last executing test programs: 1m54.02014427s ago: executing program 1 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 1m53.772050671s ago: executing program 1 (id=562): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x28, 0x0, &(0x7f00000001c0)="e02742e8680d85009882762f86dd6cea8b94a42626f6eff90292fb7b0500ac5af69c7cb69c7ceaf0", 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m53.638537999s ago: executing program 1 (id=565): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func={0x2}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) 1m53.02800195s ago: executing program 1 (id=573): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@utf8no}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@discard}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x25f}}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4080, 0xff0) 1m52.578077513s ago: executing program 1 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b9800000c00f326635004000000f30154f650fc7a90000f2f30f01df66b9220a000066b8c273000066ba000000000f300fc7a84600660f381ed126f0837600006467f30fc7337984", 0x49}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.708012955s ago: executing program 1 (id=582): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r1, 0x200000000000000) setsockopt$sock_attach_bpf(r0, 0x11, 0x32, &(0x7f00000003c0), 0x4) 1m51.231677696s ago: executing program 32 (id=582): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r1, 0x200000000000000) setsockopt$sock_attach_bpf(r0, 0x11, 0x32, &(0x7f00000003c0), 0x4) 1m16.489876136s ago: executing program 2 (id=973): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 1m16.287402494s ago: executing program 2 (id=976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x2b) io_uring_enter(0xffffffffffffffff, 0x75aa, 0xd45c, 0x5c, &(0x7f0000006700)={[0x7]}, 0x8) 1m16.192213401s ago: executing program 2 (id=978): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000007}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000580)={0xa0002008}) 1m15.958746421s ago: executing program 2 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1m15.653407157s ago: executing program 2 (id=984): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x3, 0x30}, &(0x7f0000002b00)=0xc) 1m15.143542644s ago: executing program 2 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1c4) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400) 1m14.64814454s ago: executing program 33 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1c4) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400) 1m10.769935629s ago: executing program 4 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/220, 0xdc}], 0x1}, 0x7}], 0x1, 0x18062, 0x0) 1m10.534334127s ago: executing program 4 (id=1028): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=""/139, &(0x7f0000000100)=0x8b) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x9f, 0x600100) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064d1, &(0x7f0000000600)={&(0x7f0000000180), 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r8, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 1m7.379529115s ago: executing program 4 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10040610, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x3, 0x2) getdents64(r2, 0x0, 0x2c) 1m6.467420614s ago: executing program 4 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1m6.401681928s ago: executing program 4 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b807f7c6d1ca00906b69a2ac8041567018f4ed6cafa1ccfb974fb936d9a6010000000000000025f3990eb47e"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005b80)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"]) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x4, @vbi={0x9, 0x8000, 0x5, 0x20385655, [0x1, 0x9], [0x722, 0x3], 0x2}}) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) 1m6.043961955s ago: executing program 4 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 1m5.454512453s ago: executing program 34 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 38.545724131s ago: executing program 6 (id=1272): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35fec79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfaf98219fef1aedf5bc9cb6f6b993cb35bab801ffb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5834032b60ea06c76137c9a2f2e20244b5fda8c58a17d1e", 0xa6}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 38.383532159s ago: executing program 6 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 38.242541649s ago: executing program 6 (id=1275): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) 37.231736302s ago: executing program 6 (id=1289): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 37.113762544s ago: executing program 6 (id=1292): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(&(0x7f0000000000)=""/154, 0x9a) 36.847617043s ago: executing program 6 (id=1293): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000080)={0x0, 0xf732, 0x1, 0xfffffffd, 0xf4}, &(0x7f0000000300), &(0x7f0000000400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 36.595426977s ago: executing program 35 (id=1293): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000080)={0x0, 0xf732, 0x1, 0xfffffffd, 0xf4}, &(0x7f0000000300), &(0x7f0000000400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 32.896040203s ago: executing program 7 (id=1319): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35fec79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfaf98219fef1aedf5bc9cb6f6b993cb35bab801ffb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5834032b60ea06c76137c9a2f2e20244b5fda8c58a17d1e7b63", 0xa8}], 0x1) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 32.813835012s ago: executing program 7 (id=1320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='macvlan1\x00', 0x10) r1 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a}) close_range(r1, r1, 0x0) io_setup(0x281, &(0x7f0000000100)) rmdir(0x0) memfd_create(0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 32.604019693s ago: executing program 7 (id=1322): prctl$PR_SET_NAME(0x4, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 32.384054095s ago: executing program 7 (id=1325): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 32.204679757s ago: executing program 7 (id=1328): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801000, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.5594534s ago: executing program 7 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)="bb3c", 0x2, 0x2) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 29.086706613s ago: executing program 36 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)="bb3c", 0x2, 0x2) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 5.361626462s ago: executing program 3 (id=1535): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 3.220007718s ago: executing program 9 (id=1552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.849238574s ago: executing program 9 (id=1556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="6467400f0174f631b9800000c00f3235000400000f30b9aa020000b87d000000ba000000000f30b9800000c00f3235010000000f30470f01cf640fc7280f01592744de4546c4a2f19384f8fa9f0000c74424005db80000c744240200000000c7442406000000000f011424", 0x6b}], 0x1, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) 2.846749191s ago: executing program 0 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x20000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 2.798960813s ago: executing program 8 (id=1558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='macvlan1\x00', 0x10) r1 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a}) close_range(r1, r1, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.668048527s ago: executing program 0 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0x4, 0xd2}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 2.667648261s ago: executing program 8 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.403213163s ago: executing program 0 (id=1561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x99) 2.347275761s ago: executing program 8 (id=1562): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.208101489s ago: executing program 0 (id=1563): futex(&(0x7f0000000000)=0x1, 0x0, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) 2.166058633s ago: executing program 3 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)={0x1, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x100, 0xda}}]}) 2.126894972s ago: executing program 5 (id=1565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x7f, @loopback, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000007c0)="41e9ad89", 0x4}], 0x1}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x101, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='r', 0x54000}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}], 0x2, 0x0) 2.043974433s ago: executing program 8 (id=1566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000240), 0x84000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x28}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.960962289s ago: executing program 0 (id=1567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.908566539s ago: executing program 5 (id=1568): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x80}], 0x1, 0x0, 0x0, 0x0) 1.811712172s ago: executing program 3 (id=1569): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c403154658020066b8f5000f00d0c40105f39500800000c74424009fdd2ebfc744240202000000c7442406000000000f011c2426660f2b8500000100400fee4a0cb9800000c00f3235000100000f30440f20c03501000000440f22c066b831008ee0470f07", 0x65}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 1.728549999s ago: executing program 8 (id=1570): clock_nanosleep(0x1, 0x0, &(0x7f0000000200), 0x0) 1.644771461s ago: executing program 0 (id=1571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x5}) 1.551966041s ago: executing program 3 (id=1572): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) 1.551724847s ago: executing program 9 (id=1573): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/5, 0x5}, {0x0}], 0x2, 0x3, 0x4005) 1.52597188s ago: executing program 8 (id=1574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.432669396s ago: executing program 3 (id=1575): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.288024993s ago: executing program 9 (id=1576): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x64e0, &(0x7f0000000a00)={0x0, 0x25f7, 0x40, 0x2, 0x38c}) close(r1) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) 1.219455199s ago: executing program 3 (id=1577): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f00001b2000/0x3000)=nil, 0x2000) 909.161197ms ago: executing program 5 (id=1578): sigaltstack(&(0x7f0000000080)={0x0}, 0x0) 695.959702ms ago: executing program 5 (id=1579): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000099"]) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d") ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xdddd0000, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 525.377476ms ago: executing program 5 (id=1580): r0 = inotify_init() openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000120000000000000001"]) close_range(r0, 0xffffffffffffffff, 0x0) 313.687865ms ago: executing program 9 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 231.116388ms ago: executing program 5 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x5, 0xc, 0x40, 0x0, 0x101, 0x2, 0x2, 0x7, 0xf2, 0x48, 0x3, 0x8, 0x0, 0x5, 0x3, 0x1, 0x3, 0x6e, 0x6, '\x00', 0xb5, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 9 (id=1583): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.254' (ED25519) to the list of known hosts. [ 73.946586][ T5850] cgroup: Unknown subsys name 'net' [ 74.132936][ T5850] cgroup: Unknown subsys name 'cpuset' [ 74.141825][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.626228][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.985321][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.985759][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.994012][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.003406][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.007683][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.014565][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.021980][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.029358][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.039120][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.042361][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.079587][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.088564][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.096849][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.105691][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.113585][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.132377][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.141617][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.158426][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.167631][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.175584][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.183253][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.191726][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.200197][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.208776][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.216775][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.687233][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 80.813710][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 81.021548][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.029512][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.036850][ T5860] bridge_slave_0: entered allmulticast mode [ 81.044379][ T5860] bridge_slave_0: entered promiscuous mode [ 81.067891][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 81.090134][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.097239][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.104688][ T5861] bridge_slave_0: entered allmulticast mode [ 81.111756][ T5861] bridge_slave_0: entered promiscuous mode [ 81.119910][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.127057][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.135137][ T5861] bridge_slave_1: entered allmulticast mode [ 81.142380][ T5861] bridge_slave_1: entered promiscuous mode [ 81.150100][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.157247][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.164618][ T5860] bridge_slave_1: entered allmulticast mode [ 81.172664][ T5860] bridge_slave_1: entered promiscuous mode [ 81.192703][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 81.318288][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.347545][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.361578][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.388217][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.520572][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.527805][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.535815][ T5873] bridge_slave_0: entered allmulticast mode [ 81.542967][ T5873] bridge_slave_0: entered promiscuous mode [ 81.553488][ T5861] team0: Port device team_slave_0 added [ 81.561237][ T5860] team0: Port device team_slave_0 added [ 81.580048][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.587331][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.595976][ T5873] bridge_slave_1: entered allmulticast mode [ 81.603251][ T5873] bridge_slave_1: entered promiscuous mode [ 81.626476][ T5861] team0: Port device team_slave_1 added [ 81.634218][ T5860] team0: Port device team_slave_1 added [ 81.655545][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 81.696604][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.737662][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.744760][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.770756][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.807222][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.863371][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.870774][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.897911][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.919434][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.929318][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.936552][ T5867] bridge_slave_0: entered allmulticast mode [ 81.948229][ T5867] bridge_slave_0: entered promiscuous mode [ 81.979463][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.986446][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.013819][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.063912][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.071585][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.078841][ T5867] bridge_slave_1: entered allmulticast mode [ 82.087224][ T5867] bridge_slave_1: entered promiscuous mode [ 82.097068][ T5873] team0: Port device team_slave_0 added [ 82.106183][ T5873] team0: Port device team_slave_1 added [ 82.112251][ T5183] Bluetooth: hci1: command tx timeout [ 82.118207][ T5183] Bluetooth: hci0: command tx timeout [ 82.126099][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.133591][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.159822][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.179404][ T5183] Bluetooth: hci2: command tx timeout [ 82.259737][ T5183] Bluetooth: hci4: command tx timeout [ 82.262457][ T5865] Bluetooth: hci3: command tx timeout [ 82.282587][ T5860] hsr_slave_0: entered promiscuous mode [ 82.288980][ T5860] hsr_slave_1: entered promiscuous mode [ 82.311342][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.322639][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.329938][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.356085][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.368939][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.376250][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.402225][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.431569][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.526138][ T5867] team0: Port device team_slave_0 added [ 82.546327][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.554029][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.562645][ T5872] bridge_slave_0: entered allmulticast mode [ 82.570501][ T5872] bridge_slave_0: entered promiscuous mode [ 82.596743][ T5861] hsr_slave_0: entered promiscuous mode [ 82.603208][ T5861] hsr_slave_1: entered promiscuous mode [ 82.609886][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 82.615699][ T5861] Cannot create hsr debugfs directory [ 82.623827][ T5867] team0: Port device team_slave_1 added [ 82.653376][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.661202][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.668477][ T5872] bridge_slave_1: entered allmulticast mode [ 82.676870][ T5872] bridge_slave_1: entered promiscuous mode [ 82.767958][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.775483][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.801786][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.838323][ T5873] hsr_slave_0: entered promiscuous mode [ 82.844685][ T5873] hsr_slave_1: entered promiscuous mode [ 82.851270][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 82.857005][ T5873] Cannot create hsr debugfs directory [ 82.876625][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.889920][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.900152][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.907124][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.933135][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029132][ T5872] team0: Port device team_slave_0 added [ 83.074943][ T5872] team0: Port device team_slave_1 added [ 83.194672][ T5867] hsr_slave_0: entered promiscuous mode [ 83.201430][ T5867] hsr_slave_1: entered promiscuous mode [ 83.207511][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 83.214097][ T5867] Cannot create hsr debugfs directory [ 83.226342][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.237366][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.264030][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.306128][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.313317][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.340038][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.588041][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.605253][ T5872] hsr_slave_0: entered promiscuous mode [ 83.612549][ T5872] hsr_slave_1: entered promiscuous mode [ 83.618673][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 83.624723][ T5872] Cannot create hsr debugfs directory [ 83.663775][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.677238][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.688612][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.857298][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.900680][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.910965][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.926558][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.047109][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.067704][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.080630][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.094506][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.181932][ T5183] Bluetooth: hci1: command tx timeout [ 84.187457][ T5865] Bluetooth: hci0: command tx timeout [ 84.219276][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.238614][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.259695][ T5865] Bluetooth: hci2: command tx timeout [ 84.276790][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.300036][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.307954][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.339745][ T5865] Bluetooth: hci3: command tx timeout [ 84.340205][ T5183] Bluetooth: hci4: command tx timeout [ 84.397167][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.408966][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.431768][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.442540][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.468855][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.520944][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.528164][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.568299][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.575538][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.596614][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.640862][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.669096][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.676627][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.692694][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.699880][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.727124][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.805699][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.839010][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.853582][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.860790][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.885266][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.892457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.922834][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.974030][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.993937][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.025533][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.074347][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.081557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.113155][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.120409][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.137209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.144421][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.231660][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.238853][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.386895][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.422680][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.528019][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.583088][ T5860] veth0_vlan: entered promiscuous mode [ 85.646237][ T5860] veth1_vlan: entered promiscuous mode [ 85.704136][ T5873] veth0_vlan: entered promiscuous mode [ 85.742733][ T5860] veth0_macvtap: entered promiscuous mode [ 85.762170][ T5860] veth1_macvtap: entered promiscuous mode [ 85.798519][ T5873] veth1_vlan: entered promiscuous mode [ 85.825498][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.857388][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.905956][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.938857][ T5873] veth0_macvtap: entered promiscuous mode [ 85.983985][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.010745][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.035173][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.048238][ T5873] veth1_macvtap: entered promiscuous mode [ 86.071508][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.090923][ T5861] veth0_vlan: entered promiscuous mode [ 86.120558][ T5861] veth1_vlan: entered promiscuous mode [ 86.159926][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.172216][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.214735][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.260582][ T5183] Bluetooth: hci0: command tx timeout [ 86.262039][ T5865] Bluetooth: hci1: command tx timeout [ 86.304336][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.330014][ T5861] veth0_macvtap: entered promiscuous mode [ 86.343132][ T5865] Bluetooth: hci2: command tx timeout [ 86.359520][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.367497][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.397822][ T1334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.414433][ T1334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.426076][ T5865] Bluetooth: hci4: command tx timeout [ 86.426386][ T5183] Bluetooth: hci3: command tx timeout [ 86.443007][ T5861] veth1_macvtap: entered promiscuous mode [ 86.476374][ T1334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.486330][ T1334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.527571][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.533101][ T5867] veth0_vlan: entered promiscuous mode [ 86.543689][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.575474][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.607277][ T5867] veth1_vlan: entered promiscuous mode [ 86.636288][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.688512][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.734513][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.796731][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.806411][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.832731][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.850461][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859382][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.911968][ T980] cfg80211: failed to load regulatory.db [ 87.072012][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.074993][ T5867] veth0_macvtap: entered promiscuous mode [ 87.088897][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.154353][ T5867] veth1_macvtap: entered promiscuous mode [ 87.186980][ T5983] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 87.193515][ T5872] veth0_vlan: entered promiscuous mode [ 87.224145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.237803][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.251387][ T5872] veth1_vlan: entered promiscuous mode [ 87.412140][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.422424][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.439525][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.473396][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.497325][ T1334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.528480][ T5872] veth0_macvtap: entered promiscuous mode [ 87.553700][ T1334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.578533][ T5872] veth1_macvtap: entered promiscuous mode [ 87.594776][ T1334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624920][ T1334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.724501][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.774703][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.812060][ T3175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.831230][ T3175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.897130][ T3175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906388][ T3175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.917691][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 87.918845][ T6002] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure [ 87.931323][ T6000] Zero length message leads to an empty skb [ 87.985830][ T6002] GUP no longer grows the stack in syz.0.14 (6002): 200000004000-20000000a000 (200000002000) [ 88.006234][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 88.006263][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.006282][ T6002] Call Trace: [ 88.006292][ T6002] [ 88.006301][ T6002] dump_stack_lvl+0x189/0x250 [ 88.006336][ T6002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.006361][ T6002] ? __pfx__printk+0x10/0x10 [ 88.006386][ T6002] ? find_vma+0xe7/0x160 [ 88.006426][ T6002] __get_user_pages+0x24d0/0x2ce0 [ 88.006476][ T6002] ? mtree_load+0x101/0x6f0 [ 88.006506][ T6002] get_user_pages_remote+0x2f1/0xad0 [ 88.006531][ T6002] ? __pfx_mtree_load+0x10/0x10 [ 88.006557][ T6002] ? __pfx_get_user_pages_remote+0x10/0x10 [ 88.006584][ T6002] ? __access_remote_vm+0x367/0x7d0 [ 88.006617][ T6002] __access_remote_vm+0x211/0x7d0 [ 88.006654][ T6002] ? __pfx___access_remote_vm+0x10/0x10 [ 88.006685][ T6002] ? alloc_pages_noprof+0xbe/0x190 [ 88.006717][ T6002] proc_pid_cmdline_read+0x430/0x810 [ 88.006760][ T6002] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 88.006795][ T6002] ? rw_verify_area+0x2a6/0x4d0 [ 88.006824][ T6002] vfs_readv+0x5a7/0x850 [ 88.006843][ T6002] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 88.006877][ T6002] ? __pfx_vfs_readv+0x10/0x10 [ 88.006912][ T6002] ? __fget_files+0x2a/0x420 [ 88.006944][ T6002] ? __fget_files+0x3a0/0x420 [ 88.006977][ T6002] ? __fget_files+0x2a/0x420 [ 88.007015][ T6002] __x64_sys_preadv+0x197/0x2a0 [ 88.007046][ T6002] ? __pfx___x64_sys_preadv+0x10/0x10 [ 88.007078][ T6002] ? do_syscall_64+0xbe/0xfa0 [ 88.007104][ T6002] do_syscall_64+0xfa/0xfa0 [ 88.007123][ T6002] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.007143][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.007163][ T6002] ? clear_bhb_loop+0x60/0xb0 [ 88.007188][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.007207][ T6002] RIP: 0033:0x7fdeb4f8ebe9 [ 88.007226][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.007243][ T6002] RSP: 002b:00007fdeb5ef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 88.007264][ T6002] RAX: ffffffffffffffda RBX: 00007fdeb51c5fa0 RCX: 00007fdeb4f8ebe9 [ 88.007278][ T6002] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.007290][ T6002] RBP: 00007fdeb5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.007302][ T6002] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 88.007314][ T6002] R13: 00007fdeb51c6038 R14: 00007fdeb51c5fa0 R15: 00007fff2c715208 [ 88.007350][ T6002] [ 88.341565][ T5183] Bluetooth: hci1: command tx timeout [ 88.347125][ T5183] Bluetooth: hci0: command tx timeout [ 88.378056][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.419925][ T5183] Bluetooth: hci2: command tx timeout [ 88.424086][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.499858][ T5183] Bluetooth: hci3: command tx timeout [ 88.505427][ T5865] Bluetooth: hci4: command tx timeout [ 88.550436][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.558743][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.636612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.655131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.682695][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.695266][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.726090][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.859690][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 88.868599][ T5921] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 88.915619][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.984838][ T5921] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 89.034004][ T5921] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 89.070199][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.091770][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 89.123505][ T5921] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 89.152972][ T5921] usb 4-1: Product: syz [ 89.164685][ T5921] usb 4-1: Manufacturer: syz [ 89.209321][ T5921] usb 4-1: SerialNumber: syz [ 89.240760][ T5921] usb 4-1: config 0 descriptor?? [ 89.262410][ T5921] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.274676][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 89.328397][ T5921] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.445217][ T6034] loop2: detected capacity change from 0 to 164 [ 89.649336][ T983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.657019][ T6034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.723758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.825287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.834761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.854792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.027308][ T983] usb 5-1: config 0 has no interfaces? [ 90.043544][ T983] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.077039][ T6042] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 90.101246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.119015][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.132521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.215890][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 90.249442][ T983] usb 5-1: Product: syz [ 90.317496][ T983] usb 5-1: Manufacturer: syz [ 90.324772][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 90.326882][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 90.331152][ T5934] usb 4-1: USB disconnect, device number 2 [ 90.348539][ T983] usb 5-1: SerialNumber: syz [ 90.373865][ T5934] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 90.439648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 90.447972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 90.457463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.469753][ T6049] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.492469][ T983] usb 5-1: config 0 descriptor?? [ 90.509064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.764602][ T6008] ldusb: No device or device unplugged -19 [ 92.759898][ T5947] usb 5-1: USB disconnect, device number 2 [ 92.889258][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.056610][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 93.126758][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.171855][ T9] usb 3-1: config 0 has no interface number 0 [ 93.178017][ T9] usb 3-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 93.417324][ T9] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 93.441470][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 93.452721][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.490507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.546240][ T9] usb 3-1: Product: syz [ 93.566753][ T9] usb 3-1: Manufacturer: syz [ 93.584176][ T9] usb 3-1: SerialNumber: syz [ 93.707110][ T9] usb 3-1: config 0 descriptor?? [ 93.774843][ T9] smsc75xx v1.0.0 [ 93.782182][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 94.053385][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 95.053978][ T6113] loop1: detected capacity change from 0 to 512 [ 95.191096][ T5921] usb 3-1: USB disconnect, device number 2 [ 98.066328][ T6200] team0: No ports can be present during mode change [ 98.380943][ T6209] loop1: detected capacity change from 0 to 164 [ 98.431083][ T6209] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.664422][ T6218] loop0: detected capacity change from 0 to 512 [ 98.670926][ T6209] overlayfs: missing 'lowerdir' [ 98.869226][ T30] audit: type=1800 audit(1757170488.339:2): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="file2" dev="loop0" ino=1048606 res=0 errno=0 [ 100.460630][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 102.193131][ T6307] tipc: Started in network mode [ 102.209935][ T6307] tipc: Node identity 76057ad5b49, cluster identity 4711 [ 102.232781][ T6307] tipc: Enabled bearer , priority 0 [ 102.254682][ T6307] syzkaller0: entered promiscuous mode [ 102.277617][ T6307] syzkaller0: entered allmulticast mode [ 102.441719][ T6307] tipc: Resetting bearer [ 102.452937][ T6305] tipc: Resetting bearer [ 102.620166][ T983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.831130][ T6305] tipc: Disabling bearer [ 102.933593][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 102.989467][ T983] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.059215][ T983] usb 4-1: config 0 has no interface number 0 [ 103.147598][ T983] usb 4-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 103.243967][ T983] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 103.275391][ T6325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.138'. [ 103.343553][ T6325] netlink: 31 bytes leftover after parsing attributes in process `syz.4.138'. [ 103.355694][ T983] usb 4-1: config 0 interface 184 has no altsetting 0 [ 103.405283][ T983] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.408689][ T6325] netlink: 'syz.4.138': attribute type 6 has an invalid length. [ 103.437815][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.454035][ T6325] netlink: 'syz.4.138': attribute type 5 has an invalid length. [ 103.495195][ T6325] netlink: 31 bytes leftover after parsing attributes in process `syz.4.138'. [ 103.615288][ T983] usb 4-1: Product: syz [ 103.747390][ T983] usb 4-1: Manufacturer: syz [ 103.787164][ T983] usb 4-1: SerialNumber: syz [ 103.856161][ T983] usb 4-1: config 0 descriptor?? [ 103.883215][ T983] smsc75xx v1.0.0 [ 103.906116][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 103.948433][ T983] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 104.150262][ T6343] loop4: detected capacity change from 0 to 164 [ 104.241585][ T6343] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.271572][ T6343] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.436892][ T6343] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.573579][ T6369] fuse: Bad value for 'fd' [ 106.091473][ T9] usb 4-1: USB disconnect, device number 3 [ 106.804432][ T6395] overlayfs: upper fs does not support file handles, falling back to index=off. [ 106.835529][ T6398] fuse: Unknown parameter '0x0000000000000004' [ 107.100974][ T6406] syz.0.168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.378374][ T6408] tipc: Enabled bearer , priority 0 [ 107.405189][ T6408] syzkaller0: entered promiscuous mode [ 107.434363][ T6408] syzkaller0: entered allmulticast mode [ 107.493743][ T6411] tipc: Resetting bearer [ 107.558599][ T6407] tipc: Resetting bearer [ 107.743295][ T6407] tipc: Disabling bearer [ 107.902506][ T5960] IPVS: starting estimator thread 0... [ 107.969802][ T6431] fuse: Bad value for 'fd' [ 108.263143][ T6429] IPVS: using max 48 ests per chain, 115200 per kthread [ 108.890064][ T5960] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.069398][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 109.085752][ T5960] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 109.096493][ T5960] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 109.117273][ T5960] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.162841][ T5960] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 109.196234][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.216113][ T5960] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 109.227021][ T5960] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 109.244536][ T5960] usb 5-1: Product: syz [ 109.255785][ T5960] usb 5-1: Manufacturer: syz [ 109.267638][ T5960] usb 5-1: SerialNumber: syz [ 109.310815][ T5960] usb 5-1: config 0 descriptor?? [ 109.345603][ T5960] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.413772][ T5960] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.927958][ T6469] loop1: detected capacity change from 0 to 164 [ 109.990629][ T6469] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.054137][ T6469] overlayfs: missing 'lowerdir' [ 110.241568][ T6472] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 110.249304][ T5960] usb 5-1: USB disconnect, device number 3 [ 110.255186][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 110.284765][ T5960] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 110.308765][ T6474] loop2: detected capacity change from 0 to 128 [ 110.337998][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.413163][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.614007][ T6447] ldusb: No device or device unplugged -19 [ 110.948118][ T5947] IPVS: starting estimator thread 0... [ 111.040607][ T6486] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.427201][ T6504] loop4: detected capacity change from 0 to 164 [ 111.483405][ T6504] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.507717][ T6504] overlayfs: missing 'workdir' [ 112.139640][ T6520] fuse: Bad value for 'fd' [ 112.565535][ T6533] loop4: detected capacity change from 0 to 164 [ 112.616523][ T6533] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 112.647575][ T6533] overlayfs: missing 'workdir' [ 112.928167][ T5947] IPVS: starting estimator thread 0... [ 113.059623][ T6542] IPVS: using max 27 ests per chain, 64800 per kthread [ 113.814905][ T6570] loop1: detected capacity change from 0 to 164 [ 113.963119][ T6570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.025736][ T6570] overlayfs: missing 'workdir' [ 115.179725][ T6581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.414311][ T6626] loop1: detected capacity change from 0 to 164 [ 116.453534][ T6626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.730686][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 117.256444][ T6641] tipc: Started in network mode [ 117.278231][ T6641] tipc: Node identity 2a133eacef53, cluster identity 4711 [ 117.302276][ T6641] tipc: Enabled bearer , priority 0 [ 117.324127][ T6644] syzkaller0: entered promiscuous mode [ 117.338859][ T6644] syzkaller0: entered allmulticast mode [ 117.408370][ T6641] tipc: Resetting bearer [ 117.433648][ T6640] tipc: Resetting bearer [ 117.550519][ T6640] tipc: Disabling bearer [ 117.888157][ T6654] loop0: detected capacity change from 0 to 164 [ 117.930492][ T6654] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.231312][ T6658] Invalid ELF header magic: != ELF [ 120.747347][ T6718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.850284][ T6720] loop2: detected capacity change from 0 to 164 [ 120.913321][ T6720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.211379][ T6750] loop2: detected capacity change from 0 to 164 [ 122.288769][ T6750] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.465249][ T6757] capability: warning: `syz.4.309' uses 32-bit capabilities (legacy support in use) [ 122.689301][ T980] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.882298][ T980] usb 4-1: config 0 has no interfaces? [ 122.918800][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.928314][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.947131][ T980] usb 4-1: Product: syz [ 122.954796][ T980] usb 4-1: Manufacturer: syz [ 122.959811][ T980] usb 4-1: SerialNumber: syz [ 122.967389][ T980] usb 4-1: config 0 descriptor?? [ 123.038846][ T30] audit: type=1326 audit(1757171024.504:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 124.147775][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.360882][ T6808] tipc: Started in network mode [ 124.366436][ T6808] tipc: Node identity eab98eea18f2, cluster identity 4711 [ 124.375593][ T6808] tipc: Enabled bearer , priority 0 [ 124.383764][ T6808] syzkaller0: entered promiscuous mode [ 124.390118][ T6808] syzkaller0: entered allmulticast mode [ 124.401157][ T6808] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 124.414651][ T6808] tipc: Resetting bearer [ 124.427284][ T6807] tipc: Resetting bearer [ 124.446560][ T6807] tipc: Disabling bearer [ 125.632148][ T24] usb 4-1: USB disconnect, device number 4 [ 125.955107][ T6861] hugetlbfs: Bad value 'x' for mount option 'nr_inodes' [ 125.955107][ T6861] [ 126.769285][ T5960] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.108051][ T5960] usb 3-1: config 0 has no interfaces? [ 127.197569][ T5960] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 127.239303][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.247337][ T5960] usb 3-1: Product: syz [ 127.333490][ T5960] usb 3-1: Manufacturer: syz [ 127.338137][ T5960] usb 3-1: SerialNumber: syz [ 127.441024][ T5960] usb 3-1: config 0 descriptor?? [ 129.652178][ T980] usb 3-1: USB disconnect, device number 3 [ 131.725964][ T7020] overlayfs: failed to resolve './file0': -2 [ 132.985607][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993352][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.098582][ T7106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.448'. [ 134.389307][ T983] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.582141][ T983] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 134.607702][ T983] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.626259][ T983] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.642497][ T983] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.672907][ T983] usb 4-1: Product: syz [ 134.693629][ T983] usb 4-1: Manufacturer: syz [ 134.707259][ T983] usb 4-1: SerialNumber: syz [ 134.726748][ T983] usb 4-1: config 0 descriptor?? [ 134.757620][ T983] usb 4-1: selecting invalid altsetting 0 [ 134.999574][ T983] usb 4-1: USB disconnect, device number 5 [ 135.389356][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.555256][ T5921] usb 5-1: config 0 has no interfaces? [ 135.566697][ T5921] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.582029][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.591464][ T5921] usb 5-1: Product: syz [ 135.596360][ T5921] usb 5-1: Manufacturer: syz [ 135.602884][ T5921] usb 5-1: SerialNumber: syz [ 135.619618][ T5921] usb 5-1: config 0 descriptor?? [ 135.821188][ T7152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.958896][ T7156] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.842019][ T7191] sctp: [Deprecated]: syz.2.483 (pid 7191) Use of int in max_burst socket option deprecated. [ 136.842019][ T7191] Use struct sctp_assoc_value instead [ 137.072375][ T7200] loop2: detected capacity change from 0 to 256 [ 138.177839][ T980] usb 5-1: USB disconnect, device number 4 [ 143.477108][ T7406] loop1: detected capacity change from 0 to 128 [ 143.532423][ T7406] ======================================================= [ 143.532423][ T7406] WARNING: The mand mount option has been deprecated and [ 143.532423][ T7406] and is ignored by this kernel. Remove the mand [ 143.532423][ T7406] option from the mount to silence this warning. [ 143.532423][ T7406] ======================================================= [ 143.830012][ T5860] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 143.839765][ T5860] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 144.589223][ T5960] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.769256][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 144.820336][ T5960] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.857871][ T5960] usb 1-1: config 0 has no interface number 0 [ 144.879981][ T5960] usb 1-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 144.913391][ T5960] usb 1-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 144.915217][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.954920][ T5960] usb 1-1: config 0 interface 184 has no altsetting 0 [ 144.978818][ T5960] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.999747][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.016218][ T5960] usb 1-1: Product: syz [ 145.023079][ T5960] usb 1-1: Manufacturer: syz [ 145.027724][ T5960] usb 1-1: SerialNumber: syz [ 145.041529][ T5960] usb 1-1: config 0 descriptor?? [ 145.049758][ T5960] smsc75xx v1.0.0 [ 145.053611][ T5960] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 145.064438][ T5960] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 145.093463][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.212351][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.353475][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.675133][ T50] bridge_slave_1: left allmulticast mode [ 145.697970][ T50] bridge_slave_1: left promiscuous mode [ 145.717061][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.765717][ T50] bridge_slave_0: left allmulticast mode [ 145.788099][ T50] bridge_slave_0: left promiscuous mode [ 145.798521][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.918247][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.933732][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.945181][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.954790][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.963847][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.088461][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.108210][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.120939][ T50] bond0 (unregistering): Released all slaves [ 147.154989][ T7469] tipc: Started in network mode [ 147.160302][ T7469] tipc: Node identity a6e45acca52b, cluster identity 4711 [ 147.167601][ T7469] tipc: Enabled bearer , priority 0 [ 147.193332][ T7472] syzkaller0: entered promiscuous mode [ 147.209835][ T7472] syzkaller0: entered allmulticast mode [ 147.246925][ T50] tipc: Left network mode [ 147.297136][ T7485] tipc: Resetting bearer [ 147.355991][ T7464] tipc: Resetting bearer [ 147.384917][ T7464] tipc: Disabling bearer [ 147.487184][ T983] usb 1-1: USB disconnect, device number 2 [ 148.019444][ T5865] Bluetooth: hci0: command tx timeout [ 148.221365][ T50] hsr_slave_0: left promiscuous mode [ 148.238831][ T50] hsr_slave_1: left promiscuous mode [ 148.245206][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.263497][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.283956][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.302113][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.501919][ T50] veth1_macvtap: left promiscuous mode [ 148.528997][ T50] veth0_macvtap: left promiscuous mode [ 148.581591][ T50] veth1_vlan: left promiscuous mode [ 148.587124][ T50] veth0_vlan: left promiscuous mode [ 148.753796][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 148.762827][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 149.690666][ T5960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.778118][ T50] team0 (unregistering): Port device team_slave_1 removed [ 149.817619][ T50] team0 (unregistering): Port device team_slave_0 removed [ 149.850654][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 149.862890][ T5960] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.879313][ T5960] usb 5-1: config 0 has no interface number 0 [ 149.886752][ T5960] usb 5-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 149.905049][ T5960] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 149.941156][ T5960] usb 5-1: config 0 interface 184 has no altsetting 0 [ 149.971548][ T5960] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.988535][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.006880][ T5960] usb 5-1: Product: syz [ 150.019944][ T5960] usb 5-1: Manufacturer: syz [ 150.027281][ T5960] usb 5-1: SerialNumber: syz [ 150.068235][ T5960] usb 5-1: config 0 descriptor?? [ 150.105955][ T5865] Bluetooth: hci0: command tx timeout [ 150.106835][ T5960] smsc75xx v1.0.0 [ 150.118642][ T5960] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 150.141062][ T5960] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 151.144269][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 151.633191][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.659055][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.683873][ T7451] bridge_slave_0: entered allmulticast mode [ 151.704877][ T7451] bridge_slave_0: entered promiscuous mode [ 151.728915][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.745560][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.753830][ T7451] bridge_slave_1: entered allmulticast mode [ 151.764417][ T7451] bridge_slave_1: entered promiscuous mode [ 151.890242][ T7451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.893892][ T7593] sock: sock_set_timeout: `syz.0.631' (pid 7593) tries to set negative timeout [ 151.924588][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.124373][ T7451] team0: Port device team_slave_0 added [ 152.158654][ T7451] team0: Port device team_slave_1 added [ 152.180494][ T5865] Bluetooth: hci0: command tx timeout [ 152.374411][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.402062][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.449033][ T7451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.488486][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.510813][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.628910][ T7451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.650522][ T5947] usb 5-1: USB disconnect, device number 5 [ 153.001729][ T7451] hsr_slave_0: entered promiscuous mode [ 153.013647][ T7451] hsr_slave_1: entered promiscuous mode [ 154.140840][ T5960] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.174335][ T7451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.216490][ T7451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.263540][ T5865] Bluetooth: hci0: command tx timeout [ 154.281156][ T7451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.309397][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 154.323956][ T5960] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 154.372630][ T5960] usb 3-1: config 0 has no interface number 0 [ 154.378776][ T5960] usb 3-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 154.428240][ T5960] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 154.455504][ T7656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.489699][ T5960] usb 3-1: config 0 interface 184 has no altsetting 0 [ 154.501760][ T7451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.540131][ T5960] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.560883][ T7662] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709512196) [ 154.570440][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.579036][ T5960] usb 3-1: Product: syz [ 154.580193][ T7666] fuse: Unknown parameter 'grou00000000000000000000' [ 154.584751][ T5960] usb 3-1: Manufacturer: syz [ 154.590856][ T7662] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 154.604640][ T5960] usb 3-1: SerialNumber: syz [ 154.616252][ T5960] usb 3-1: config 0 descriptor?? [ 154.631057][ T5960] smsc75xx v1.0.0 [ 154.634732][ T5960] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 154.664557][ T5960] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 154.868992][ T7678] fuse: Bad value for 'fd' [ 155.047252][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.159076][ T7451] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.175600][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.182909][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.274270][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.281500][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.737148][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 155.758731][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 155.897880][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.317592][ T7451] veth0_vlan: entered promiscuous mode [ 156.343131][ T7451] veth1_vlan: entered promiscuous mode [ 156.427100][ T5960] usb 3-1: USB disconnect, device number 4 [ 156.474909][ T7451] veth0_macvtap: entered promiscuous mode [ 156.574734][ T7451] veth1_macvtap: entered promiscuous mode [ 156.621849][ T7737] fuse: Bad value for 'fd' [ 156.657810][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.714840][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.776656][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.827497][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.879352][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.918189][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.109225][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.131832][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.230325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.244237][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.529356][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.684490][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 157.699674][ T5921] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.730918][ T5921] usb 5-1: config 0 has no interface number 0 [ 157.737158][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.680'. [ 157.747010][ T5921] usb 5-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 157.775601][ T5921] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 157.829277][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.680'. [ 157.838225][ T5921] usb 5-1: config 0 interface 184 has no altsetting 0 [ 157.863612][ T7775] fuse: Bad value for 'fd' [ 157.864117][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.886517][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.899845][ T5921] usb 5-1: Product: syz [ 157.904062][ T5921] usb 5-1: Manufacturer: syz [ 157.917926][ T5921] usb 5-1: SerialNumber: syz [ 157.934462][ T5921] usb 5-1: config 0 descriptor?? [ 157.983549][ T5921] smsc75xx v1.0.0 [ 157.999282][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 158.049777][ T5921] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 158.058720][ T7781] fuse: Unknown parameter 'default_permis' [ 158.654207][ T7802] 9pnet_fd: Insufficient options for proto=fd [ 158.823793][ T7809] fuse: Unknown parameter 'default_permis' [ 159.465765][ T30] audit: type=1326 audit(1757171316.939:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.505597][ T30] audit: type=1326 audit(1757171316.939:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.529808][ T30] audit: type=1326 audit(1757171316.939:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0da78d550 code=0x7ffc0000 [ 159.553103][ T30] audit: type=1326 audit(1757171316.939:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.576396][ T30] audit: type=1326 audit(1757171316.939:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.599346][ T5947] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.623731][ T30] audit: type=1326 audit(1757171316.939:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.666587][ T30] audit: type=1326 audit(1757171316.939:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.5.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x7ffc0000 [ 159.749558][ T5947] usb 4-1: device descriptor read/64, error -71 [ 159.798133][ T7844] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.989276][ T5947] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.129305][ T5947] usb 4-1: device descriptor read/64, error -71 [ 160.242764][ T5947] usb usb4-port1: attempt power cycle [ 160.283928][ T5921] usb 5-1: USB disconnect, device number 6 [ 160.599301][ T5947] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.856607][ T5947] usb 4-1: device descriptor read/8, error -71 [ 161.099402][ T5947] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.160059][ T5947] usb 4-1: device descriptor read/8, error -71 [ 161.282780][ T5947] usb usb4-port1: unable to enumerate USB device [ 161.447552][ T7883] fuse: Unknown parameter 'default_permissio' [ 162.778247][ T7906] loop3: detected capacity change from 0 to 512 [ 162.833444][ T7906] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 162.982713][ T3175] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 163.033411][ T7912] program syz.2.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.645321][ T7967] fuse: Bad value for 'group_id' [ 164.659652][ T7967] fuse: Bad value for 'group_id' [ 165.395669][ C1] sd 0:0:1:0: [sda] tag#2308 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 165.406166][ C1] sd 0:0:1:0: [sda] tag#2308 CDB: Read(6) 08 00 00 00 00 00 [ 166.156295][ T8004] fuse: Bad value for 'user_id' [ 166.177581][ T8004] fuse: Bad value for 'user_id' [ 166.976048][ T8033] fuse: Bad value for 'user_id' [ 166.995822][ T8033] fuse: Bad value for 'user_id' [ 168.038133][ T8077] tipc: Enabled bearer , priority 0 [ 168.081179][ T8077] syzkaller0: entered promiscuous mode [ 168.130504][ T8077] syzkaller0: entered allmulticast mode [ 168.177046][ T8077] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.293947][ T8077] tipc: Resetting bearer [ 168.336505][ T8074] tipc: Resetting bearer [ 168.426104][ T8074] tipc: Disabling bearer [ 168.456064][ T8096] fuse: Bad value for 'group_id' [ 168.476752][ T8096] fuse: Bad value for 'group_id' [ 169.842374][ T8136] mmap: syz.0.830 (8136) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 170.303319][ T8150] fuse: Bad value for 'fd' [ 170.442388][ T30] audit: type=1326 audit(1757171327.919:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.0.836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 171.400238][ T8198] fuse: Bad value for 'fd' [ 172.157189][ T30] audit: type=1326 audit(1757171329.629:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.5.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x0 [ 172.396505][ T8240] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 8240 comm: syz.2.863) [ 172.463679][ T30] audit: type=1800 audit(1757171329.939:13): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.863" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=18556 res=0 errno=0 [ 172.691769][ T8255] program syz.2.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.704699][ C1] sd 0:0:1:0: [sda] tag#2314 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 172.715265][ C1] sd 0:0:1:0: [sda] tag#2314 CDB: Read(6) 08 00 00 00 00 00 [ 173.509681][ T983] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.650929][ T983] usb 6-1: device descriptor read/64, error -71 [ 173.889534][ T983] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.917468][ C1] sd 0:0:1:0: [sda] tag#2315 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 173.928056][ C1] sd 0:0:1:0: [sda] tag#2315 CDB: Read(6) 08 00 00 00 00 00 [ 174.079346][ T983] usb 6-1: device descriptor read/64, error -71 [ 174.156861][ T8299] overlayfs: missing 'lowerdir' [ 174.189453][ T983] usb usb6-port1: attempt power cycle [ 174.589286][ T983] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.875985][ T983] usb 6-1: device descriptor read/8, error -71 [ 175.149322][ T983] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.187465][ T983] usb 6-1: device descriptor read/8, error -71 [ 175.295162][ C1] sd 0:0:1:0: [sda] tag#2320 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 175.305727][ C1] sd 0:0:1:0: [sda] tag#2320 CDB: Read(6) 08 00 00 00 00 00 [ 175.319387][ T983] usb usb6-port1: unable to enumerate USB device [ 175.640175][ T8330] overlayfs: missing 'lowerdir' [ 176.357202][ T8356] overlayfs: missing 'lowerdir' [ 176.765629][ T8370] kvm: emulating exchange as write [ 177.270107][ T8398] fuse: Invalid rootmode [ 177.591801][ T8411] fuse: Unknown parameter 'grou00000000000000000000' [ 178.078192][ T8428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.944'. [ 178.325150][ T8440] fuse: Unknown parameter 'grou00000000000000000000' [ 179.216253][ T8466] fuse: Bad value for 'rootmode' [ 180.040266][ T5947] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.201994][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 180.213154][ T8503] loop4: detected capacity change from 0 to 256 [ 180.293122][ T5947] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.380483][ T5947] usb 4-1: config 0 has no interface number 0 [ 180.386815][ T5947] usb 4-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 180.599857][ T5947] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 180.748476][ T5867] overlayfs: failed lookup in lower (newroot/221, name='bus', err=-40): overlapping layers [ 180.792945][ T5947] usb 4-1: config 0 interface 184 has no altsetting 0 [ 180.802773][ T5867] overlayfs: failed lookup in lower (newroot/221, name='bus', err=-40): overlapping layers [ 180.952538][ T5947] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 181.005920][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.070891][ T5947] usb 4-1: Product: syz [ 181.075127][ T5947] usb 4-1: Manufacturer: syz [ 181.115723][ T5947] usb 4-1: SerialNumber: syz [ 181.251698][ T5947] usb 4-1: config 0 descriptor?? [ 181.295962][ T5947] smsc75xx v1.0.0 [ 181.295983][ T5947] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 181.296224][ T5947] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 181.344293][ T8529] fuse: Unknown parameter 'group_i00000000000000000000' [ 181.564881][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.799088][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.847768][ T8539] fuse: Unknown parameter 'use00000000000000000000' [ 182.167583][ T8543] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.207538][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.220272][ T8543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.345721][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.872584][ T12] bridge_slave_1: left allmulticast mode [ 182.910776][ T12] bridge_slave_1: left promiscuous mode [ 182.925597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.964654][ T12] bridge_slave_0: left allmulticast mode [ 182.984726][ T12] bridge_slave_0: left promiscuous mode [ 183.020213][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.033433][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.045181][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.059635][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.070406][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.082412][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.607575][ T983] usb 4-1: USB disconnect, device number 10 [ 183.757520][ T8566] program syz.0.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.878398][ T8568] fuse: Unknown parameter 'use00000000000000000000' [ 184.002447][ T8571] fuse: Unknown parameter 'group_id00000000000000000000' [ 184.024982][ T8572] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 184.068488][ T8572] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 184.694049][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.727208][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.761574][ T12] bond0 (unregistering): Released all slaves [ 184.785058][ T8596] fuse: Unknown parameter 'use00000000000000000000' [ 185.087833][ T8603] fuse: Unknown parameter 'group_id00000000000000000000' [ 185.100738][ T8605] overlayfs: missing 'lowerdir' [ 185.145898][ T5183] Bluetooth: hci2: command tx timeout [ 185.893985][ T12] hsr_slave_0: left promiscuous mode [ 185.969248][ T12] hsr_slave_1: left promiscuous mode [ 185.975378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.017205][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.032834][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.124470][ T12] veth1_macvtap: left promiscuous mode [ 186.134143][ T12] veth0_macvtap: left promiscuous mode [ 186.151876][ T12] veth1_vlan: left promiscuous mode [ 186.219404][ T12] veth0_vlan: left promiscuous mode [ 186.419401][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.599393][ T24] usb 5-1: device descriptor read/64, error -71 [ 186.849253][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.932595][ T8646] fuse: Unknown parameter 'group_id00000000000000000000' [ 187.123568][ T24] usb 5-1: device descriptor read/64, error -71 [ 187.219342][ T5183] Bluetooth: hci2: command tx timeout [ 187.299875][ T24] usb usb5-port1: attempt power cycle [ 187.649338][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.724590][ T24] usb 5-1: device descriptor read/8, error -71 [ 187.765378][ T8667] program syz.0.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.982897][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.042411][ T24] usb 5-1: device descriptor read/8, error -71 [ 188.187758][ T24] usb usb5-port1: unable to enumerate USB device [ 188.698123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.763471][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.065645][ T8697] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.300740][ T5183] Bluetooth: hci2: command tx timeout [ 190.020082][ T5872] overlayfs: failed lookup in lower (newroot/201, name='bus', err=-40): overlapping layers [ 190.030456][ T5872] overlayfs: failed lookup in lower (newroot/201, name='bus', err=-40): overlapping layers [ 190.272646][ T8551] chnl_net:caif_netlink_parms(): no params data found [ 190.311106][ T8724] fuse: Unknown parameter 'user_id00000000000000000000' [ 190.815490][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.849976][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.857246][ T8551] bridge_slave_0: entered allmulticast mode [ 190.881333][ T8551] bridge_slave_0: entered promiscuous mode [ 190.903584][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.917735][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.942633][ T8551] bridge_slave_1: entered allmulticast mode [ 190.960815][ T8551] bridge_slave_1: entered promiscuous mode [ 191.062212][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.317306][ T8753] program syz.0.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.379957][ T5183] Bluetooth: hci2: command tx timeout [ 191.551165][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.896372][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.945886][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.070673][ T5947] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.255506][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.266834][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.276226][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.298820][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.308295][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.320084][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 192.334858][ T5947] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.400324][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.420632][ T5947] usb 4-1: config 0 has no interface number 0 [ 192.448044][ T8551] team0: Port device team_slave_0 added [ 192.471458][ T5947] usb 4-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 192.505598][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.522936][ T5947] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 192.561910][ T8551] team0: Port device team_slave_1 added [ 192.568991][ T5947] usb 4-1: config 0 interface 184 has no altsetting 0 [ 192.600377][ T5947] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.610165][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.636613][ T5947] usb 4-1: Product: syz [ 192.649244][ T5947] usb 4-1: Manufacturer: syz [ 192.660050][ T5947] usb 4-1: SerialNumber: syz [ 192.679832][ T5947] usb 4-1: config 0 descriptor?? [ 192.697410][ T5947] smsc75xx v1.0.0 [ 192.702616][ T5947] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 192.729771][ T5947] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 192.883460][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.929412][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.961777][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.983092][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.999886][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.088255][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.487550][ T8551] hsr_slave_0: entered promiscuous mode [ 193.500061][ T8551] hsr_slave_1: entered promiscuous mode [ 193.507160][ T8551] debugfs: 'hsr0' already exists in 'hsr' [ 193.517585][ T8551] Cannot create hsr debugfs directory [ 193.543518][ T12] bridge_slave_1: left allmulticast mode [ 193.584253][ T12] bridge_slave_1: left promiscuous mode [ 193.602222][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.638949][ T12] bridge_slave_0: left allmulticast mode [ 193.650184][ T12] bridge_slave_0: left promiscuous mode [ 193.664251][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.349500][ T5183] Bluetooth: hci3: command tx timeout [ 194.427468][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434135][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.648613][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.663431][ T983] usb 4-1: USB disconnect, device number 11 [ 194.747703][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.797539][ T12] bond0 (unregistering): Released all slaves [ 194.848756][ T30] audit: type=1326 audit(1757171352.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.0.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 194.981979][ T12] tipc: Left network mode [ 195.047352][ T8800] program syz.0.1081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.655918][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 195.901495][ T12] hsr_slave_0: left promiscuous mode [ 195.923239][ T12] hsr_slave_1: left promiscuous mode [ 195.939989][ T8823] fuse: Bad value for 'fd' [ 195.947240][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.984130][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.021494][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.049538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.143084][ T12] veth1_macvtap: left promiscuous mode [ 196.149318][ T12] veth0_macvtap: left promiscuous mode [ 196.155025][ T12] veth1_vlan: left promiscuous mode [ 196.183631][ T12] veth0_vlan: left promiscuous mode [ 196.429242][ T5183] Bluetooth: hci3: command tx timeout [ 196.442007][ T8840] program syz.5.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.663271][ T8847] fuse: Unknown parameter 'group_i00000000000000000000' [ 197.791946][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.080783][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.500136][ T5183] Bluetooth: hci3: command tx timeout [ 198.893585][ T8875] program syz.3.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.070078][ T30] audit: type=1326 audit(1757171356.549:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x0 [ 199.274679][ T8888] overlayfs: overlapping lowerdir path [ 199.639275][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.812324][ T5921] usb 4-1: no configurations [ 199.818304][ T5921] usb 4-1: can't read configurations, error -22 [ 200.050553][ T5921] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.333990][ T5921] usb 4-1: no configurations [ 200.338652][ T5921] usb 4-1: can't read configurations, error -22 [ 200.358037][ T5921] usb usb4-port1: attempt power cycle [ 200.581657][ T5183] Bluetooth: hci3: command tx timeout [ 200.719330][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.767917][ T5921] usb 4-1: no configurations [ 200.772796][ T5921] usb 4-1: can't read configurations, error -22 [ 200.909335][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 201.107499][ T5921] usb 4-1: no configurations [ 201.122554][ T5921] usb 4-1: can't read configurations, error -22 [ 201.139825][ T5921] usb usb4-port1: unable to enumerate USB device [ 201.187670][ T8906] program syz.0.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.898118][ T8917] fuse: Invalid rootmode [ 202.637452][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.644952][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.660426][ T8766] bridge_slave_0: entered allmulticast mode [ 202.677664][ T8766] bridge_slave_0: entered promiscuous mode [ 202.732158][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.759048][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.791953][ T8766] bridge_slave_1: entered allmulticast mode [ 202.811351][ T8766] bridge_slave_1: entered promiscuous mode [ 203.113811][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.220750][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.313441][ T12] IPVS: stop unused estimator thread 0... [ 203.461134][ T8766] team0: Port device team_slave_0 added [ 203.515666][ T30] audit: type=1326 audit(1757171360.979:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f456918ebe9 code=0x0 [ 203.541892][ T8766] team0: Port device team_slave_1 added [ 203.758989][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.770374][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.798306][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.821598][ T8551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.845046][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.853834][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.885254][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.908248][ T8551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.928648][ T8551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.963643][ T8551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.086255][ T8766] hsr_slave_0: entered promiscuous mode [ 204.098953][ T8766] hsr_slave_1: entered promiscuous mode [ 204.121253][ T8766] debugfs: 'hsr0' already exists in 'hsr' [ 204.134203][ T8766] Cannot create hsr debugfs directory [ 204.937941][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.118910][ T8766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.197288][ T8551] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.248118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.255780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.298487][ T8766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.336148][ T8766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.398733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.406234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.515280][ T8766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.523809][ T9023] fuse: Unknown parameter '0x0000000000000004' [ 205.777499][ T8551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.829920][ T8551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.981093][ T30] audit: type=1326 audit(1757171363.459:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 206.226496][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.285122][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.303974][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.311214][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.380783][ T9049] fuse: Bad value for 'rootmode' [ 206.383642][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.393037][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.556353][ T8551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.754077][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 206.760253][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 207.473929][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.577405][ T8551] veth0_vlan: entered promiscuous mode [ 207.691113][ T8551] veth1_vlan: entered promiscuous mode [ 207.801707][ T8551] veth0_macvtap: entered promiscuous mode [ 207.880320][ T8551] veth1_macvtap: entered promiscuous mode [ 207.970960][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.999012][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.080101][ T3566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.093599][ T3566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.148745][ T3566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.198550][ T3566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.482979][ T8766] veth0_vlan: entered promiscuous mode [ 208.522146][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.553612][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.602883][ T8766] veth1_vlan: entered promiscuous mode [ 208.624052][ T30] audit: type=1326 audit(1757171366.099:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 208.720423][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.753050][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.840000][ T8766] veth0_macvtap: entered promiscuous mode [ 208.896236][ T8766] veth1_macvtap: entered promiscuous mode [ 208.978713][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.033428][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.102731][ T3566] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.129589][ T1334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.148457][ T1334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.167870][ T1334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.482647][ T30] audit: type=1326 audit(1757171366.949:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 209.513230][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.569344][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.692818][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.713149][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.405959][ T30] audit: type=1326 audit(1757171367.879:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.5.1176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0da78ebe9 code=0x0 [ 210.697316][ T30] audit: type=1326 audit(1757171368.169:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.7.1178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff272b8ebe9 code=0x0 [ 211.674566][ T9218] program syz.0.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.895946][ T9225] fuse: Unknown parameter 'user_i00000000000000000000' [ 214.862549][ T9325] fuse: Bad value for 'user_id' [ 214.867504][ T9325] fuse: Bad value for 'user_id' [ 214.971469][ T9329] program syz.6.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.238310][ T9332] fuse: Unknown parameter 'user_i00000000000000000000' [ 215.593350][ T9345] overlayfs: failed to resolve './file1/file0': -2 [ 215.614542][ T9340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.109596][ T9359] program syz.7.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.877429][ T9394] program syz.5.1257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.936148][ T9435] program syz.6.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.066361][ T9440] IPv6: addrconf: prefix option has invalid lifetime [ 219.283481][ T8551] overlayfs: failed lookup in lower (newroot/27, name='bus', err=-40): overlapping layers [ 219.294471][ T8551] overlayfs: failed lookup in lower (newroot/27, name='bus', err=-40): overlapping layers [ 219.569713][ T3566] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.682307][ T3566] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.841417][ T3566] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.010622][ T3566] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.611841][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.636887][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.663067][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.695815][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.727042][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.741005][ T30] audit: type=1326 audit(1757171378.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 220.803174][ T3566] bridge_slave_1: left allmulticast mode [ 220.853706][ T3566] bridge_slave_1: left promiscuous mode [ 220.870095][ T30] audit: type=1326 audit(1757171378.259:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdeb4f458e7 code=0x7ffc0000 [ 220.876752][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.907521][ T30] audit: type=1326 audit(1757171378.259:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdeb4f45946 code=0x7ffc0000 [ 220.989605][ T3566] bridge_slave_0: left allmulticast mode [ 221.038671][ T3566] bridge_slave_0: left promiscuous mode [ 221.071257][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.088471][ T30] audit: type=1326 audit(1757171378.259:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdeb4f8e7eb code=0x7ffc0000 [ 221.181064][ T30] audit: type=1326 audit(1757171378.259:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.335053][ T30] audit: type=1326 audit(1757171378.259:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.406513][ T30] audit: type=1326 audit(1757171378.259:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.456063][ T30] audit: type=1326 audit(1757171378.259:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.492144][ T30] audit: type=1326 audit(1757171378.299:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.587428][ T30] audit: type=1326 audit(1757171378.299:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 221.607454][ T9527] fuse: Bad value for 'fd' [ 222.709768][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.743183][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.771448][ T3566] bond0 (unregistering): Released all slaves [ 222.899445][ T5865] Bluetooth: hci2: command tx timeout [ 223.970806][ T3566] hsr_slave_0: left promiscuous mode [ 223.981611][ T3566] hsr_slave_1: left promiscuous mode [ 224.007765][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.049174][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.093452][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.131164][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.217671][ T8766] overlayfs: failed lookup in lower (newroot/29, name='bus', err=-40): overlapping layers [ 224.243320][ T3566] veth1_macvtap: left promiscuous mode [ 224.248922][ T3566] veth0_macvtap: left promiscuous mode [ 224.264775][ T8766] overlayfs: failed lookup in lower (newroot/29, name='bus', err=-40): overlapping layers [ 224.288703][ T3566] veth1_vlan: left promiscuous mode [ 224.319335][ T3566] veth0_vlan: left promiscuous mode [ 224.358395][ T9597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.979436][ T5865] Bluetooth: hci2: command tx timeout [ 225.744042][ T3566] team0 (unregistering): Port device team_slave_1 removed [ 225.916575][ T3566] team0 (unregistering): Port device team_slave_0 removed [ 226.285036][ T9634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.634609][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 226.883643][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 226.883661][ T30] audit: type=1326 audit(1757171384.359:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9644 comm="syz.0.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 227.076676][ T5865] Bluetooth: hci2: command tx timeout [ 227.324683][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.374132][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.411203][ T9503] bridge_slave_0: entered allmulticast mode [ 227.440989][ T9503] bridge_slave_0: entered promiscuous mode [ 227.486505][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.524381][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.579405][ T9503] bridge_slave_1: entered allmulticast mode [ 227.612788][ T9503] bridge_slave_1: entered promiscuous mode [ 227.932603][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.987998][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.145260][ T9665] ip_vti0: entered promiscuous mode [ 228.229837][ T9503] team0: Port device team_slave_0 added [ 228.243604][ T9503] team0: Port device team_slave_1 added [ 228.255818][ T9664] ip_vti0: left promiscuous mode [ 228.394324][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.404927][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.413766][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.434852][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.445742][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.485052][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.522852][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.657474][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.725514][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.741785][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.774304][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.066706][ T9503] hsr_slave_0: entered promiscuous mode [ 229.078085][ T9503] hsr_slave_1: entered promiscuous mode [ 229.085209][ T9503] debugfs: 'hsr0' already exists in 'hsr' [ 229.092332][ T9503] Cannot create hsr debugfs directory [ 229.143524][ T5183] Bluetooth: hci2: command tx timeout [ 229.334691][ T30] audit: type=1326 audit(1757171386.799:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x0 [ 230.052302][ T9503] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 230.122922][ T9503] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 230.191507][ T9503] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 230.218928][ T9503] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 230.266627][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 230.500980][ T5183] Bluetooth: hci3: command tx timeout [ 230.695102][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x60000003 [ 230.714565][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x60000307 [ 230.747507][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000004d8 [ 230.763966][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x4 [ 230.781259][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.799813][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.830443][ T9674] bridge_slave_0: entered allmulticast mode [ 230.854775][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000004d8 [ 230.867259][ T9674] bridge_slave_0: entered promiscuous mode [ 230.883188][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x4 [ 230.891885][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.892022][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.892174][ T9674] bridge_slave_1: entered allmulticast mode [ 230.974522][ T9674] bridge_slave_1: entered promiscuous mode [ 230.976160][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000004d8 [ 230.992942][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x4 [ 231.024938][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000004d8 [ 231.036061][ T9771] kvm: kvm [9770]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x4 [ 231.242047][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.255033][ T9786] fuse: Unknown parameter '0x0000000000000003' [ 231.268181][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.322364][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.549209][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.571654][ T9674] team0: Port device team_slave_0 added [ 231.601796][ T9674] team0: Port device team_slave_1 added [ 231.640676][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.647969][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.960927][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.968194][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.023924][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.044048][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.112658][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.145249][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.177472][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.264513][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.541247][ T9674] hsr_slave_0: entered promiscuous mode [ 232.548375][ T9674] hsr_slave_1: entered promiscuous mode [ 232.575283][ T9674] debugfs: 'hsr0' already exists in 'hsr' [ 232.581993][ T9674] Cannot create hsr debugfs directory [ 232.592051][ T5183] Bluetooth: hci3: command tx timeout [ 233.612409][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.655625][ T9674] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 233.732149][ T9674] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 233.786903][ T9674] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 233.927002][ T9674] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 233.990963][ T9861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 234.181674][ T30] audit: type=1326 audit(1757171391.649:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.3.1391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f456918ebe9 code=0x0 [ 234.436670][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.545100][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.594548][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.601775][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.659498][ T5183] Bluetooth: hci3: command tx timeout [ 234.672061][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.679258][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.956969][ T9674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.163564][ T9503] veth0_vlan: entered promiscuous mode [ 235.230458][ T9503] veth1_vlan: entered promiscuous mode [ 235.345944][ T9503] veth0_macvtap: entered promiscuous mode [ 235.436856][ T9503] veth1_macvtap: entered promiscuous mode [ 235.514866][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.567438][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.594789][ T9917] fuse: Unknown parameter '0x0000000000000003' [ 235.634977][ T1334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.671364][ T1334] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.702071][ T1334] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.733578][ T1334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.933002][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.030980][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.038836][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.223027][ T3175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.231817][ T9929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.271460][ T3175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.739653][ T5183] Bluetooth: hci3: command tx timeout [ 237.409054][ T9674] veth0_vlan: entered promiscuous mode [ 237.463886][ T9674] veth1_vlan: entered promiscuous mode [ 237.564517][ T9674] veth0_macvtap: entered promiscuous mode [ 237.603494][ T9674] veth1_macvtap: entered promiscuous mode [ 237.720560][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.761847][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.819294][ T3566] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.866852][ T3566] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.927523][ T3566] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.964268][ T3566] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.232435][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.267630][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.421748][ T3175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.470992][ T3175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.054888][T10105] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 244.508802][T10190] overlayfs: overlapping lowerdir path [ 245.082947][T10204] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1490'. [ 246.476070][T10242] fuse: Unknown parameter 'fd0x0000000000000003' [ 248.207755][T10276] fuse: Unknown parameter 'fd0x0000000000000003' [ 248.353050][ T30] audit: type=1326 audit(1757171405.819:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.8.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ff78ebe9 code=0x0 [ 248.429263][ T30] audit: type=1326 audit(1757171405.819:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.8.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ff78ebe9 code=0x0 [ 248.528551][ T30] audit: type=1326 audit(1757171405.969:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.8.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7f85ff7458e7 code=0x0 [ 248.783937][ T30] audit: type=1326 audit(1757171406.259:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 248.868130][ T30] audit: type=1326 audit(1757171406.289:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 248.929259][ T30] audit: type=1326 audit(1757171406.289:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 249.002100][ T30] audit: type=1326 audit(1757171406.289:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 249.105844][ T30] audit: type=1326 audit(1757171406.289:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 249.176077][ T30] audit: type=1326 audit(1757171406.289:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 249.243585][ T30] audit: type=1326 audit(1757171406.299:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb4f8ebe9 code=0x7ffc0000 [ 253.037448][T10361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.292364][T10371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 253.857342][T10389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 255.865239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872633][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.543668][T10466] ================================================================== [ 256.551786][T10466] BUG: KASAN: null-ptr-deref in io_sqe_buffer_register+0x369/0x20a0 [ 256.559808][T10466] Read of size 8 at addr 0000000000000000 by task syz.9.1583/10466 [ 256.567706][T10466] [ 256.570061][T10466] CPU: 1 UID: 0 PID: 10466 Comm: syz.9.1583 Not tainted syzkaller #0 PREEMPT(full) [ 256.570087][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.570105][T10466] Call Trace: [ 256.570114][T10466] [ 256.570123][T10466] dump_stack_lvl+0x189/0x250 [ 256.570156][T10466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.570181][T10466] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 256.570213][T10466] ? __virt_addr_valid+0x7c/0x5c0 [ 256.570238][T10466] ? io_sqe_buffer_register+0x369/0x20a0 [ 256.570263][T10466] kasan_report+0x118/0x150 [ 256.570291][T10466] ? rcu_is_watching+0x15/0xb0 [ 256.570310][T10466] ? io_sqe_buffer_register+0x369/0x20a0 [ 256.570340][T10466] kasan_check_range+0x2b0/0x2c0 [ 256.570369][T10466] io_sqe_buffer_register+0x369/0x20a0 [ 256.570405][T10466] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 256.570432][T10466] ? trace_kmalloc+0x1f/0xd0 [ 256.570455][T10466] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 256.570542][T10466] ? io_sqe_buffers_register+0x138/0x8e0 [ 256.570565][T10466] ? iovec_from_user+0x1ba/0x250 [ 256.570592][T10466] io_sqe_buffers_register+0x3b9/0x8e0 [ 256.570622][T10466] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 256.570647][T10466] ? __fget_files+0x3a0/0x420 [ 256.570674][T10466] ? __fget_files+0x2a/0x420 [ 256.570702][T10466] ? io_is_uring_fops+0xd/0x50 [ 256.570728][T10466] __se_sys_io_uring_register+0xb85/0x11b0 [ 256.570751][T10466] ? __se_sys_futex+0x36f/0x400 [ 256.570774][T10466] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 256.570797][T10466] ? rcu_is_watching+0x15/0xb0 [ 256.570817][T10466] ? do_syscall_64+0xbe/0xfa0 [ 256.570838][T10466] do_syscall_64+0xfa/0xfa0 [ 256.570857][T10466] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.570876][T10466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.570895][T10466] ? clear_bhb_loop+0x60/0xb0 [ 256.570916][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.570935][T10466] RIP: 0033:0x7fc324d8ebe9 [ 256.570964][T10466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.570982][T10466] RSP: 002b:00007fc325cf4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 256.571007][T10466] RAX: ffffffffffffffda RBX: 00007fc324fc5fa0 RCX: 00007fc324d8ebe9 [ 256.571023][T10466] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 256.571036][T10466] RBP: 00007fc324e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.571049][T10466] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 256.571062][T10466] R13: 00007fc324fc6038 R14: 00007fc324fc5fa0 R15: 00007ffc9c3d59e8 [ 256.571085][T10466] [ 256.571093][T10466] ================================================================== [ 256.949765][T10466] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.957084][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.9.1583 Not tainted syzkaller #0 PREEMPT(full) [ 256.966464][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.976519][T10466] Call Trace: [ 256.979799][T10466] [ 256.982728][T10466] dump_stack_lvl+0x99/0x250 [ 256.987669][T10466] ? __asan_memcpy+0x40/0x70 [ 256.992256][T10466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.997449][T10466] ? __pfx__printk+0x10/0x10 [ 257.002478][T10466] vpanic+0x237/0x6d0 [ 257.006460][T10466] ? __pfx_vpanic+0x10/0x10 [ 257.010964][T10466] ? preempt_schedule+0xae/0xc0 [ 257.015825][T10466] ? __pfx_preempt_schedule+0x10/0x10 [ 257.021203][T10466] panic+0xb9/0xc0 [ 257.024923][T10466] ? __pfx_panic+0x10/0x10 [ 257.029340][T10466] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 257.035239][T10466] ? io_sqe_buffer_register+0x369/0x20a0 [ 257.040866][T10466] check_panic_on_warn+0x89/0xb0 [ 257.045811][T10466] ? io_sqe_buffer_register+0x369/0x20a0 [ 257.051443][T10466] end_report+0x78/0x160 [ 257.055694][T10466] kasan_report+0x129/0x150 [ 257.060209][T10466] ? rcu_is_watching+0x15/0xb0 [ 257.064968][T10466] ? io_sqe_buffer_register+0x369/0x20a0 [ 257.070601][T10466] kasan_check_range+0x2b0/0x2c0 [ 257.075541][T10466] io_sqe_buffer_register+0x369/0x20a0 [ 257.081006][T10466] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 257.086897][T10466] ? trace_kmalloc+0x1f/0xd0 [ 257.091480][T10466] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 257.097039][T10466] ? io_sqe_buffers_register+0x138/0x8e0 [ 257.102669][T10466] ? iovec_from_user+0x1ba/0x250 [ 257.107607][T10466] io_sqe_buffers_register+0x3b9/0x8e0 [ 257.113067][T10466] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 257.119043][T10466] ? __fget_files+0x3a0/0x420 [ 257.123722][T10466] ? __fget_files+0x2a/0x420 [ 257.128320][T10466] ? io_is_uring_fops+0xd/0x50 [ 257.133083][T10466] __se_sys_io_uring_register+0xb85/0x11b0 [ 257.138886][T10466] ? __se_sys_futex+0x36f/0x400 [ 257.143740][T10466] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 257.149977][T10466] ? rcu_is_watching+0x15/0xb0 [ 257.154753][T10466] ? do_syscall_64+0xbe/0xfa0 [ 257.159424][T10466] do_syscall_64+0xfa/0xfa0 [ 257.163920][T10466] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.169199][T10466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.175346][T10466] ? clear_bhb_loop+0x60/0xb0 [ 257.180022][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.185908][T10466] RIP: 0033:0x7fc324d8ebe9 [ 257.190313][T10466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.209917][T10466] RSP: 002b:00007fc325cf4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 257.218330][T10466] RAX: ffffffffffffffda RBX: 00007fc324fc5fa0 RCX: 00007fc324d8ebe9 [ 257.226292][T10466] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 257.234260][T10466] RBP: 00007fc324e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.242223][T10466] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 257.250184][T10466] R13: 00007fc324fc6038 R14: 00007fc324fc5fa0 R15: 00007ffc9c3d59e8 [ 257.258167][T10466] [ 257.261492][T10466] Kernel Offset: disabled [ 257.265802][T10466] Rebooting in 86400 seconds..