last executing test programs: 1m51.359571462s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 1m31.399467113s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 1m17.430170888s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 51.124377328s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 39.376280315s ago: executing program 2 (id=1916): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) timer_getoverrun(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 39.095250005s ago: executing program 2 (id=1917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x23, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.711742945s ago: executing program 2 (id=1918): socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x3c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 38.485691729s ago: executing program 2 (id=1919): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 38.36600613s ago: executing program 2 (id=1920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) 36.184863145s ago: executing program 2 (id=1927): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 35.840135219s ago: executing program 32 (id=1927): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 30.517879694s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 12.015608902s ago: executing program 3 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fanotify_init(0x200, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 5.151027421s ago: executing program 0 (id=2035): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$NS_GET_OWNER_UID(r1, 0x5421, &(0x7f0000000040)=0x0) setuid(r2) r3 = memfd_create(&(0x7f0000000740)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\bI\xd7\'\xe0\xc0\n|\xd3\x1fC\xd5I1\xe0\xc2(UB9\xf7\x86', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r0, r3, 0x0) fchdir(r4) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 5.141305625s ago: executing program 1 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206017ba17d51d3d8ac3600000000000900020073797a30000000000c000780080012400006000805000500000000000d000300686173683a6d61630000000005000400000000000500010007"], 0x54}}, 0x0) 5.113437122s ago: executing program 5 (id=2037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x108, &(0x7f0000000500)=""/264, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.049739024s ago: executing program 0 (id=2038): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x19, 0x1, 0x9, 0x7, 0x7, 0xd}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf6, 0x0, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.200779419s ago: executing program 1 (id=2039): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.0291965s ago: executing program 5 (id=2040): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x8881) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x70, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4fa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.730099416s ago: executing program 0 (id=2041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x50}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.374509865s ago: executing program 1 (id=2043): creat(0x0, 0xecf86c37d53049e9) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 3.291388624s ago: executing program 4 (id=2044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 3.289225838s ago: executing program 0 (id=2045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) write$tun(r4, 0x0, 0x3e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.105808797s ago: executing program 4 (id=2046): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006d00)="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", 0x2000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.854317958s ago: executing program 4 (id=2047): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x3000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r1, 0x0) 2.713371888s ago: executing program 5 (id=2048): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.505458557s ago: executing program 4 (id=2049): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) 2.393074623s ago: executing program 5 (id=2050): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.24420612s ago: executing program 4 (id=2051): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) unshare(0x60600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = userfaultfd(0x80801) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) 1.1448476s ago: executing program 5 (id=2052): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000600)="000092466d1f4ae7d01870e45627a77615a81c4f36717a8bbb299769ba3693f4ca513906678c4436da114d8e40303a7f4e15263a096aac7a22ab99b9fd7ddacbeaea7f7125c87e9f", 0x48) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 1.059858684s ago: executing program 4 (id=2053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000001000)={0x0, 0x0, 0x4, "da3c8d23"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="4044fc"], 0x0, 0x0, 0x0, 0x0}) 795.993151ms ago: executing program 0 (id=2054): ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) 467.979687ms ago: executing program 1 (id=2055): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 247.913064ms ago: executing program 1 (id=2056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x101, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 86.436587ms ago: executing program 5 (id=2057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 40.53115ms ago: executing program 1 (id=2058): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x12d}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000540)=0x1) 0s ago: executing program 0 (id=2059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4}) kernel console output (not intermixed with test programs): IBSS network, BSSID 50:50:50:50:50:50 [ 420.948710][ T5823] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 421.167202][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 421.209103][ T5823] usb 3-1: USB disconnect, device number 21 [ 421.427331][T10617] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 422.319294][T10622] syzkaller1: entered promiscuous mode [ 422.332711][T10622] syzkaller1: entered allmulticast mode [ 422.471984][ T5872] IPVS: starting estimator thread 0... [ 422.513044][T10633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 422.527602][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 422.562147][T10631] IPVS: using max 23 ests per chain, 55200 per kthread [ 422.832882][ T6076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.129998][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.140036][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.149389][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.162695][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.174045][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 423.181589][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.241187][T10656] lo speed is unknown, defaulting to 1000 [ 424.285846][ T7179] udevd[7179]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 424.706626][T10681] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1555'. [ 424.747409][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 424.816346][T10693] trusted_key: syz.4.1562 sent an empty control message without MSG_MORE. [ 424.866440][T10656] chnl_net:caif_netlink_parms(): no params data found [ 424.941932][ T5823] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 425.051125][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.059293][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.067908][T10656] bridge_slave_0: entered allmulticast mode [ 425.076167][T10656] bridge_slave_0: entered promiscuous mode [ 425.086698][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.094356][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.102480][T10656] bridge_slave_1: entered allmulticast mode [ 425.109852][T10656] bridge_slave_1: entered promiscuous mode [ 425.131886][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 425.141433][ T5823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.158178][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.190031][ T5823] usb 3-1: Product: syz [ 425.191058][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'. [ 425.207266][T10711] binder: 10710:10711 ioctl 4018620d 0 returned -22 [ 425.208285][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.226358][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.236218][ T5823] usb 3-1: Manufacturer: syz [ 425.240948][ T5823] usb 3-1: SerialNumber: syz [ 425.257100][ T5823] usb 3-1: config 0 descriptor?? [ 425.287139][ T5833] Bluetooth: hci1: command tx timeout [ 425.348271][T10656] team0: Port device team_slave_0 added [ 425.370745][T10656] team0: Port device team_slave_1 added [ 425.446006][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.462029][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.497274][ T5823] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.507062][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.524302][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.538545][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.565565][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.619218][ T6076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.688198][T10656] hsr_slave_0: entered promiscuous mode [ 425.697462][T10656] hsr_slave_1: entered promiscuous mode [ 425.739884][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.756108][T10656] Cannot create hsr debugfs directory [ 425.816985][ T6076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.026475][ T6076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.103479][T10722] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1570'. [ 426.153761][T10719] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1570'. [ 426.332380][ T5823] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 426.353095][ T5823] usb 3-1: USB disconnect, device number 22 [ 426.461108][T10730] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 426.492246][ T6076] bridge_slave_1: left allmulticast mode [ 426.526635][ T6076] bridge_slave_1: left promiscuous mode [ 426.563222][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.592773][ T6076] bridge_slave_0: left allmulticast mode [ 426.598995][ T6076] bridge_slave_0: left promiscuous mode [ 426.607789][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.236284][ T5823] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 427.367744][ T5833] Bluetooth: hci1: command tx timeout [ 427.409029][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.420318][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.443561][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.469197][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.479339][ T5823] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.489365][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.500828][ T6076] bond0 (unregistering): Released all slaves [ 427.506983][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.508908][ T5823] usb 5-1: config 0 descriptor?? [ 427.980554][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 428.024490][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 428.059644][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 428.071358][T10769] syz.0.1585[10769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.071453][T10769] syz.0.1585[10769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.084699][T10769] syz.0.1585[10769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.096275][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 428.177870][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 428.187017][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.225792][ T5823] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 428.233742][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.253865][ T5823] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 428.294433][ T5823] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 428.379531][ T5823] usb 5-1: USB disconnect, device number 22 [ 428.741110][T10784] mmap: syz.2.1589 (10784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 428.744863][T10656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.779572][T10656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.804416][T10656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.835965][T10656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.911615][ T6076] hsr_slave_0: left promiscuous mode [ 428.968120][ T6076] hsr_slave_1: left promiscuous mode [ 429.126264][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.134663][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.183377][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.190848][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.296811][ T6076] veth1_macvtap: left promiscuous mode [ 429.303535][ T6076] veth0_macvtap: left promiscuous mode [ 429.309477][ T6076] veth1_vlan: left promiscuous mode [ 429.315615][ T6076] veth0_vlan: left promiscuous mode [ 429.442038][ T5833] Bluetooth: hci1: command tx timeout [ 429.612731][ T974] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 429.784412][ T974] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.794428][ T974] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 429.817871][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.840912][ T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 429.852258][ T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 429.866575][ T974] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.887477][ T974] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.908670][ T974] usb 1-1: Product: syz [ 429.914015][ T974] usb 1-1: Manufacturer: syz [ 429.944328][ T974] cdc_wdm 1-1:1.0: skipping garbage [ 429.949581][ T974] cdc_wdm 1-1:1.0: skipping garbage [ 429.978995][ T974] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 429.995781][ T974] cdc_wdm 1-1:1.0: Unknown control protocol [ 430.148385][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 430.203760][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 430.221905][ T5823] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 430.235429][ T9] usb 1-1: USB disconnect, device number 25 [ 430.239014][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 430.247970][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 430.254061][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 430.374520][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.388216][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.398713][ T5823] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 430.409765][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.429920][ T5823] usb 2-1: config 0 descriptor?? [ 431.049375][T10821] input: syz0 as /devices/virtual/input/input33 [ 431.094740][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.159547][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1601'. [ 431.209747][T10824] binder: 10822:10824 ioctl 4018620d 0 returned -22 [ 431.242696][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.259312][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.268020][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.384476][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.391612][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.463499][ T5823] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001C/input/input34 [ 431.521843][ T5833] Bluetooth: hci1: command tx timeout [ 431.645069][ T5823] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001C/input/input35 [ 431.681581][ T5823] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001C/input/input36 [ 431.719801][ T5823] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001C/input/input37 [ 431.787098][ T5823] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 431.832573][ T5823] usb 2-1: USB disconnect, device number 26 [ 431.948998][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.016721][T10656] veth0_vlan: entered promiscuous mode [ 432.022552][ T5902] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 432.042549][T10656] veth1_vlan: entered promiscuous mode [ 432.072025][ T974] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 432.093718][T10656] veth0_macvtap: entered promiscuous mode [ 432.105038][T10656] veth1_macvtap: entered promiscuous mode [ 432.121425][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.134962][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.145742][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.157682][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.168798][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.180019][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.190249][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.201557][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.212619][ T5902] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 432.220720][ T5902] usb 1-1: config 0 has no interface number 0 [ 432.230443][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.237943][ T5902] usb 1-1: config 0 interface 16 has no altsetting 0 [ 432.247115][ T974] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 432.263747][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 432.274760][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.287813][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.299904][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.311039][ T5902] usb 1-1: Product: syz [ 432.323921][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.334765][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.353184][ T5902] usb 1-1: Manufacturer: syz [ 432.376966][ T5902] usb 1-1: SerialNumber: syz [ 432.383357][ T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 432.400041][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.413177][ T5902] usb 1-1: config 0 descriptor?? [ 432.419990][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.437840][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.452108][ T974] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 432.468952][ T974] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 432.478087][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.489666][ T974] usb 5-1: Manufacturer: syz [ 432.495823][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.507674][ T974] usb 5-1: config 0 descriptor?? [ 432.518960][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.529132][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.540337][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.553135][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.632991][ T5902] usbtest 1-1:0.16: couldn't get endpoints, -71 [ 432.639786][ T5902] usbtest 1-1:0.16: probe with driver usbtest failed with error -71 [ 432.669141][ T5902] usb 1-1: USB disconnect, device number 26 [ 432.705093][T10859] syzkaller0: entered promiscuous mode [ 432.710884][T10859] syzkaller0: entered allmulticast mode [ 432.733797][T10656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.745318][T10656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.771796][T10656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.790908][T10656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.957421][ T974] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 432.971701][ T974] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 432.989500][ T974] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 433.129938][ T5902] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 433.261079][ T5823] usb 5-1: USB disconnect, device number 23 [ 433.285878][ T5902] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 433.300648][ T5902] usb 1-1: config 0 has no interface number 0 [ 433.339058][ T5902] usb 1-1: config 0 interface 16 has no altsetting 0 [ 433.365130][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 433.382335][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.405942][ T5902] usb 1-1: Product: syz [ 433.410174][ T5902] usb 1-1: Manufacturer: syz [ 433.415359][ T5902] usb 1-1: SerialNumber: syz [ 433.433415][ T5902] usb 1-1: config 0 descriptor?? [ 433.880126][T10864] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 434.073536][ T5902] usbtest 1-1:0.16: Linux gadget zero [ 434.078987][ T5902] usbtest 1-1:0.16: high-speed {control in/out int-out} tests (+alt) [ 434.300808][ T5902] usb 1-1: USB disconnect, device number 27 [ 434.952461][T10867] binder: 10865:10867 ioctl 4018620d 0 returned -22 [ 436.196434][T10869] Process accounting resumed [ 438.131223][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 438.503443][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.523978][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.533183][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.541040][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.601017][T10889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1625'. [ 438.828449][T10897] syz.0.1628: attempt to access beyond end of device [ 438.828449][T10897] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 438.860734][T10898] netlink: 'syz.1.1627': attribute type 12 has an invalid length. [ 438.873189][T10897] FAT-fs (loop1): unable to read boot sector [ 439.013686][T10905] netlink: 'syz.0.1630': attribute type 39 has an invalid length. [ 439.211411][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1632'. [ 439.242127][T10907] binder: 10906:10907 ioctl 4018620d 0 returned -22 [ 439.830506][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 439.992343][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.058211][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.077841][T10934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.091862][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.101080][T10934] batman_adv: batadv0: Removing interface: erspan1 [ 440.230109][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.252410][T10943] wg2: entered promiscuous mode [ 440.257343][T10943] wg2: entered allmulticast mode [ 440.412394][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.413606][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.445622][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.459518][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.478473][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.552539][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.560625][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 440.568038][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.691465][T10945] lo speed is unknown, defaulting to 1000 [ 440.749502][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.011855][ T5828] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 441.272415][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 441.290751][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.440530][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.680892][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.807760][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.831355][T10961] bond0: Unable to set down delay as MII monitoring is disabled [ 441.852783][T10963] syz_tun: entered allmulticast mode [ 441.902415][ T11] bridge_slave_1: left allmulticast mode [ 441.937051][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.946237][ T11] bridge_slave_1: left promiscuous mode [ 441.946450][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.960010][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.002571][ T11] bridge_slave_0: left allmulticast mode [ 442.009545][ T11] bridge_slave_0: left promiscuous mode [ 442.038540][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.179205][ T5828] usb 3-1: usb_control_msg returned -32 [ 442.188109][ T5828] usbtmc 3-1:16.0: can't read capabilities [ 442.312020][ T8] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 442.484487][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 442.494662][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 442.507493][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.518549][ T8] usb 2-1: Product: syz [ 442.522844][ T8] usb 2-1: Manufacturer: syz [ 442.527460][ T8] usb 2-1: SerialNumber: syz [ 442.623220][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.635244][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.643981][ T5835] Bluetooth: hci1: command tx timeout [ 442.656827][ T11] bond0 (unregistering): Released all slaves [ 442.702276][T10954] syz_tun: left allmulticast mode [ 442.805238][T10945] chnl_net:caif_netlink_parms(): no params data found [ 443.198275][ T8] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 443.710785][ T974] usb 3-1: USB disconnect, device number 23 [ 444.721979][ T5835] Bluetooth: hci1: command tx timeout [ 445.076421][ T974] usb 2-1: USB disconnect, device number 27 [ 445.084816][ T974] usblp1: removed [ 445.886966][ T11] hsr_slave_0: left promiscuous mode [ 445.897714][ T11] hsr_slave_1: left promiscuous mode [ 445.904441][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.921928][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.939747][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.947954][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.978775][ T11] veth1_macvtap: left promiscuous mode [ 445.984543][ T11] veth0_macvtap: left promiscuous mode [ 445.991198][ T11] veth1_vlan: left promiscuous mode [ 446.001671][ T11] veth0_vlan: left promiscuous mode [ 446.818307][ T5835] Bluetooth: hci1: command tx timeout [ 447.177948][ T11] team0 (unregistering): Port device team_slave_1 removed [ 447.225493][ T11] team0 (unregistering): Port device team_slave_0 removed [ 448.881994][ T5835] Bluetooth: hci1: command tx timeout [ 449.637770][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.645247][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.654101][T10945] bridge_slave_0: entered allmulticast mode [ 449.660666][T10945] bridge_slave_0: entered promiscuous mode [ 449.752376][T11020] bond0: Unable to set down delay as MII monitoring is disabled [ 449.874070][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.883503][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.890753][T10945] bridge_slave_1: entered allmulticast mode [ 449.948581][T10945] bridge_slave_1: entered promiscuous mode [ 450.136575][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.221278][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.367488][T10945] team0: Port device team_slave_0 added [ 450.444388][T10945] team0: Port device team_slave_1 added [ 450.546094][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.561851][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.589414][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 450.620667][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.653854][T11051] ipip0: entered promiscuous mode [ 450.669361][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.689072][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.802199][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.075501][T10945] hsr_slave_0: entered promiscuous mode [ 451.124908][T10945] hsr_slave_1: entered promiscuous mode [ 451.131172][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.151360][T10945] Cannot create hsr debugfs directory [ 451.706708][T11078] syzkaller1: entered promiscuous mode [ 451.727922][T11078] syzkaller1: entered allmulticast mode [ 452.211878][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 452.323139][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 452.323390][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 452.361887][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 452.387522][ T9] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=5a.2c [ 452.401932][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.410216][ T9] usb 2-1: Product: syz [ 452.422248][ T9] usb 2-1: Manufacturer: syz [ 452.426887][ T9] usb 2-1: SerialNumber: syz [ 452.667276][ T9] usb 2-1: USB disconnect, device number 28 [ 453.079346][T10945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.113285][T10945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.146515][T10945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.157232][T10945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.329498][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1688'. [ 453.476126][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 453.567893][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.744823][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 453.981949][ T974] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 454.134714][ T974] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 454.149164][ T974] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 454.169584][ T974] usb 1-1: config 1 interface 0 has no altsetting 0 [ 454.185619][ T974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 454.198579][ T974] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 454.216452][ T974] usb 1-1: Product: syz [ 454.220906][ T974] usb 1-1: Manufacturer: syz [ 454.231085][ T974] usb 1-1: SerialNumber: syz [ 454.708367][ T974] usb 1-1: USB disconnect, device number 28 [ 455.620466][T11177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 456.053592][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 456.227790][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 456.261458][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.271643][ T9] usb 1-1: config 0 has no interfaces? [ 456.277284][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.294971][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.311695][ T9] usb 1-1: config 0 descriptor?? [ 456.370631][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.400592][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.407784][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.429275][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.436435][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.517362][T10945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.523215][T11182] input: syz1 as /devices/virtual/input/input38 [ 456.527874][T10945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.401782][ T974] usb 1-1: USB disconnect, device number 29 [ 457.526348][T11198] 9pnet_fd: Insufficient options for proto=fd [ 457.673869][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.802732][T10945] veth0_vlan: entered promiscuous mode [ 457.827231][T10945] veth1_vlan: entered promiscuous mode [ 457.877576][T10945] veth0_macvtap: entered promiscuous mode [ 457.920499][T10945] veth1_macvtap: entered promiscuous mode [ 457.951794][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.973223][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.987463][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.000628][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.014552][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.038889][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.049346][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.068118][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.080637][T10945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.117551][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.130857][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.155179][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.169950][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.181241][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.218075][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.237987][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.264374][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.280091][T10945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.296401][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 458.317005][T10945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.326563][T10945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.359149][T10945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.370589][T10945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.636809][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.647063][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.660136][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.673166][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.728872][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 458.728891][ T29] audit: type=1804 audit(458.667:207): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1709" name="/newroot/349/bus/file1" dev="overlay" ino=1821 res=1 errno=0 [ 459.470891][T11249] syz_tun: entered allmulticast mode [ 460.070752][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.173016][T11247] syz_tun: left allmulticast mode [ 460.269902][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.944296][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.968347][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.980089][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.003114][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.017614][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.026911][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.034333][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.095539][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.137071][T11268] lo speed is unknown, defaulting to 1000 [ 461.171991][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 461.251872][ T5902] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 461.326296][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 461.351022][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.363210][ T35] bridge_slave_1: left allmulticast mode [ 461.368890][ T35] bridge_slave_1: left promiscuous mode [ 461.386170][ T9] usb 3-1: config 0 descriptor?? [ 461.402922][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.417237][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.430375][ T35] bridge_slave_0: left allmulticast mode [ 461.437869][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.442218][ T35] bridge_slave_0: left promiscuous mode [ 461.455144][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.470077][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.479800][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.497087][ T5902] usb 5-1: Product: syz [ 461.501407][ T5902] usb 5-1: Manufacturer: syz [ 461.506493][ T5902] usb 5-1: SerialNumber: syz [ 461.532026][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 461.712290][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 461.720881][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.734552][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.738481][ T5902] usb 5-1: 0:2 : does not exist [ 461.745697][ T8] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 461.764422][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.768094][ T5902] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 461.790666][ T8] usb 2-1: config 0 descriptor?? [ 461.826967][ T9] playstation 0003:054C:0DF2.001E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 461.834213][ T5902] usb 5-1: USB disconnect, device number 24 [ 462.044726][ T9] playstation 0003:054C:0DF2.001E: Invalid reportID received, expected 9 got 0 [ 462.054196][T11108] udevd[11108]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.063074][ T9] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -22 [ 462.101832][ T9] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense [ 462.110858][ T9] playstation 0003:054C:0DF2.001E: Failed to create dualsense. [ 462.124298][ T9] playstation 0003:054C:0DF2.001E: probe with driver playstation failed with error -22 [ 462.140389][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.178398][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.195475][ T35] bond0 (unregistering): Released all slaves [ 462.219143][ T8] steelseries 0003:1038:1410.001F: item fetching failed at offset 5/7 [ 462.256489][ T8] steelseries 0003:1038:1410.001F: parse failed [ 462.269628][ T8] steelseries 0003:1038:1410.001F: probe with driver steelseries failed with error -22 [ 462.367759][ T5902] usb 3-1: USB disconnect, device number 24 [ 462.445326][ T8] usb 2-1: USB disconnect, device number 29 [ 462.625045][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1731'. [ 462.677124][T11299] binder: 11295:11299 ioctl 4018620d 0 returned -22 [ 462.702380][T11299] binder: 11295:11299 ioctl c0306201 0 returned -14 [ 462.905021][T11312] random: crng reseeded on system resumption [ 462.992981][T11310] syz_tun: entered allmulticast mode [ 463.021437][T11318] fuse: Bad value for 'fd' [ 463.123613][ T5835] Bluetooth: hci1: command tx timeout [ 463.199279][T11268] chnl_net:caif_netlink_parms(): no params data found [ 463.424921][ T35] hsr_slave_0: left promiscuous mode [ 463.437182][ T35] hsr_slave_1: left promiscuous mode [ 463.462702][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.471337][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.493098][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.508541][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.565250][ T35] veth1_macvtap: left promiscuous mode [ 463.592198][ T35] veth0_macvtap: left promiscuous mode [ 463.601303][ T35] veth1_vlan: left promiscuous mode [ 463.623751][ T35] veth0_vlan: left promiscuous mode [ 464.275401][T11312] Restarting kernel threads ... done. [ 464.524936][T11352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.677087][ T35] team0 (unregistering): Port device team_slave_1 removed [ 464.733900][ T35] team0 (unregistering): Port device team_slave_0 removed [ 464.757705][T11356] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 464.823584][T11357] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 465.206559][ T5835] Bluetooth: hci1: command tx timeout [ 465.217870][T11323] lo speed is unknown, defaulting to 1000 [ 465.248289][T11349] gre2: entered promiscuous mode [ 465.341847][T11309] syz_tun: left allmulticast mode [ 465.546015][T11367] binder: 11364:11367 ioctl 4018620d 0 returned -22 [ 465.555167][T11268] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.565476][T11367] binder: 11364:11367 ioctl c0306201 0 returned -14 [ 465.575148][T11268] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.584991][T11363] kvm: emulating exchange as write [ 465.586965][T11268] bridge_slave_0: entered allmulticast mode [ 465.606748][T11268] bridge_slave_0: entered promiscuous mode [ 465.618725][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1743'. [ 465.672156][T11268] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.687762][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.732948][T11268] bridge_slave_1: entered allmulticast mode [ 465.739976][T11268] bridge_slave_1: entered promiscuous mode [ 465.831241][ T5835] block nbd0: Receive control failed (result -107) [ 465.882606][T11268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.959737][T11371] syz.0.1746: attempt to access beyond end of device [ 465.959737][T11371] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 465.973700][T11268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.001416][T11371] syz.0.1746: attempt to access beyond end of device [ 466.001416][T11371] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 466.018020][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 466.046670][T11376] nbd0: detected capacity change from 0 to 8589934592 [ 466.094574][T11371] block nbd0: Dead connection, failed to find a fallback [ 466.130827][T11371] block nbd0: shutting down sockets [ 466.160924][T11268] team0: Port device team_slave_0 added [ 466.191423][T11371] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.206198][T11268] team0: Port device team_slave_1 added [ 466.218741][T11371] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.219135][T11108] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.235328][T11371] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.239461][T11108] Buffer I/O error on dev nbd0, logical block 1, async page read [ 466.299213][T11108] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.301312][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 466.316994][T11108] Buffer I/O error on dev nbd0, logical block 2, async page read [ 466.322126][ T5902] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 466.372333][T11371] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.380884][T11108] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.401994][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 466.406254][T11108] Buffer I/O error on dev nbd0, logical block 3, async page read [ 466.451916][T11371] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.467755][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 466.470219][T11108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.492628][ T5902] usb 5-1: device descriptor read/64, error -71 [ 466.499133][T11268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.507943][T11108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.527425][T11108] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.531782][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.562693][T11108] Buffer I/O error on dev nbd0, logical block 1, async page read [ 466.562842][T11108] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.587263][T11268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.612385][T11108] Buffer I/O error on dev nbd0, logical block 2, async page read [ 466.618497][T11268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.620292][T11108] Buffer I/O error on dev nbd0, logical block 3, async page read [ 466.637446][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.661344][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 466.687727][T11268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.714905][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 466.716957][T11108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 466.742103][ T5902] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 466.758073][T11108] Buffer I/O error on dev nbd0, logical block 1, async page read [ 466.767601][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 466.779106][T11108] ldm_validate_partition_table(): Disk read failed. [ 466.786721][T11108] Dev nbd0: unable to read RDB block 0 [ 466.810119][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 466.814487][T11108] nbd0: unable to read partition table [ 466.843512][T11268] hsr_slave_0: entered promiscuous mode [ 466.858622][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 466.858647][T11268] hsr_slave_1: entered promiscuous mode [ 466.879929][T11108] ldm_validate_partition_table(): Disk read failed. [ 466.886771][ T5902] usb 5-1: device descriptor read/64, error -71 [ 466.896276][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 466.900033][T11108] Dev nbd0: unable to read RDB block 0 [ 466.922926][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 466.922997][T11268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.947801][T11108] nbd0: unable to read partition table [ 466.953106][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 466.960102][T11268] Cannot create hsr debugfs directory [ 466.982895][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 467.002050][ T5902] usb usb5-port1: attempt power cycle [ 467.022317][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 467.040704][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 467.053646][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 467.071388][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 467.106227][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 467.122809][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 467.141499][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 467.157019][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 467.171708][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 467.189987][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 467.210206][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 467.229712][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 467.241692][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 467.262578][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 467.281707][T11371] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 467.281905][ T5835] Bluetooth: hci1: command tx timeout [ 467.327311][T11371] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 467.372376][ T5902] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 467.403641][ T5902] usb 5-1: device descriptor read/8, error -71 [ 467.652232][ T5902] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 467.774507][ T5902] usb 5-1: device descriptor read/8, error -71 [ 467.993506][ T5902] usb usb5-port1: unable to enumerate USB device [ 468.534552][T11417] lo speed is unknown, defaulting to 1000 [ 468.778987][T11268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.800307][T11268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.833223][T11268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.858195][T11268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.965776][T11268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.982301][T11268] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.015126][T11268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.025760][T11268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.056581][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.063851][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.114009][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.121199][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.362127][ T5835] Bluetooth: hci1: command tx timeout [ 469.600299][T11268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.752024][ T5902] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 469.923836][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 469.948433][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.302115][ T5902] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 470.328706][T11268] veth0_vlan: entered promiscuous mode [ 470.334713][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.347459][ T5902] usb 5-1: Product: syz [ 470.351663][ T5902] usb 5-1: Manufacturer: syz [ 470.358588][T11268] veth1_vlan: entered promiscuous mode [ 470.365498][ T5902] usb 5-1: SerialNumber: syz [ 470.375786][ T5902] usb 5-1: config 0 descriptor?? [ 470.384473][ T5902] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 470.439687][T11268] veth0_macvtap: entered promiscuous mode [ 470.865723][T11268] veth1_macvtap: entered promiscuous mode [ 470.888334][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.906084][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.921911][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.932861][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.942864][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.960615][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.970679][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.981931][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.992964][T11268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.002619][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.013244][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.023161][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.041894][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.051820][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.062284][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.072622][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.083350][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.094516][T11268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.155549][T11268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.164396][T11268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.173224][T11268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.182180][T11268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.578923][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1764'. [ 471.650685][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.669775][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.691126][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.710218][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.713338][T11475] binder: 11474:11475 ioctl 4018620d 0 returned -22 [ 472.213730][ T5902] gspca_sunplus: reg_r err -71 [ 472.218594][ T5902] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 472.247382][ T5902] usb 5-1: USB disconnect, device number 29 [ 473.341887][ T5902] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 473.492311][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 473.502775][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 473.510220][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.524108][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.572813][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.601616][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.623555][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 473.631013][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.651831][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.664277][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.678801][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.733584][ T5902] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 473.741307][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.754408][ T5902] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.766222][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.777502][ T5902] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.792320][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 473.798601][ T5902] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 473.809453][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.833567][ T5902] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 474.180473][ T5902] usb 5-1: USB disconnect, device number 30 [ 474.743930][T11566] binder: 11563:11566 ioctl 4018620d 0 returned -22 [ 475.115371][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.129030][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.153722][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.181961][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.203695][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 475.214926][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.282152][ T5835] Bluetooth: hci1: command tx timeout [ 477.360543][ T6076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.398348][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 477.643372][ T6076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.683348][T11574] lo speed is unknown, defaulting to 1000 [ 477.906620][ T6076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.070958][T11613] vivid-001: disconnect [ 478.092621][T11605] vivid-001: reconnect [ 478.123230][ T6076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.572850][T11574] chnl_net:caif_netlink_parms(): no params data found [ 478.839864][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.907562][ T6076] bridge_slave_1: left allmulticast mode [ 478.913828][ T6076] bridge_slave_1: left promiscuous mode [ 478.919997][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.939397][ T6076] bridge_slave_0: left allmulticast mode [ 478.951935][ T6076] bridge_slave_0: left promiscuous mode [ 478.957965][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.397832][ T5835] Bluetooth: hci1: command tx timeout [ 480.237339][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.249367][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.267736][ T6076] bond0 (unregistering): Released all slaves [ 480.411680][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.444803][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.456937][T11574] bridge_slave_0: entered allmulticast mode [ 480.460175][ T12] tipc: Subscription rejected, illegal request [ 480.467355][T11574] bridge_slave_0: entered promiscuous mode [ 480.628326][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.641585][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.665555][T11574] bridge_slave_1: entered allmulticast mode [ 480.674906][T11672] evm: overlay not supported [ 480.678381][T11574] bridge_slave_1: entered promiscuous mode [ 480.841124][ T29] audit: type=1326 audit(480.787:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 480.862704][ T29] audit: type=1326 audit(480.787:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 480.884642][ T29] audit: type=1326 audit(480.787:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 480.923061][ T29] audit: type=1326 audit(480.787:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 480.990396][ T29] audit: type=1326 audit(480.867:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 481.018993][ T29] audit: type=1326 audit(480.867:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 481.115636][ T29] audit: type=1326 audit(480.867:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 481.169260][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.192258][ T29] audit: type=1326 audit(480.867:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11677 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde31185d19 code=0x7ffc0000 [ 481.280278][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.452686][ T5835] Bluetooth: hci1: command tx timeout [ 481.461861][ T974] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 481.558441][T11574] team0: Port device team_slave_0 added [ 481.566704][T11574] team0: Port device team_slave_1 added [ 481.697147][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 481.709425][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.721146][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.738266][ T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.758540][ T974] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.767913][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.794814][ T974] usb 5-1: config 0 descriptor?? [ 481.900443][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 482.070675][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 482.077540][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 482.089627][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 482.099658][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.120702][ T8] usb 2-1: Product: syz [ 482.126421][ T8] usb 2-1: Manufacturer: syz [ 482.131057][ T8] usb 2-1: SerialNumber: syz [ 482.142753][ T8] usb 2-1: config 0 descriptor?? [ 482.163168][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 482.243867][ T974] HID 045e:07da: Invalid code 65791 type 1 [ 482.254564][ T974] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0020/input/input39 [ 482.274142][ T974] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 482.483450][ T974] usb 5-1: USB disconnect, device number 31 [ 483.526535][ T5835] Bluetooth: hci1: command tx timeout [ 484.070700][ T8] gspca_zc3xx: reg_w_i err -71 [ 484.692774][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 484.699274][ T8] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 484.719187][ T8] usb 2-1: USB disconnect, device number 30 [ 485.136720][ T95] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 485.314476][ T95] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.326472][ T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 485.337740][ T6076] hsr_slave_0: left promiscuous mode [ 485.337940][ T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 485.353189][ T6076] hsr_slave_1: left promiscuous mode [ 485.353216][ T95] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.371669][ T95] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.385788][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.393425][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.393491][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.414690][ T95] usb 2-1: config 0 descriptor?? [ 485.421050][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.429048][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.529065][ T6076] veth1_macvtap: left promiscuous mode [ 485.545618][ T6076] veth0_macvtap: left promiscuous mode [ 485.552642][ T6076] veth1_vlan: left promiscuous mode [ 485.558198][ T6076] veth0_vlan: left promiscuous mode [ 485.580632][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 485.850017][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.871276][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.881122][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.888967][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.911018][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.931995][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.945008][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.952552][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.960016][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.973023][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.985121][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 485.995403][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 486.003396][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 486.010915][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 486.018545][ T95] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 486.027164][ T95] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 486.049018][ T95] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 486.301207][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 486.354074][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 486.872073][T11703] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1814'. [ 486.885314][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.901990][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.941950][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.955915][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.964042][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.990422][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.317793][T11743] syzkaller0: entered promiscuous mode [ 487.323839][T11743] syzkaller0: entered allmulticast mode [ 487.347245][T11574] hsr_slave_0: entered promiscuous mode [ 487.356339][T11574] hsr_slave_1: entered promiscuous mode [ 487.369789][T11574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.377714][T11574] Cannot create hsr debugfs directory [ 487.442306][ T95] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 487.501898][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 487.612102][ T95] usb 1-1: Using ep0 maxpacket: 16 [ 487.619532][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.631235][ T95] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 487.656551][ T95] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.666676][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.675959][ T8] usb 5-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 487.688909][ T95] usb 1-1: config 0 descriptor?? [ 487.695534][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.708809][ T95] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 487.718113][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.741855][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.749903][ T8] usb 5-1: SerialNumber: syz [ 487.999000][ T8] usb 5-1: 0:2 : does not exist [ 488.019411][ T8] usb 5-1: unit 255 not found! [ 488.029460][ T974] usb 1-1: USB disconnect, device number 30 [ 488.034651][ T8] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 488.078798][ T8] usb 5-1: USB disconnect, device number 32 [ 488.882230][T11108] udevd[11108]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.927104][ T5902] usb 2-1: USB disconnect, device number 31 [ 489.321857][ T974] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 489.414770][ T5902] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 489.473810][ T974] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 489.485147][ T974] usb 5-1: config 1 interface 0 has no altsetting 0 [ 489.499882][ T974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 489.510098][ T974] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 489.518781][ T974] usb 5-1: Product: syz [ 489.523720][ T974] usb 5-1: Manufacturer: syz [ 489.528434][ T974] usb 5-1: SerialNumber: syz [ 489.578514][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 489.592262][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.621930][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.637055][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.658872][ T5902] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 489.668565][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.697106][ T5902] usb 2-1: config 0 descriptor?? [ 490.157804][ T5902] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 490.165426][ T5902] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 490.173036][ T5902] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 490.180211][ T5902] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 490.187969][ T5902] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 490.200736][ T5835] Bluetooth: hci2: unexpected event 0x10 length: 6 > 1 [ 490.203184][ T5833] Bluetooth: hci2: hardware error 0x00 [ 490.204252][ T5902] nintendo 0003:057E:2009.0022: hidraw0: USB HID vff.fe Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 490.229020][ T974] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 490.347429][ T5902] nintendo 0003:057E:2009.0022: Failed to get joycon info; ret=-38 [ 490.357630][ T5902] nintendo 0003:057E:2009.0022: Failed to retrieve controller info; ret=-38 [ 490.366979][ T5902] nintendo 0003:057E:2009.0022: Failed to initialize controller; ret=-38 [ 490.401127][ T5902] nintendo 0003:057E:2009.0022: probe - fail = -38 [ 490.429568][ T5902] nintendo 0003:057E:2009.0022: probe with driver nintendo failed with error -38 [ 490.449965][ T5902] usb 2-1: USB disconnect, device number 32 [ 492.042137][ C0] usblp0: nonzero write bulk status received: -71 [ 492.051420][ T5823] usb 5-1: USB disconnect, device number 33 [ 492.072389][ T5823] usblp0: removed [ 492.242024][ T5833] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 493.835466][T11574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.898013][T11574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.973602][T11574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 494.008837][T11574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.050120][T11845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 494.362635][T11817] cgroup: fork rejected by pids controller in /syz1 [ 494.404907][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.423806][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.436298][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.443487][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.516479][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.523668][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.760132][T11574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.801910][T11574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.592191][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 496.231895][ T974] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 496.379827][T11574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.427875][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.456625][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.492740][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.531195][ T974] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 496.543612][T11574] veth0_vlan: entered promiscuous mode [ 496.565710][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.576192][T11574] veth1_vlan: entered promiscuous mode [ 496.597171][ T974] usb 1-1: config 0 descriptor?? [ 496.683249][T11574] veth0_macvtap: entered promiscuous mode [ 496.706104][T11925] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 496.729185][T11574] veth1_macvtap: entered promiscuous mode [ 496.785102][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.830398][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.851820][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.878338][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.901803][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.922279][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.944260][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.966747][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.004675][T11574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.042924][ T974] gt683r_led 0003:1770:FF00.0023: item fetching failed at offset 1/5 [ 497.070545][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.079944][ T974] gt683r_led 0003:1770:FF00.0023: hid parsing failed [ 497.101877][ T974] gt683r_led 0003:1770:FF00.0023: probe with driver gt683r_led failed with error -22 [ 497.136565][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.171976][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.210680][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.258090][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.277582][ T8] usb 1-1: USB disconnect, device number 31 [ 497.299366][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.326591][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.363142][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.414026][T11574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.434174][T11574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.446717][T11574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.469436][T11574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.490184][T11574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.661165][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.771848][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.335848][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.351889][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.385007][T11961] binder: BINDER_SET_CONTEXT_MGR already set [ 498.391665][T11961] binder: 11959:11961 ioctl 4018620d 200001c0 returned -16 [ 499.278350][T11966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.306282][ T5872] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 499.491963][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 499.499460][ T5872] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 499.509315][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.240649][ T5872] usb 3-1: config 0 descriptor?? [ 500.358102][ T6087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.579942][ T6087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.677209][ T6087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.733676][ T6087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.859843][ T6087] bridge_slave_1: left allmulticast mode [ 500.868877][ T6087] bridge_slave_1: left promiscuous mode [ 500.877634][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.886850][ T6087] bridge_slave_0: left allmulticast mode [ 500.893002][ T6087] bridge_slave_0: left promiscuous mode [ 500.898693][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.432278][ T5823] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 501.566872][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.570690][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.586101][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.593313][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.595047][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 501.603645][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.620280][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.626732][ T5823] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 501.629868][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.646814][ T6087] bond0 (unregistering): Released all slaves [ 501.652243][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.668227][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.676887][ T5823] usb 2-1: Product: syz [ 501.681274][ T5823] usb 2-1: Manufacturer: syz [ 501.707401][ T5823] usb 2-1: SerialNumber: syz [ 501.726659][ T5823] usb 2-1: config 0 descriptor?? [ 501.736859][T12002] syzkaller0: entered promiscuous mode [ 501.762525][T12002] syzkaller0: entered allmulticast mode [ 501.800017][T12008] lo speed is unknown, defaulting to 1000 [ 501.855566][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.967355][ T5823] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 502.372793][ T5872] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 502.383456][ T5872] asix 3-1:0.0: probe with driver asix failed with error -71 [ 502.417848][ T5872] usb 3-1: USB disconnect, device number 25 [ 503.459049][ T5823] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 503.485328][ T5823] usb 2-1: USB disconnect, device number 33 [ 503.682633][ T5835] Bluetooth: hci1: command tx timeout [ 505.472265][ T5872] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 505.642807][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.665844][ T5872] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 505.684355][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.718049][ T5872] usb 3-1: config 0 descriptor?? [ 505.748566][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 505.769099][ T5835] Bluetooth: hci1: command tx timeout [ 506.146525][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 506.154228][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 506.162091][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 506.170030][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 506.178785][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 506.186708][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 506.194304][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 506.422252][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 506.433805][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 506.447620][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 506.467859][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 506.518752][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 506.649879][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 506.791445][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 506.875750][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 507.253064][ T5872] pwc: Registered as video103. [ 507.282364][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 507.418811][ T5872] usb 3-1: USB disconnect, device number 26 [ 507.541610][T12101] ALSA: seq fatal error: cannot create timer (-22) [ 507.563650][ T6087] hsr_slave_0: left promiscuous mode [ 507.598803][T12101] ALSA: seq fatal error: cannot create timer (-22) [ 507.616107][ T6087] hsr_slave_1: left promiscuous mode [ 507.658700][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.676313][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.691283][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.699285][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.839520][ T6087] veth1_macvtap: left promiscuous mode [ 507.841943][ T5835] Bluetooth: hci1: command tx timeout [ 507.857526][ T6087] veth0_macvtap: left promiscuous mode [ 507.998758][ T6087] veth1_vlan: left promiscuous mode [ 508.140810][ T6087] veth0_vlan: left promiscuous mode [ 509.372593][ T5823] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 509.496331][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 509.573366][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 509.587791][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.626450][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.646630][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.660150][ T5823] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 509.669986][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.670139][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 509.693373][ T5823] usb 3-1: config 0 descriptor?? [ 509.927605][ T5835] Bluetooth: hci1: command tx timeout [ 510.132330][ T5823] nintendo 0003:057E:2009.0024: unknown main item tag 0x0 [ 510.139702][ T5823] nintendo 0003:057E:2009.0024: unknown main item tag 0x0 [ 510.148883][ T5823] nintendo 0003:057E:2009.0024: unknown main item tag 0x0 [ 510.156897][ T5823] nintendo 0003:057E:2009.0024: unknown main item tag 0x0 [ 510.165075][ T5823] nintendo 0003:057E:2009.0024: unknown main item tag 0x0 [ 510.177045][ T5823] nintendo 0003:057E:2009.0024: hidraw0: USB HID vff.fe Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 510.255831][ T5823] nintendo 0003:057E:2009.0024: Failed to get joycon info; ret=-38 [ 510.266419][ T5823] nintendo 0003:057E:2009.0024: Failed to retrieve controller info; ret=-38 [ 510.275953][ T5823] nintendo 0003:057E:2009.0024: Failed to initialize controller; ret=-38 [ 510.312555][ T5823] nintendo 0003:057E:2009.0024: probe - fail = -38 [ 510.332455][ T5823] nintendo 0003:057E:2009.0024: probe with driver nintendo failed with error -38 [ 510.352731][ T5823] usb 3-1: USB disconnect, device number 27 [ 510.598910][T12149] syzkaller0: entered promiscuous mode [ 510.608933][T12149] syzkaller0: entered allmulticast mode [ 510.805820][ T974] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 510.972249][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 510.997179][ T974] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 511.008080][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.027402][ T974] usb 1-1: Product: syz [ 511.031620][ T974] usb 1-1: Manufacturer: syz [ 511.047070][ T974] usb 1-1: SerialNumber: syz [ 511.053940][ T974] usb 1-1: config 0 descriptor?? [ 511.074254][ T974] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 511.920811][T12169] block nbd2: shutting down sockets [ 512.223775][T12172] kvm: pic: non byte read [ 512.228595][T12172] kvm: pic: non byte read [ 512.539854][ T974] gspca_ov534_9: sccb_write failed [ 513.179820][ T974] gspca_ov534_9: reg_r err -71 [ 513.391945][ T974] gspca_ov534_9: Unknown sensor 0000 [ 513.392033][ T974] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 513.409258][ T974] usb 1-1: USB disconnect, device number 32 [ 514.038888][T12008] chnl_net:caif_netlink_parms(): no params data found [ 514.060765][T12147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 514.070780][T12147] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 514.407948][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.415747][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.423176][T12008] bridge_slave_0: entered allmulticast mode [ 514.430360][T12008] bridge_slave_0: entered promiscuous mode [ 514.448904][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.456326][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.464777][T12008] bridge_slave_1: entered allmulticast mode [ 514.476235][T12008] bridge_slave_1: entered promiscuous mode [ 514.580401][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.603808][T12198] pim6reg1: entered promiscuous mode [ 514.609209][T12198] pim6reg1: entered allmulticast mode [ 514.622755][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.632128][ T5823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 514.688067][T12147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.700922][T12008] team0: Port device team_slave_0 added [ 514.701902][T12147] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 514.711192][T12008] team0: Port device team_slave_1 added [ 514.809604][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 514.826596][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.839810][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.855319][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.882736][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.897101][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.914330][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.929952][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.941488][ T5823] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 515.001805][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.010110][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.021988][ T5823] usb 2-1: Product: syz [ 515.036424][ T5823] usb 2-1: Manufacturer: syz [ 515.046547][ T5823] usb 2-1: SerialNumber: syz [ 515.071888][ T5823] usb 2-1: config 0 descriptor?? [ 515.100223][ T5823] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 515.114373][ T5823] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 515.146997][T12008] hsr_slave_0: entered promiscuous mode [ 515.163359][T12008] hsr_slave_1: entered promiscuous mode [ 515.171876][T12008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.191195][T12008] Cannot create hsr debugfs directory [ 515.758795][ T5823] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 515.795190][ T5823] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 515.814105][T12225] binder: 12224:12225 ioctl c018620c 0 returned -14 [ 516.005818][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.020497][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.031094][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.040131][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.051321][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.060920][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.079904][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.091999][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.100746][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.109525][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.124389][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.140071][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.284014][T12230] lo speed is unknown, defaulting to 1000 [ 516.495534][T12008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.508149][T12008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.533472][T12008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.558454][T12008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.829235][ T5823] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 516.835063][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 516.837343][ T5823] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 516.852967][ T5823] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 516.861027][ T5823] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 516.875943][ T5823] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 516.890856][T12008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.899834][ T5823] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 516.920640][T12254] vlan2: entered promiscuous mode [ 516.926195][ T5823] usb 2-1: USB disconnect, device number 34 [ 516.937247][T12254] syz_tun: entered promiscuous mode [ 516.963083][T12230] chnl_net:caif_netlink_parms(): no params data found [ 517.010813][T12008] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.098946][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.106079][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.175833][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.182946][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.197921][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.222538][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.229764][T12230] bridge_slave_0: entered allmulticast mode [ 517.242929][T12230] bridge_slave_0: entered promiscuous mode [ 517.262981][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.270119][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.278076][T12230] bridge_slave_1: entered allmulticast mode [ 517.285429][T12230] bridge_slave_1: entered promiscuous mode [ 517.361016][T12230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.374282][T12230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.432702][T12230] team0: Port device team_slave_0 added [ 517.446286][T12230] team0: Port device team_slave_1 added [ 517.516807][T12230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.531541][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.581030][T12230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.596273][T12230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.605465][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.643268][T12230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.762772][T12230] hsr_slave_0: entered promiscuous mode [ 517.775227][T12230] hsr_slave_1: entered promiscuous mode [ 517.781612][T12230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.791303][T12230] Cannot create hsr debugfs directory [ 517.821906][ T5872] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 517.973174][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.982028][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 517.998398][ T5872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.034103][ T5872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.060802][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.083817][ T5872] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 518.098788][ T5872] usb 5-1: Product: syz [ 518.103984][ T5872] usb 5-1: Manufacturer: syz [ 518.140861][ T5872] hub 5-1:4.0: USB hub found [ 518.219435][T12008] veth0_vlan: entered promiscuous mode [ 518.242346][ T5835] Bluetooth: hci0: command tx timeout [ 518.289716][T12008] veth1_vlan: entered promiscuous mode [ 518.299911][T12230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 518.317370][T12230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 518.348100][ T5872] hub 5-1:4.0: 2 ports detected [ 518.368835][T12230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 518.390727][T12230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 518.431161][T12008] veth0_macvtap: entered promiscuous mode [ 518.453535][T12008] veth1_macvtap: entered promiscuous mode [ 518.515996][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.527173][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.538400][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.582188][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.595740][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.608119][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.619711][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.631236][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.644983][T12008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.697780][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.801793][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.866859][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.960247][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.099382][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.248813][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.371121][T12008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.451745][T12008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.475592][T12008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.559207][T12008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.575519][T12008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.588120][T12008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.611931][T12008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.639991][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.653833][T12308] bond0: (slave rose0): Enslaving as an active interface with an up link [ 519.795739][T12230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.829851][ T5872] hub 5-1:4.0: activate --> -90 [ 519.855490][T12230] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.910095][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.917286][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.952198][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.953988][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.960089][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.974560][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.112267][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.120140][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.306020][ T5874] usb 5-1: USB disconnect, device number 34 [ 520.333448][ T5835] Bluetooth: hci0: command tx timeout [ 520.446749][T12230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.728800][ T3555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.004894][ T3555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.117247][ T3555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.176719][T12230] veth0_vlan: entered promiscuous mode [ 521.221815][ T3555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.251663][T12230] veth1_vlan: entered promiscuous mode [ 521.307183][T12230] veth0_macvtap: entered promiscuous mode [ 521.341389][T12230] veth1_macvtap: entered promiscuous mode [ 521.475061][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.494188][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.509828][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.520658][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.531355][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.542311][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.552455][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.566197][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.580145][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.591457][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.603038][T12230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.622846][ T3555] bridge_slave_1: left allmulticast mode [ 521.631469][ T3555] bridge_slave_1: left promiscuous mode [ 521.646707][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.660822][ T3555] bridge_slave_0: left allmulticast mode [ 521.673678][ T3555] bridge_slave_0: left promiscuous mode [ 521.679438][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.417745][ T5835] Bluetooth: hci0: command tx timeout [ 522.774778][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 522.785362][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.676110][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.701576][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.742185][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 523.751035][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.489588][ T5833] Bluetooth: hci0: command tx timeout [ 524.868699][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.880735][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.894325][ T3555] bond0 (unregistering): Released all slaves [ 524.965155][T12396] lo speed is unknown, defaulting to 1000 [ 525.086814][T12429] lo speed is unknown, defaulting to 1000 [ 525.140960][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.163104][T12433] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 525.179844][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.203679][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 525.221807][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.258516][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.279456][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.301808][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.328820][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.352555][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.372138][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.383176][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.442910][T12230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.465669][T12230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.495155][T12230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.512395][T12230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.521143][T12230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.865048][ T5833] Bluetooth: hci1: command tx timeout [ 526.671156][T12463] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 527.223086][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.250802][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.384973][T12396] chnl_net:caif_netlink_parms(): no params data found [ 527.486056][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.526713][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.566924][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.575097][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.582426][T12396] bridge_slave_0: entered allmulticast mode [ 527.592730][T12396] bridge_slave_0: entered promiscuous mode [ 527.613387][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.620511][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.652268][T12396] bridge_slave_1: entered allmulticast mode [ 527.702979][T12396] bridge_slave_1: entered promiscuous mode [ 528.018920][ T5833] Bluetooth: hci1: command tx timeout [ 528.155253][ T3555] hsr_slave_0: left promiscuous mode [ 528.191902][ T3555] hsr_slave_1: left promiscuous mode [ 528.224544][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.259138][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.317528][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.349204][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.454237][ T3555] veth1_macvtap: left promiscuous mode [ 528.459828][ T3555] veth0_macvtap: left promiscuous mode [ 528.469269][T12509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 528.492563][ T3555] veth1_vlan: left promiscuous mode [ 528.497892][ T3555] veth0_vlan: left promiscuous mode [ 528.499527][T12509] overlayfs: failed to set xattr on upper [ 528.529759][T12509] overlayfs: ...falling back to redirect_dir=nofollow. [ 528.547006][T12509] overlayfs: ...falling back to index=off. [ 528.961110][ T29] audit: type=1804 audit(528.917:216): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1973" name="/newroot/446/bus/bus" dev="overlay" ino=2326 res=1 errno=0 [ 528.994212][T12524] Invalid ELF header magic: != ELF [ 529.776304][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 529.838919][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 530.093509][ T5833] Bluetooth: hci1: command tx timeout [ 530.378113][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.394771][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.806439][T12396] team0: Port device team_slave_0 added [ 530.819375][T12396] team0: Port device team_slave_1 added [ 530.945882][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.953496][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.020025][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.041304][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.061799][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.138327][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.106998][T12396] hsr_slave_0: entered promiscuous mode [ 532.124900][T12396] hsr_slave_1: entered promiscuous mode [ 532.133066][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.161247][T12396] Cannot create hsr debugfs directory [ 532.171879][ T5833] Bluetooth: hci1: command tx timeout [ 533.652020][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 534.083954][ T9] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 534.283575][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 534.355006][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 534.381957][T12396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 534.441812][ T9] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 534.449005][T12396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 534.457297][ T9] usb 6-1: Product: syz [ 534.479093][ T9] usb 6-1: Manufacturer: syz [ 534.497762][ T9] usb 6-1: SerialNumber: syz [ 534.500004][T12396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 534.602391][T12396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 534.798817][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.822867][ T5872] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 534.854396][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.871585][T12626] bridge_slave_0: left allmulticast mode [ 534.881526][T12626] bridge_slave_0: left promiscuous mode [ 534.898025][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.912027][T12626] bridge_slave_1: left allmulticast mode [ 534.917779][T12626] bridge_slave_1: left promiscuous mode [ 534.932314][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.954427][T12626] bond0: (slave bond_slave_0): Releasing backup interface [ 534.976003][T12626] bond0: (slave bond_slave_1): Releasing backup interface [ 534.985649][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.995351][ T5872] usb 5-1: not running at top speed; connect to a high speed hub [ 535.005514][ T5872] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 535.014879][ T5872] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 535.024862][ T5872] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 535.039171][ T5872] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 535.043636][T12626] team0: Port device team_slave_0 removed [ 535.058817][ T5872] usb 5-1: config 129 has no interface number 0 [ 535.065774][ T5872] usb 5-1: config 129 has no interface number 1 [ 535.066961][T12626] bond2: (slave team_slave_1): Releasing active interface [ 535.073182][ T5872] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 535.094264][ T5872] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 535.105996][ T5872] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 535.110058][T12626] team_slave_1: left promiscuous mode [ 535.133639][ T5872] usb 5-1: config 129 interface 135 has no altsetting 0 [ 535.140666][ T5872] usb 5-1: config 129 interface 5 has no altsetting 0 [ 535.152702][ T5872] usb 5-1: string descriptor 0 read error: -22 [ 535.159571][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 535.159715][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 535.169903][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.181878][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.205259][T12626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.219898][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.224238][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.234945][T12626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.245693][ T5872] usb 5-1: MIDIStreaming interface descriptor not found [ 535.432539][ T5902] usb 5-1: USB disconnect, device number 35 [ 535.446328][T12629] team0: Port device wg2 added [ 535.475911][ C1] usblp0: nonzero write bulk status received: -71 [ 535.478927][ T95] usb 6-1: USB disconnect, device number 2 [ 535.577458][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.584682][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.605967][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.613149][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.680256][T12595] usblp0: removed [ 535.694871][ T29] audit: type=1804 audit(535.647:217): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1993" name="/newroot/422/bus/file1" dev="overlay" ino=2246 res=1 errno=0 [ 535.928512][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.984825][T12658] orangefs_devreq_open: device cannot be opened in blocking mode [ 536.007376][T12396] veth0_vlan: entered promiscuous mode [ 536.058442][T12396] veth1_vlan: entered promiscuous mode [ 536.133578][T12396] veth0_macvtap: entered promiscuous mode [ 536.150345][T12396] veth1_macvtap: entered promiscuous mode [ 536.169347][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.321639][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.394096][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.417628][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.441850][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.454570][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.464546][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.510743][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.614658][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.726109][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.747267][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.757419][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.768095][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.778153][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.788881][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.799089][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.836209][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.859966][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.997134][T12396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.062249][T12396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.119155][T12396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.128735][T12396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.251248][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1998'. [ 537.276030][T12682] binder: 12681:12682 ioctl 4018620d 0 returned -22 [ 538.197027][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.205183][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.206836][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.220390][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.456711][T12707] kvm: pic: non byte read [ 538.530129][T12702] pim6reg1: entered promiscuous mode [ 538.554373][T12702] pim6reg1: entered allmulticast mode [ 538.819934][T12724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2007'. [ 538.849433][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 539.739845][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.936042][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.155881][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.229406][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.340921][ T1106] bridge_slave_1: left allmulticast mode [ 540.347068][ T1106] bridge_slave_1: left promiscuous mode [ 540.355461][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.364948][ T1106] bridge_slave_0: left allmulticast mode [ 540.370614][ T1106] bridge_slave_0: left promiscuous mode [ 540.378123][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.704452][T12744] binder: 12738:12744 ioctl 4018620d 0 returned -22 [ 541.046325][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.090499][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.098340][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.122089][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.130172][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.138283][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 541.145921][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.188119][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.224662][ T1106] bond0 (unregistering): Released all slaves [ 541.254857][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2011'. [ 541.302348][T12761] binder: 12760:12761 ioctl c0306201 20000680 returned -14 [ 541.384564][T12745] syzkaller0: entered promiscuous mode [ 541.401888][T12745] syzkaller0: entered allmulticast mode [ 543.233639][ T5833] Bluetooth: hci1: command tx timeout [ 543.639566][T12801] binder: 12799:12801 ioctl 4018620d 0 returned -22 [ 544.246263][T12808] overlayfs: statfs failed on './file0' [ 545.289457][ T5833] Bluetooth: hci1: command tx timeout [ 545.657715][ T95] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 545.831841][ T95] usb 5-1: Using ep0 maxpacket: 16 [ 545.838911][ T95] usb 5-1: config 0 has no interfaces? [ 545.853586][T12754] lo speed is unknown, defaulting to 1000 [ 545.877365][ T95] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 545.890351][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.902357][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2026'. [ 545.902553][ T95] usb 5-1: Product: syz [ 545.924210][ T95] usb 5-1: Manufacturer: syz [ 545.929377][ T95] usb 5-1: SerialNumber: syz [ 545.978071][ T95] usb 5-1: config 0 descriptor?? [ 547.023932][ T95] usb 5-1: USB disconnect, device number 36 [ 547.066981][T12837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 547.362040][ T5833] Bluetooth: hci1: command tx timeout [ 547.397933][ T1106] hsr_slave_0: left promiscuous mode [ 547.461375][ T1106] hsr_slave_1: left promiscuous mode [ 547.482707][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.490232][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.506682][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.517210][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.621418][ T1106] veth1_macvtap: left promiscuous mode [ 547.627178][ T1106] veth0_macvtap: left promiscuous mode [ 547.632914][ T1106] veth1_vlan: left promiscuous mode [ 547.638275][ T1106] veth0_vlan: left promiscuous mode [ 548.116264][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 548.323708][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.367014][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.384442][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 548.394446][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.407672][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.416921][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.428793][ T9] usb 2-1: config 0 descriptor?? [ 548.848001][ T9] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 548.883147][ T9] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 548.910059][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 549.169600][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 549.230983][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 549.451909][ T5833] Bluetooth: hci1: command tx timeout [ 550.011802][T12754] chnl_net:caif_netlink_parms(): no params data found [ 550.086816][ T95] usb 2-1: USB disconnect, device number 35 [ 550.272351][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.279818][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.302319][T12754] bridge_slave_0: entered allmulticast mode [ 550.323722][T12754] bridge_slave_0: entered promiscuous mode [ 550.353054][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.360490][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.375864][T12754] bridge_slave_1: entered allmulticast mode [ 550.400033][T12754] bridge_slave_1: entered promiscuous mode [ 550.442154][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 550.506994][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.533369][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.615238][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 550.620634][T12754] team0: Port device team_slave_0 added [ 550.630406][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.653556][T12754] team0: Port device team_slave_1 added [ 550.660590][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.671472][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.705163][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.768124][ T9] usb 5-1: config 0 descriptor?? [ 550.797884][ T9] hub 5-1:0.0: USB hub found [ 550.810627][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.817902][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.844217][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.856973][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.867654][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.893824][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.019133][T12926] binder: 12925:12926 ioctl c0306201 20000680 returned -14 [ 551.050205][ T9] hub 5-1:0.0: 1 port detected [ 551.150819][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 551.211262][T12754] hsr_slave_0: entered promiscuous mode [ 551.224969][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2057'. [ 551.225013][T12754] hsr_slave_1: entered promiscuous mode [ 551.264544][T12928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2057'. [ 551.285322][T12754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.311432][T12754] Cannot create hsr debugfs directory [ 551.360035][ T5833] block nbd0: Receive control failed (result -107) [ 551.392530][T12928] [ 551.394903][T12928] ====================================================== [ 551.401927][T12928] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.408937][T12928] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted [ 551.416033][T12928] ------------------------------------------------------ [ 551.423052][T12928] syz.5.2057/12928 is trying to acquire lock: [ 551.429130][T12928] ffff888143b72450 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2e0/0x8f0 [ 551.438136][T12928] [ 551.438136][T12928] but task is already holding lock: [ 551.445515][T12928] ffff888143b71e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 551.455398][T12928] [ 551.455398][T12928] which lock already depends on the new lock. [ 551.455398][T12928] [ 551.465812][T12928] [ 551.465812][T12928] the existing dependency chain (in reverse order) is: [ 551.474840][T12928] [ 551.474840][T12928] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 551.483482][T12928] lock_acquire+0x1ed/0x550 [ 551.488525][T12928] blk_mq_submit_bio+0x1536/0x2390 [ 551.494177][T12928] __submit_bio+0x2c6/0x560 [ 551.499221][T12928] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 551.505481][T12928] mpage_readahead+0x630/0x780 [ 551.510782][T12928] read_pages+0x176/0x750 [ 551.515652][T12928] page_cache_ra_unbounded+0x606/0x720 [ 551.521654][T12928] page_cache_sync_ra+0x3c5/0xad0 [ 551.527214][T12928] filemap_get_pages+0x605/0x2080 [ 551.532778][T12928] filemap_read+0x452/0xf50 [ 551.537825][T12928] blkdev_read_iter+0x2d8/0x430 [ 551.543209][T12928] vfs_read+0x991/0xb70 [ 551.547903][T12928] ksys_read+0x18f/0x2b0 [ 551.552685][T12928] do_syscall_64+0xf3/0x230 [ 551.557725][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.564156][T12928] [ 551.564156][T12928] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 551.572702][T12928] lock_acquire+0x1ed/0x550 [ 551.577741][T12928] down_read+0xb1/0xa40 [ 551.582433][T12928] page_cache_ra_unbounded+0x142/0x720 [ 551.588429][T12928] do_sync_mmap_readahead+0x499/0x970 [ 551.594333][T12928] filemap_fault+0x8a9/0x1490 [ 551.599541][T12928] __do_fault+0x135/0x390 [ 551.604408][T12928] handle_pte_fault+0x39eb/0x5ed0 [ 551.609973][T12928] handle_mm_fault+0x1053/0x1ad0 [ 551.615528][T12928] __get_user_pages+0x1c82/0x49e0 [ 551.621091][T12928] get_user_pages_unlocked+0x2a8/0x9d0 [ 551.627091][T12928] hva_to_pfn+0x445/0xfe0 [ 551.631961][T12928] __kvm_faultin_pfn+0x497/0x580 [ 551.637445][T12928] kvm_mmu_faultin_pfn+0x6c3/0x1580 [ 551.643189][T12928] kvm_tdp_page_fault+0x215/0x300 [ 551.648758][T12928] kvm_mmu_do_page_fault+0x583/0xca0 [ 551.654586][T12928] kvm_mmu_page_fault+0x2db/0xc30 [ 551.660157][T12928] vmx_handle_exit+0x10e4/0x1e90 [ 551.665637][T12928] vcpu_run+0x586a/0x8a90 [ 551.670483][T12928] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 551.676562][T12928] kvm_vcpu_ioctl+0x920/0xea0 [ 551.681756][T12928] __se_sys_ioctl+0xf5/0x170 [ 551.686870][T12928] do_syscall_64+0xf3/0x230 [ 551.691888][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.698315][T12928] [ 551.698315][T12928] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 551.705861][T12928] lock_acquire+0x1ed/0x550 [ 551.710867][T12928] __might_fault+0xc6/0x120 [ 551.715881][T12928] _copy_from_user+0x2a/0xc0 [ 551.720983][T12928] blk_trace_ioctl+0x1ad/0x9a0 [ 551.726249][T12928] blkdev_ioctl+0x40c/0x6a0 [ 551.731254][T12928] __se_sys_ioctl+0xf5/0x170 [ 551.736349][T12928] do_syscall_64+0xf3/0x230 [ 551.741361][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.747769][T12928] [ 551.747769][T12928] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 551.755575][T12928] lock_acquire+0x1ed/0x550 [ 551.760582][T12928] __mutex_lock+0x1ac/0xee0 [ 551.765605][T12928] blk_mq_init_sched+0x3fa/0x830 [ 551.771063][T12928] elevator_init_mq+0x20e/0x320 [ 551.776421][T12928] add_disk_fwnode+0x10d/0xf80 [ 551.781693][T12928] sd_probe+0xba6/0x1100 [ 551.786449][T12928] really_probe+0x2b8/0xad0 [ 551.791451][T12928] __driver_probe_device+0x1a2/0x390 [ 551.797238][T12928] driver_probe_device+0x50/0x430 [ 551.802769][T12928] __device_attach_driver+0x2d6/0x530 [ 551.808642][T12928] bus_for_each_drv+0x24e/0x2e0 [ 551.813997][T12928] __device_attach_async_helper+0x22d/0x300 [ 551.820391][T12928] async_run_entry_fn+0xa8/0x420 [ 551.825836][T12928] process_scheduled_works+0xa66/0x1840 [ 551.831897][T12928] worker_thread+0x870/0xd30 [ 551.837011][T12928] kthread+0x2f0/0x390 [ 551.841594][T12928] ret_from_fork+0x4b/0x80 [ 551.846510][T12928] ret_from_fork_asm+0x1a/0x30 [ 551.851789][T12928] [ 551.851789][T12928] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 551.860681][T12928] lock_acquire+0x1ed/0x550 [ 551.865697][T12928] blk_queue_enter+0xe1/0x600 [ 551.870884][T12928] blk_mq_alloc_request+0x4fa/0xaa0 [ 551.876599][T12928] scsi_execute_cmd+0x177/0x1090 [ 551.882045][T12928] read_capacity_16+0x2b4/0x1450 [ 551.887488][T12928] sd_revalidate_disk+0x1013/0xbce0 [ 551.893197][T12928] sd_probe+0x9fa/0x1100 [ 551.897959][T12928] really_probe+0x2b8/0xad0 [ 551.902972][T12928] __driver_probe_device+0x1a2/0x390 [ 551.908755][T12928] driver_probe_device+0x50/0x430 [ 551.914281][T12928] __device_attach_driver+0x2d6/0x530 [ 551.920153][T12928] bus_for_each_drv+0x24e/0x2e0 [ 551.925522][T12928] __device_attach_async_helper+0x22d/0x300 [ 551.931928][T12928] async_run_entry_fn+0xa8/0x420 [ 551.937408][T12928] process_scheduled_works+0xa66/0x1840 [ 551.943466][T12928] worker_thread+0x870/0xd30 [ 551.948555][T12928] kthread+0x2f0/0x390 [ 551.953132][T12928] ret_from_fork+0x4b/0x80 [ 551.958074][T12928] ret_from_fork_asm+0x1a/0x30 [ 551.963364][T12928] [ 551.963364][T12928] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 551.970994][T12928] validate_chain+0x18ef/0x5920 [ 551.976356][T12928] __lock_acquire+0x1397/0x2100 [ 551.981720][T12928] lock_acquire+0x1ed/0x550 [ 551.986736][T12928] __mutex_lock+0x1ac/0xee0 [ 551.991751][T12928] nbd_set_size+0x2e0/0x8f0 [ 551.996779][T12928] nbd_genl_connect+0x157c/0x1c80 [ 552.002318][T12928] genl_rcv_msg+0xb14/0xec0 [ 552.007363][T12928] netlink_rcv_skb+0x1e3/0x430 [ 552.012645][T12928] genl_rcv+0x28/0x40 [ 552.017159][T12928] netlink_unicast+0x7f6/0x990 [ 552.022435][T12928] netlink_sendmsg+0x8e4/0xcb0 [ 552.027704][T12928] __sock_sendmsg+0x221/0x270 [ 552.032908][T12928] ____sys_sendmsg+0x52a/0x7e0 [ 552.038200][T12928] __sys_sendmsg+0x269/0x350 [ 552.043565][T12928] do_syscall_64+0xf3/0x230 [ 552.048574][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.055065][T12928] [ 552.055065][T12928] other info that might help us debug this: [ 552.055065][T12928] [ 552.065277][T12928] Chain exists of: [ 552.065277][T12928] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 552.065277][T12928] [ 552.080160][T12928] Possible unsafe locking scenario: [ 552.080160][T12928] [ 552.087602][T12928] CPU0 CPU1 [ 552.092970][T12928] ---- ---- [ 552.098344][T12928] lock(&q->q_usage_counter(io)#49); [ 552.103723][T12928] lock(mapping.invalidate_lock#2); [ 552.111526][T12928] lock(&q->q_usage_counter(io)#49); [ 552.119413][T12928] lock(&q->limits_lock); [ 552.123821][T12928] [ 552.123821][T12928] *** DEADLOCK *** [ 552.123821][T12928] [ 552.131962][T12928] 5 locks held by syz.5.2057/12928: [ 552.137156][T12928] #0: ffffffff8fd01950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.145327][T12928] #1: ffffffff8fd01808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 552.154274][T12928] #2: ffff888025607998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xc26/0x1c80 [ 552.164270][T12928] #3: ffff888143b71e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 552.174526][T12928] #4: ffff888143b71e38 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 552.185043][T12928] [ 552.185043][T12928] stack backtrace: [ 552.190954][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz.5.2057 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 552.201703][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 552.211765][T12928] Call Trace: [ 552.215043][T12928] [ 552.217965][T12928] dump_stack_lvl+0x241/0x360 [ 552.222636][T12928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.227819][T12928] ? __pfx__printk+0x10/0x10 [ 552.232413][T12928] print_circular_bug+0x13a/0x1b0 [ 552.237447][T12928] check_noncircular+0x36a/0x4a0 [ 552.242377][T12928] ? __pfx_check_noncircular+0x10/0x10 [ 552.247824][T12928] ? lockdep_lock+0x123/0x2b0 [ 552.252492][T12928] ? cgroup_rstat_updated+0x13b/0xc30 [ 552.257869][T12928] validate_chain+0x18ef/0x5920 [ 552.262713][T12928] ? __pfx_validate_chain+0x10/0x10 [ 552.267906][T12928] ? mark_lock+0x9a/0x360 [ 552.272229][T12928] __lock_acquire+0x1397/0x2100 [ 552.277083][T12928] lock_acquire+0x1ed/0x550 [ 552.281571][T12928] ? nbd_set_size+0x2e0/0x8f0 [ 552.286240][T12928] ? __pfx_lock_acquire+0x10/0x10 [ 552.291249][T12928] ? mark_lock+0x9a/0x360 [ 552.295569][T12928] ? __pfx___might_resched+0x10/0x10 [ 552.300841][T12928] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 552.306806][T12928] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.313125][T12928] __mutex_lock+0x1ac/0xee0 [ 552.317632][T12928] ? nbd_set_size+0x2e0/0x8f0 [ 552.322320][T12928] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 552.328196][T12928] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 552.334508][T12928] ? finish_wait+0xd4/0x1e0 [ 552.338997][T12928] ? nbd_set_size+0x2e0/0x8f0 [ 552.343662][T12928] ? __pfx___mutex_lock+0x10/0x10 [ 552.348673][T12928] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 552.354380][T12928] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 552.360437][T12928] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 552.366324][T12928] ? nbd_set_size+0xe0/0x8f0 [ 552.370897][T12928] nbd_set_size+0x2e0/0x8f0 [ 552.375392][T12928] ? __pfx_nbd_set_size+0x10/0x10 [ 552.380406][T12928] ? __pfx_queue_work_on+0x10/0x10 [ 552.385512][T12928] ? rcu_read_lock_any_held+0xb7/0x160 [ 552.390968][T12928] ? nbd_start_device+0x86f/0xaa0 [ 552.396015][T12928] nbd_genl_connect+0x157c/0x1c80 [ 552.401032][T12928] ? __pfx_nbd_genl_connect+0x10/0x10 [ 552.406399][T12928] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 552.412733][T12928] genl_rcv_msg+0xb14/0xec0 [ 552.417250][T12928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.422270][T12928] ? __pfx_lock_acquire+0x10/0x10 [ 552.427306][T12928] ? __pfx_nbd_genl_connect+0x10/0x10 [ 552.432673][T12928] ? __pfx___might_resched+0x10/0x10 [ 552.437968][T12928] netlink_rcv_skb+0x1e3/0x430 [ 552.442717][T12928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.447730][T12928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.453018][T12928] genl_rcv+0x28/0x40 [ 552.457005][T12928] netlink_unicast+0x7f6/0x990 [ 552.461767][T12928] ? __pfx_netlink_unicast+0x10/0x10 [ 552.467055][T12928] ? __virt_addr_valid+0x45f/0x530 [ 552.472169][T12928] ? __phys_addr_symbol+0x2f/0x70 [ 552.477212][T12928] ? __check_object_size+0x47a/0x730 [ 552.482501][T12928] netlink_sendmsg+0x8e4/0xcb0 [ 552.487272][T12928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.492556][T12928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.497838][T12928] __sock_sendmsg+0x221/0x270 [ 552.502508][T12928] ____sys_sendmsg+0x52a/0x7e0 [ 552.507257][T12928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.512536][T12928] ? __fget_files+0x2a/0x410 [ 552.517130][T12928] ? __fget_files+0x2a/0x410 [ 552.521715][T12928] __sys_sendmsg+0x269/0x350 [ 552.526307][T12928] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.531398][T12928] ? lockdep_softirqs_on+0x334/0x5a0 [ 552.536672][T12928] ? __irq_exit_rcu+0xf7/0x220 [ 552.541426][T12928] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.547737][T12928] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.554047][T12928] ? __irq_exit_rcu+0x105/0x220 [ 552.558883][T12928] ? do_syscall_64+0xb6/0x230 [ 552.563546][T12928] do_syscall_64+0xf3/0x230 [ 552.568036][T12928] ? clear_bhb_loop+0x35/0x90 [ 552.572710][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.578609][T12928] RIP: 0033:0x7f6198785d19 [ 552.583022][T12928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.602621][T12928] RSP: 002b:00007f61985f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.611017][T12928] RAX: ffffffffffffffda RBX: 00007f6198975fa0 RCX: 00007f6198785d19 [ 552.618986][T12928] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 552.626964][T12928] RBP: 00007f6198801a20 R08: 0000000000000000 R09: 0000000000000000 [ 552.634928][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.642887][T12928] R13: 0000000000000000 R14: 00007f6198975fa0 R15: 00007ffe6c200818 [ 552.650847][T12928] [ 552.679038][ T9] usb 5-1: USB disconnect, device number 37 [ 552.959550][ T6503] syz_tun (unregistering): left allmulticast mode [ 552.993351][ T8273] syz_tun: left promiscuous mode [ 553.285797][ T3555] bridge_slave_1: left allmulticast mode [ 553.291488][ T3555] bridge_slave_1: left promiscuous mode [ 553.299420][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.308550][ T3555] bridge_slave_0: left allmulticast mode [ 553.314321][ T3555] bridge_slave_0: left promiscuous mode [ 553.320024][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.397765][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.420820][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.432088][ T3555] bond0 (unregistering): Released all slaves [ 553.557399][ T3555] hsr_slave_0: left promiscuous mode [ 553.570766][ T3555] hsr_slave_1: left promiscuous mode [ 553.580949][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.595298][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.665317][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 553.707693][ T3555] team0 (unregistering): Port device team_slave_0 removed