191][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2753'. [ 253.319386][ T5824] IPVS: stop unused estimator thread 0... [ 253.569052][ T5759] Bluetooth: hci0: command tx timeout [ 253.574074][ T42] audit: type=1800 audit(1785884077.799:10474): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2763" name="nullb0" dev="tmpfs" ino=270 res=0 errno=0 [ 253.807106][T13284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.823199][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.825998][T13284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.835251][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.838905][T13284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.844949][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.849339][T13284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.855518][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.914671][T13284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.931877][T13284] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.938355][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.940861][ T9222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.954809][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.957255][ T9222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.347331][T13284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.395581][T13284] veth0_vlan: entered promiscuous mode [ 254.401999][T13284] veth1_vlan: entered promiscuous mode [ 254.419085][T13284] veth0_macvtap: entered promiscuous mode [ 254.423312][T13284] veth1_macvtap: entered promiscuous mode [ 254.431906][T13284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.441268][T13284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.480523][T12641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.485073][T12641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.515016][ T9222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.521244][ T9222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.537772][ T9222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.538862][ T6216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.540580][ T9222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.547543][ T6216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.733115][T13549] bridge0: entered allmulticast mode [ 254.735587][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2766'. [ 254.739954][T13549] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 254.743187][T13549] bridge0: port 4(wlan1) entered disabled state [ 254.768021][T13549] syz_tun: left allmulticast mode [ 254.783188][T13552] overlayfs: failed to clone upperpath [ 254.784759][T13549] bridge0: port 3(syz_tun) entered disabled state [ 254.797369][T13549] bridge_slave_1: left allmulticast mode [ 254.801757][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.808236][T13549] bridge_slave_0: left allmulticast mode [ 254.810968][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.824660][T13549] bridge0 (unregistering): left allmulticast mode [ 254.838302][T13554] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2769'. [ 255.090038][T13569] binder: 13568:13569 ioctl c0306201 0 returned -14 [ 255.253040][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.256128][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.651662][ T5759] Bluetooth: hci0: command tx timeout [ 256.718154][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2786'. [ 257.253611][T13630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2799'. [ 257.671663][T13655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1022815425 (2045630850 ns) > initial count (1125894 ns). Using initial count to start timer. [ 257.774469][T13665] netlink: 'syz.9.2816': attribute type 1 has an invalid length. [ 257.886205][T13665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.892054][T13668] bond2: entered allmulticast mode [ 258.749673][T13696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.753428][T13696] overlayfs: failed to set xattr on upper [ 258.755496][T13696] overlayfs: ...falling back to redirect_dir=nofollow. [ 258.758081][T13696] overlayfs: ...falling back to metacopy=off. [ 258.763048][T13696] overlayfs: ...falling back to index=off. [ 258.771033][T13696] overlayfs: ...falling back to uuid=null. [ 260.061995][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 260.128124][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'. [ 260.756581][T13774] overlayfs: failed to clone upperpath [ 260.847149][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2861'. [ 261.041905][T13782] netlink: 'syz.8.2863': attribute type 1 has an invalid length. [ 261.063104][T13782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.097157][T13782] bond2: (slave geneve3): making interface the new active one [ 261.102133][T13782] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 261.446760][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2873'. [ 261.450681][T13805] tipc: Started in network mode [ 261.452770][T13805] tipc: Node identity 4, cluster identity 4711 [ 261.456614][T13805] tipc: Node number set to 4 [ 262.431524][T13837] overlayfs: failed to clone upperpath [ 262.555009][T13846] syz.8.2892: vmalloc error: size 2147479872, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.562131][T13846] CPU: 0 UID: 0 PID: 13846 Comm: syz.8.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.562156][T13846] Tainted: [L]=SOFTLOCKUP [ 262.562161][T13846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.562170][T13846] Call Trace: [ 262.562195][T13846] [ 262.562201][T13846] dump_stack_lvl+0x100/0x190 [ 262.562271][T13846] warn_alloc.cold+0x94/0xa8 [ 262.562287][T13846] ? __pfx_warn_alloc+0x10/0x10 [ 262.562308][T13846] ? debug_object_assert_init+0x1c4/0x310 [ 262.562339][T13846] ? rcu_is_watching+0x12/0xc0 [ 262.562365][T13846] ? __lock_acquire+0x49f/0x1a40 [ 262.562385][T13846] ? __lock_acquire+0x49f/0x1a40 [ 262.562407][T13846] __vmalloc_node_range_noprof+0x136c/0x1630 [ 262.562427][T13846] ? reacquire_held_locks+0xce/0x1e0 [ 262.562447][T13846] ? release_sock+0x21/0x280 [ 262.562513][T13846] ? netlink_alloc_large_skb+0x9b/0x150 [ 262.562544][T13846] ? alloc_pages_mpol+0x25a/0x540 [ 262.562564][T13846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.562584][T13846] ? netlink_insert+0x15e/0x17c0 [ 262.562598][T13846] ? rcu_is_watching+0x12/0xc0 [ 262.562614][T13846] __kvmalloc_node_noprof+0x3d3/0x970 [ 262.562631][T13846] ? netlink_alloc_large_skb+0x9b/0x150 [ 262.562647][T13846] ? netlink_alloc_large_skb+0x9b/0x150 [ 262.562666][T13846] netlink_alloc_large_skb+0x9b/0x150 [ 262.562682][T13846] netlink_sendmsg+0x680/0xda0 [ 262.562698][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.562713][T13846] ? apparmor_socket_sendmsg+0x15b/0x270 [ 262.562734][T13846] sock_write_iter+0x53a/0x5b0 [ 262.562751][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.562764][T13846] ? __pfx_sock_write_iter+0x10/0x10 [ 262.562780][T13846] ? bpf_lsm_file_permission+0x9/0x10 [ 262.562794][T13846] ? security_file_permission+0x76/0x210 [ 262.562812][T13846] ? rw_verify_area+0xce/0x6d0 [ 262.562830][T13846] vfs_write+0x6ac/0x1050 [ 262.562841][T13846] ? __pfx_sock_write_iter+0x10/0x10 [ 262.562854][T13846] ? __pfx_vfs_write+0x10/0x10 [ 262.562863][T13846] ? find_held_lock+0x2b/0x80 [ 262.562888][T13846] ksys_write+0x1f8/0x250 [ 262.562899][T13846] ? __pfx_ksys_write+0x10/0x10 [ 262.562913][T13846] __do_fast_syscall_32+0xe7/0x970 [ 262.562985][T13846] do_fast_syscall_32+0x32/0x70 [ 262.563003][T13846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.563019][T13846] RIP: 0023:0xf7f85fec [ 262.563035][T13846] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 262.563047][T13846] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 262.563061][T13846] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 262.563069][T13846] RDX: 00000000ffffff03 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.563076][T13846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.563084][T13846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.563091][T13846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.563107][T13846] [ 262.563184][T13846] Mem-Info: [ 262.692884][T13846] active_anon:27906 inactive_anon:672 isolated_anon:0 [ 262.692884][T13846] active_file:11277 inactive_file:19295 isolated_file:0 [ 262.692884][T13846] unevictable:1768 dirty:375 writeback:0 [ 262.692884][T13846] slab_reclaimable:6981 slab_unreclaimable:66127 [ 262.692884][T13846] mapped:23884 shmem:19018 pagetables:1659 [ 262.692884][T13846] sec_pagetables:305 bounce:0 [ 262.692884][T13846] kernel_misc_reclaimable:0 [ 262.692884][T13846] free:25443 free_pcp:13534 free_cma:0 [ 262.711236][T13846] Node 0 active_anon:32kB inactive_anon:564kB active_file:16kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10272kB pagetables:1748kB sec_pagetables:1132kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.722083][T13846] Node 1 active_anon:111992kB inactive_anon:2124kB active_file:45092kB inactive_file:77180kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:95608kB dirty:1500kB writeback:0kB shmem:74540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7408kB pagetables:4988kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.733583][T13846] Node 0 DMA free:2028kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:40kB free_cma:0kB [ 262.743316][T13846] lowmem_reserve[]: 0 280 280 280 280 [ 262.745636][T13846] Node 0 DMA32 free:15932kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:536kB active_file:16kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:4kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:11724kB local_pcp:908kB free_cma:0kB [ 262.755932][T13846] lowmem_reserve[]: 0 0 0 0 0 [ 262.757869][T13846] Node 1 DMA32 free:82512kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111992kB inactive_anon:2124kB active_file:45092kB inactive_file:77180kB unevictable:5536kB writepending:1500kB zspages:1768kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:42872kB local_pcp:2668kB free_cma:0kB [ 262.768778][T13846] lowmem_reserve[]: 0 0 0 0 0 [ 262.770772][T13846] Node 0 DMA: 25*4kB (U) 82*8kB (U) 28*16kB (U) 7*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2004kB [ 262.777298][T13846] Node 0 DMA32: 153*4kB (UME) 201*8kB (UME) 47*16kB (UME) 61*32kB (UME) 28*64kB (UME) 16*128kB (UME) 10*256kB (M) 7*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 15932kB [ 262.784769][T13846] Node 1 DMA32: 52*4kB (UE) 417*8kB (UE) 412*16kB (UE) 307*32kB (UME) 124*64kB (UE) 40*128kB (UME) 33*256kB (UME) 12*512kB (UM) 8*1024kB (UM) 7*2048kB (UM) 3*4096kB (UM) = 82424kB [ 262.795419][T13846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.798750][T13846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.801614][T13846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.804713][T13846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.807826][T13846] 49920 total pagecache pages [ 262.809298][T13846] 334 pages in swap cache [ 262.810689][T13846] Free swap = 120784kB [ 262.812011][T13846] Total swap = 124996kB [ 262.813357][T13846] 524155 pages RAM [ 262.814538][T13846] 0 pages HighMem/MovableOnly [ 262.816010][T13846] 211532 pages reserved [ 262.817541][T13846] 0 pages cma reserved [ 263.066327][T13873] syzkaller0: entered promiscuous mode [ 263.068219][T13873] syzkaller0: entered allmulticast mode [ 264.142600][T13906] fuse: fd is not a fuse device [ 264.236987][T13913] netlink: 'syz.5.2917': attribute type 1 has an invalid length. [ 264.240405][T13913] netlink: 'syz.5.2917': attribute type 4 has an invalid length. [ 264.244186][T13913] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2917'. [ 264.250100][T13913] netlink: 'syz.5.2917': attribute type 1 has an invalid length. [ 264.253551][T13913] netlink: 'syz.5.2917': attribute type 4 has an invalid length. [ 264.256998][T13913] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2917'. [ 265.892009][T13980] netlink: 'syz.5.2939': attribute type 1 has an invalid length. [ 265.944627][T13980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.954184][T13985] syz_tun: left promiscuous mode [ 265.965008][T13985] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 266.332654][T14006] lo speed is unknown, defaulting to 1000 [ 266.698670][ T59] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 266.893701][ T59] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 266.903572][ T59] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 266.907714][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.916291][T14012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.924513][ T59] opticon 6-1:1.0: opticon converter detected [ 266.933054][ T59] usb 6-1: opticon converter now attached to ttyUSB0 [ 267.386760][T14049] hfsplus: unable to find HFS+ superblock [ 267.402507][T11962] IPVS: starting estimator thread 0... [ 267.409468][T14048] tipc: Started in network mode [ 267.411092][T14048] tipc: Node identity ac1414aa, cluster identity 4711 [ 267.415195][T14048] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.422443][T14048] tipc: Enabled bearer , priority 10 [ 267.488791][T14052] IPVS: using max 42 ests per chain, 100800 per kthread [ 267.551840][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.633401][T14065] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2969'. [ 267.689458][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.828604][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.970308][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.108676][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.248867][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.390357][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.469309][T14097] netlink: 'syz.5.2982': attribute type 1 has an invalid length. [ 268.471744][T14097] netlink: 'syz.5.2982': attribute type 4 has an invalid length. [ 268.474384][T14097] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2982'. [ 268.532822][T11962] tipc: Node number set to 2886997162 [ 268.668607][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.938754][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.438134][T11962] usb 6-1: USB disconnect, device number 5 [ 269.449622][T11962] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 269.460083][T11962] opticon 6-1:1.0: device disconnected [ 269.654006][T14118] (NULL device *): [drm] The number of encoders must be between 1 and 31 [ 270.314133][T14136] overlayfs: upper fs does not support file handles, falling back to index=off. [ 270.415566][T14138] syzkaller1: entered promiscuous mode [ 270.418008][T14138] syzkaller1: entered allmulticast mode [ 270.591546][T14153] overlayfs: failed to clone upperpath [ 270.638151][T14155] netlink: 'syz.8.3006': attribute type 1 has an invalid length. [ 270.664574][T14155] bond3: entered promiscuous mode [ 270.667024][T14155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.702679][T14155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.705050][T14155] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 270.708672][T14155] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 270.719656][T14155] bond3: (slave ip6gre1): making interface the new active one [ 270.737754][T14155] ip6gre1: entered promiscuous mode [ 270.747717][T14155] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 271.869354][T14212] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.873398][T14212] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 271.876330][T14212] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.883898][T14212] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 272.242655][T14225] smpboot: CPU 1 is now offline [ 272.314358][T14225] smpboot: CPU 3 is now offline [ 272.598611][ C2] net_ratelimit: 3 callbacks suppressed [ 272.598627][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.548890][T11962] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 273.638623][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.710441][T11962] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.720206][T11962] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.735093][T11962] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.743051][T11962] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.766183][T11962] usb 14-1: Product: syz [ 273.777232][T11962] usb 14-1: Manufacturer: syz [ 273.786335][T11962] usb 14-1: SerialNumber: syz [ 273.842182][T14254] netlink: 'syz.8.3044': attribute type 8 has an invalid length. [ 273.850522][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3044'. [ 273.867388][T14254] bond0: entered promiscuous mode [ 273.873402][T14254] bond_slave_0: entered promiscuous mode [ 273.877805][T14254] bond_slave_1: entered promiscuous mode [ 273.900372][T14254] gretap0: entered promiscuous mode [ 273.904083][T14254] veth0_to_bridge: entered promiscuous mode [ 273.913219][T14254] hsr1: entered promiscuous mode [ 274.029279][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.065833][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.119673][T11962] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -22 [ 274.133963][T11962] usb 14-1: USB disconnect, device number 6 [ 274.621986][T11962] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 274.678670][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.768815][T11962] usb 14-1: Using ep0 maxpacket: 8 [ 274.778297][T11962] usb 14-1: config index 0 descriptor too short (expected 301, got 72) [ 274.785953][T11962] usb 14-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 274.797062][T11962] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.805121][T11962] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.812070][T11962] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.820933][T11962] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.830879][T11962] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.843096][T11962] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.064907][T11962] usb 14-1: GET_CAPABILITIES returned 0 [ 275.068756][T11962] usbtmc 14-1:16.0: can't read capabilities [ 275.267098][T11962] usb 14-1: USB disconnect, device number 7 [ 275.718844][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.068410][T14292] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3061'. [ 276.196930][T14295] warning: `syz.9.3062' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.349261][T14305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 276.354217][T14305] batman_adv: batadv0: Adding interface: gretap1 [ 276.356330][T14305] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.365635][T14305] batman_adv: batadv0: Interface activated: gretap1 [ 276.444904][T14307] gadgetfs: bound to dummy_udc driver [ 276.698658][T11962] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 276.708155][ C2] gadgetfs: connected [ 276.721173][T11962] gadgetfs: disconnected [ 276.758699][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.946091][ C2] gadgetfs: connected [ 276.948618][T11962] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 276.954136][T11962] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 276.958421][T11962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.985464][ C2] gadgetfs: configuration #1 [ 277.130897][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3081'. [ 277.269769][T14307] gadgetfs: suspended from state 3 [ 277.272493][T11962] usb 5-1: can't set config #1, error -71 [ 277.274964][T14307] gadgetfs: disconnected [ 277.278024][T11962] usb 5-1: USB disconnect, device number 17 [ 277.358978][T14350] /dev/loop8: Can't lookup blockdev [ 277.399583][T14346] kvm: pic: single mode not supported [ 277.404209][T14346] kvm: pic: single mode not supported [ 277.408109][T14346] kvm: pic: single mode not supported [ 277.416300][T14346] kvm: pic: single mode not supported [ 277.418999][T14346] kvm: pic: level sensitive irq not supported [ 277.423797][T14346] kvm: pic: level sensitive irq not supported [ 277.433817][T14346] kvm: pic: single mode not supported [ 277.437704][T14346] kvm: pic: single mode not supported [ 277.799144][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.996728][T14361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3087'. [ 278.549093][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3088'. [ 278.650698][T14376] CIFS: Attempting to mount //127.0.0.1/share [ 278.840751][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.491857][T14376] CIFS: VFS: Error connecting to socket. Aborting operation. [ 279.496727][T14376] CIFS: VFS: cifs_mount failed w/return code = -4 [ 279.708183][T14391] netdevsim netdevsim9: Direct firmware load for * [ 279.708183][T14391] failed with error -2 [ 279.723375][T14391] netdevsim netdevsim9: Falling back to sysfs fallback for: * [ 279.723375][T14391] [ 279.883407][ T42] audit: type=1800 audit(1785884107.108:10475): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3100" name="file" dev="configfs" ino=58131 res=0 errno=0 [ 279.889637][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.899679][T14394] [ 279.900510][T14394] ====================================================== [ 279.902659][T14394] WARNING: possible circular locking dependency detected [ 279.904738][T14394] syzkaller #0 Tainted: G L [ 279.906614][T14394] ------------------------------------------------------ [ 279.908654][T14394] syz.5.3100/14394 is trying to acquire lock: [ 279.910460][T14394] ffff8880297a4450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 279.912990][T14394] [ 279.912990][T14394] but task is already holding lock: [ 279.915160][T14394] ffff88802aece920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 279.918410][T14394] [ 279.918410][T14394] which lock already depends on the new lock. [ 279.918410][T14394] [ 279.921584][T14394] [ 279.921584][T14394] the existing dependency chain (in reverse order) is: [ 279.924357][T14394] [ 279.924357][T14394] -> #4 (&common->filesem){++++}-{4:4}: [ 279.926752][T14394] lock_acquire+0x1b9/0x370 [ 279.928372][T14394] down_write+0x8b/0x1f0 [ 279.929882][T14394] fsg_store_file+0x193/0x450 [ 279.931470][T14394] configfs_write_iter+0x302/0x4e0 [ 279.933186][T14394] vfs_write+0x6ac/0x1050 [ 279.934645][T14394] ksys_write+0x12a/0x250 [ 279.936397][T14394] __do_fast_syscall_32+0xe7/0x970 [ 279.938259][T14394] do_fast_syscall_32+0x32/0x70 [ 279.939883][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.941965][T14394] [ 279.941965][T14394] -> #3 (&p->frag_sem){++++}-{4:4}: [ 279.944202][T14394] lock_acquire+0x1b9/0x370 [ 279.945780][T14394] down_read+0x99/0x4c0 [ 279.947207][T14394] configfs_write_iter+0x218/0x4e0 [ 279.948892][T14394] vfs_write+0x6ac/0x1050 [ 279.950351][T14394] ksys_write+0x12a/0x250 [ 279.951841][T14394] __do_fast_syscall_32+0xe7/0x970 [ 279.953579][T14394] do_fast_syscall_32+0x32/0x70 [ 279.955208][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.957325][T14394] [ 279.957325][T14394] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 279.959561][T14394] lock_acquire+0x1b9/0x370 [ 279.961102][T14394] __mutex_lock+0x1a4/0x1bd0 [ 279.962689][T14394] configfs_read_iter+0x79/0x6f0 [ 279.964363][T14394] __kernel_read+0x397/0xad0 [ 279.965915][T14394] integrity_kernel_read+0x7e/0xb0 [ 279.967643][T14394] ima_calc_file_hash_tfm+0x25e/0x350 [ 279.969472][T14394] ima_calc_file_hash+0x1e3/0x380 [ 279.971128][T14394] ima_collect_measurement+0x94f/0xb30 [ 279.972966][T14394] process_measurement+0xdfe/0x2350 [ 279.974686][T14394] ima_file_check+0xcc/0x120 [ 279.976229][T14394] security_file_post_open+0xc4/0x210 [ 279.978035][T14394] path_openat+0x985/0x4280 [ 279.979586][T14394] do_file_open+0x20e/0x430 [ 279.981119][T14394] do_sys_openat2+0x10f/0x1e0 [ 279.982706][T14394] __ia32_compat_sys_openat+0x12d/0x210 [ 279.984538][T14394] __do_fast_syscall_32+0xe7/0x970 [ 279.986252][T14394] do_fast_syscall_32+0x32/0x70 [ 279.987890][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.989950][T14394] [ 279.989950][T14394] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 279.992543][T14394] lock_acquire+0x1b9/0x370 [ 279.994072][T14394] __mutex_lock+0x1a4/0x1bd0 [ 279.995592][T14394] ima_file_truncate+0xe6/0x190 [ 279.997192][T14394] security_file_truncate+0x11e/0x1e0 [ 279.998947][T14394] path_openat+0x3584/0x4280 [ 280.000495][T14394] do_file_open+0x20e/0x430 [ 280.002283][T14394] do_sys_openat2+0x10f/0x1e0 [ 280.004089][T14394] __ia32_compat_sys_openat+0x12d/0x210 [ 280.005899][T14394] __do_fast_syscall_32+0xe7/0x970 [ 280.007575][T14394] do_fast_syscall_32+0x32/0x70 [ 280.009177][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.011496][T14394] [ 280.011496][T14394] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 280.014058][T14394] check_prev_add+0xeb/0xe60 [ 280.016016][T14394] __lock_acquire+0x136c/0x1a40 [ 280.017960][T14394] lock_acquire+0x1b9/0x370 [ 280.019493][T14394] mnt_want_write+0x6f/0x410 [ 280.021106][T14394] path_openat+0xad9/0x4280 [ 280.022668][T14394] do_file_open+0x20e/0x430 [ 280.024195][T14394] file_open_name+0x1c3/0x3e0 [ 280.025811][T14394] filp_open+0x2e/0x50 [ 280.027249][T14394] fsg_lun_open+0x6b/0x7b0 [ 280.028771][T14394] fsg_store_file+0x1e7/0x450 [ 280.030341][T14394] configfs_write_iter+0x302/0x4e0 [ 280.032011][T14394] vfs_write+0x6ac/0x1050 [ 280.033520][T14394] ksys_write+0x12a/0x250 [ 280.034991][T14394] __do_fast_syscall_32+0xe7/0x970 [ 280.036641][T14394] do_fast_syscall_32+0x32/0x70 [ 280.038306][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.040465][T14394] [ 280.040465][T14394] other info that might help us debug this: [ 280.040465][T14394] [ 280.044248][T14394] Chain exists of: [ 280.044248][T14394] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 280.044248][T14394] [ 280.048194][T14394] Possible unsafe locking scenario: [ 280.048194][T14394] [ 280.050463][T14394] CPU0 CPU1 [ 280.052104][T14394] ---- ---- [ 280.053708][T14394] lock(&common->filesem); [ 280.055067][T14394] lock(&p->frag_sem); [ 280.057097][T14394] lock(&common->filesem); [ 280.059243][T14394] rlock(sb_writers#5); [ 280.060569][T14394] [ 280.060569][T14394] *** DEADLOCK *** [ 280.060569][T14394] [ 280.063026][T14394] 5 locks held by syz.5.3100/14394: [ 280.064770][T14394] #0: ffff8880245929b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 280.067936][T14394] #1: ffff888022026450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 280.070629][T14394] #2: ffff88801d775c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 280.073494][T14394] #3: ffff88804c972770 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 280.076493][T14394] #4: ffff88802aece920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 280.079346][T14394] [ 280.079346][T14394] stack backtrace: [ 280.081091][T14394] CPU: 2 UID: 0 PID: 14394 Comm: syz.5.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.081108][T14394] Tainted: [L]=SOFTLOCKUP [ 280.081113][T14394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.081122][T14394] Call Trace: [ 280.081128][T14394] [ 280.081134][T14394] dump_stack_lvl+0x100/0x190 [ 280.081148][T14394] print_circular_bug.cold+0x178/0x1c7 [ 280.081169][T14394] check_noncircular+0x146/0x160 [ 280.081188][T14394] ? __lock_acquire+0xd5b/0x1a40 [ 280.081208][T14394] check_prev_add+0xeb/0xe60 [ 280.081225][T14394] __lock_acquire+0x136c/0x1a40 [ 280.081243][T14394] ? try_to_unlazy+0x296/0x910 [ 280.081259][T14394] lock_acquire+0x1b9/0x370 [ 280.081275][T14394] ? path_openat+0xad9/0x4280 [ 280.081287][T14394] ? __pfx___might_resched+0x10/0x10 [ 280.081307][T14394] mnt_want_write+0x6f/0x410 [ 280.081324][T14394] ? path_openat+0xad9/0x4280 [ 280.081335][T14394] path_openat+0xad9/0x4280 [ 280.081349][T14394] ? __pfx_path_openat+0x10/0x10 [ 280.081359][T14394] ? mark_held_locks+0x40/0x70 [ 280.081375][T14394] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 280.081387][T14394] ? lockdep_hardirqs_on+0x78/0x100 [ 280.081403][T14394] do_file_open+0x20e/0x430 [ 280.081415][T14394] ? __pfx_do_file_open+0x10/0x10 [ 280.081431][T14394] ? irqentry_exit+0x24d/0xa00 [ 280.081450][T14394] ? lockdep_hardirqs_on+0x78/0x100 [ 280.081467][T14394] file_open_name+0x1c3/0x3e0 [ 280.081482][T14394] ? __pfx_file_open_name+0x10/0x10 [ 280.081499][T14394] filp_open+0x2e/0x50 [ 280.081512][T14394] fsg_lun_open+0x6b/0x7b0 [ 280.081529][T14394] ? __pfx_down_read+0x10/0x10 [ 280.081546][T14394] fsg_store_file+0x1e7/0x450 [ 280.081561][T14394] configfs_write_iter+0x302/0x4e0 [ 280.081573][T14394] vfs_write+0x6ac/0x1050 [ 280.081582][T14394] ? __pfx_configfs_write_iter+0x10/0x10 [ 280.081594][T14394] ? __pfx_vfs_write+0x10/0x10 [ 280.081603][T14394] ? find_held_lock+0x2b/0x80 [ 280.081620][T14394] ksys_write+0x12a/0x250 [ 280.081630][T14394] ? __pfx_ksys_write+0x10/0x10 [ 280.081641][T14394] __do_fast_syscall_32+0xe7/0x970 [ 280.081659][T14394] do_fast_syscall_32+0x32/0x70 [ 280.081674][T14394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.081688][T14394] RIP: 0023:0xf701efec [ 280.081704][T14394] Code: Unable to access opcode bytes at 0xf701efc2. [ 280.081709][T14394] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 280.081720][T14394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 280.081726][T14394] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.081733][T14394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.081739][T14394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.081745][T14394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.081756][T14394] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.218753][T14394] mass_storage.0/lun.0: unable to open backing file: fi [ 280.918669][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.921218][ T9867] bond3: (slave syz_tun): Removing an active aggregator [ 280.923957][ T9867] bond3: (slave syz_tun): Releasing backup interface [ 281.114731][T14384] syz_tun (unregistering): left allmulticast mode [ 281.117423][T14384] syz_tun (unregistering): left promiscuous mode [ 281.120958][T14384] bridge0: port 3(syz_tun) entered disabled state [ 281.194329][ T13] bridge_slave_1: left allmulticast mode [ 281.196149][ T13] bridge_slave_1: left promiscuous mode [ 281.198005][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.202814][ T13] bridge_slave_0: left allmulticast mode [ 281.204648][ T13] bridge_slave_0: left promiscuous mode [ 281.206493][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.211691][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 281.239350][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 281.241928][ T13] ip6gre1 (unregistering): left promiscuous mode [ 281.278437][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 281.288963][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.292581][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.295608][ T13] bond0 (unregistering): Released all slaves [ 281.299592][ T13] bond1 (unregistering): Released all slaves [ 281.304483][ T13] bond2 (unregistering): Released all slaves [ 281.408623][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 281.595047][ T13] tipc: Disabling bearer [ 281.596753][ T13] tipc: Left network mode [ 281.633958][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 281.733544][ T13] hsr_slave_0: left promiscuous mode [ 281.736785][ T13] hsr_slave_1: left promiscuous mode [ 281.744324][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.748128][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.853458][ T13] team0 (unregistering): Port device team_slave_1 removed [ 281.865763][ T13] team0 (unregistering): Port device team_slave_0 removed [ 281.897222][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 281.900869][ T9224] smbdirect: ib_dev[syz0] removed [ 282.093376][ T13] IPVS: stop unused estimator thread 0... [ 282.153019][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 282.483998][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.536233][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.597009][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.642978][ T5455] 8021q: adding VLAN 0 to HW filter on device eth23 [ 282.664974][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.856729][ T5455] 8021q: adding VLAN 0 to HW filter on device eth22 [ 282.887478][ T13] bridge_slave_1: left allmulticast mode [ 282.890672][ T13] bridge_slave_1: left promiscuous mode [ 282.892555][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.896105][ T13] bridge_slave_0: left allmulticast mode [ 282.898221][ T13] bridge_slave_0: left promiscuous mode [ 282.900306][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.971968][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 282.982394][ T13] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 282.984842][ T13] ipip0 (unregistering): left promiscuous mode [ 282.993574][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.001810][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.005167][ T13] bond0 (unregistering): Released all slaves [ 283.008320][ T13] bond1 (unregistering): Released all slaves [ 283.012528][ T13] bond2 (unregistering): Released all slaves [ 283.016618][ T13] bond3 (unregistering): Released all slaves [ 283.037079][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.042613][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.046040][ T13] bond0 (unregistering): Released all slaves [ 283.120785][ T13] tipc: Left network mode [ 283.181288][ T5455] 8021q: adding VLAN 0 to HW filter on device eth24 [ 283.318086][ T5455] 8021q: adding VLAN 0 to HW filter on device eth25 [ 283.551373][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.554442][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.558888][ T13] hsr_slave_0: left promiscuous mode [ 283.560958][ T13] hsr_slave_1: left promiscuous mode [ 283.562903][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.565249][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.568482][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.571546][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.576011][ T13] veth1_macvtap: left promiscuous mode [ 283.577848][ T13] veth0_macvtap: left promiscuous mode [ 283.579730][ T13] veth1_vlan: left promiscuous mode [ 283.581347][ T13] veth0_vlan: left promiscuous mode [ 283.672026][ T13] team0 (unregistering): Port device team_slave_1 removed [ 283.677077][ T13] team0 (unregistering): Port device team_slave_0 removed [ 283.748134][ T13] team0 (unregistering): Port device team_slave_1 removed [ 283.764843][ T13] team0 (unregistering): Port device team_slave_0 removed [ 283.800164][ T5455] 8021q: adding VLAN 0 to HW filter on device eth26 [ 283.942580][ T5455] 8021q: adding VLAN 0 to HW filter on device eth27 [ 284.104036][ T5455] 8021q: adding VLAN 0 to HW filter on device eth28 [ 284.142248][ T13] IPVS: stop unused estimator thread 0... [ 284.228807][ T5455] 8021q: adding VLAN 0 to HW filter on device eth29