last executing test programs: 3.381598418s ago: executing program 4 (id=132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x24, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x18, &(0x7f0000000400)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) 2.594114545s ago: executing program 3 (id=139): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x0) 2.221490207s ago: executing program 3 (id=144): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r1, 0xaea2, &(0x7f0000000040)={[{0x2, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0x4, 0x2, 0x7a, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.903699111s ago: executing program 3 (id=147): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x4042}, 0x10) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}, 0x1}}, 0x10, 0x0}, 0x0) 1.858044651s ago: executing program 1 (id=148): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB='%'], 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.684627s ago: executing program 1 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xfffffffe, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x10, 0x2, r2}) 1.675119107s ago: executing program 0 (id=150): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.47420471s ago: executing program 0 (id=151): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x5f88, 0x0, 0x0, 0x0) 1.448662868s ago: executing program 1 (id=152): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.368739876s ago: executing program 0 (id=153): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.218059693s ago: executing program 2 (id=154): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.154711222s ago: executing program 4 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xeeef0000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000fa3000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.122405966s ago: executing program 1 (id=156): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x54}}, 0x0) 1.018082419s ago: executing program 2 (id=157): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xc2b9, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xb}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) 909.51466ms ago: executing program 3 (id=158): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) 876.181018ms ago: executing program 4 (id=159): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_io_uring_setup(0xad2, &(0x7f0000000400)={0x0, 0x100025, 0x10300, 0x3, 0x200003e7}, &(0x7f0000002440)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, r4, {0x3}}, 0x18) 854.672808ms ago: executing program 1 (id=160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 730.8388ms ago: executing program 2 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4d0602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 622.40679ms ago: executing program 3 (id=162): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000000000000770200"]) 619.751771ms ago: executing program 2 (id=163): r0 = syz_io_uring_setup(0xf, &(0x7f0000000140)={0x0, 0x5881, 0x800, 0x0, 0x3d9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 569.44783ms ago: executing program 4 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0x4, 0x4, 0xd, '\x00', 0x100}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)=@arm64) 490.439581ms ago: executing program 0 (id=165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x71, &(0x7f0000000280)=""/4131, &(0x7f00000000c0)=0x2a8) 412.895593ms ago: executing program 2 (id=166): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) close(r0) 388.702012ms ago: executing program 1 (id=167): r0 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe69, 0x0, 0x1, 0x155}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 311.995794ms ago: executing program 3 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008804"]) 194.565288ms ago: executing program 0 (id=169): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 183.921567ms ago: executing program 4 (id=170): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) rename(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0) 23.613236ms ago: executing program 2 (id=171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 569.734µs ago: executing program 4 (id=172): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r1, r2+60000000}}, 0x0) unshare(0x40000000) 0s ago: executing program 0 (id=173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x20008004) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 72.193728][ T5822] cgroup: Unknown subsys name 'net' [ 72.320558][ T5822] cgroup: Unknown subsys name 'cpuset' [ 72.329018][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.901312][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.234212][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.242726][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.250873][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.259550][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.265950][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.274059][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.275661][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.282400][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.289987][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.295847][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.302683][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.319605][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.332160][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.350847][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.351678][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.358948][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.365794][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.379885][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.423751][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.432342][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.440299][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.448442][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.456375][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.463835][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.493451][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.501967][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.509882][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.518008][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.525716][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.539266][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.885589][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 77.069587][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 77.096457][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 77.113345][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 77.171901][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.192154][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.200148][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.209226][ T5844] bridge_slave_0: entered allmulticast mode [ 77.216142][ T5844] bridge_slave_0: entered promiscuous mode [ 77.248919][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.256215][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.263687][ T5844] bridge_slave_1: entered allmulticast mode [ 77.270770][ T5844] bridge_slave_1: entered promiscuous mode [ 77.382825][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.395450][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.418234][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.425351][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.436896][ T5849] bridge_slave_0: entered allmulticast mode [ 77.443626][ T5849] bridge_slave_0: entered promiscuous mode [ 77.489575][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.497135][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.504400][ T5849] bridge_slave_1: entered allmulticast mode [ 77.512308][ T5849] bridge_slave_1: entered promiscuous mode [ 77.533717][ T5844] team0: Port device team_slave_0 added [ 77.541341][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.551134][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560349][ T5850] bridge_slave_0: entered allmulticast mode [ 77.567702][ T5850] bridge_slave_0: entered promiscuous mode [ 77.612477][ T5844] team0: Port device team_slave_1 added [ 77.624952][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.636204][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.643905][ T5850] bridge_slave_1: entered allmulticast mode [ 77.651575][ T5850] bridge_slave_1: entered promiscuous mode [ 77.658459][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.665569][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.672869][ T5847] bridge_slave_0: entered allmulticast mode [ 77.680303][ T5847] bridge_slave_0: entered promiscuous mode [ 77.688856][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.695973][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.703326][ T5847] bridge_slave_1: entered allmulticast mode [ 77.710348][ T5847] bridge_slave_1: entered promiscuous mode [ 77.726868][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.734055][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.741621][ T5845] bridge_slave_0: entered allmulticast mode [ 77.748509][ T5845] bridge_slave_0: entered promiscuous mode [ 77.790662][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.798221][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.805407][ T5845] bridge_slave_1: entered allmulticast mode [ 77.812742][ T5845] bridge_slave_1: entered promiscuous mode [ 77.821898][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.833804][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.843763][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.850986][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.877316][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.900777][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.913015][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.964496][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.971980][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.998429][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.019033][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.033786][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.044880][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.058003][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.070520][ T5849] team0: Port device team_slave_0 added [ 78.120349][ T5849] team0: Port device team_slave_1 added [ 78.152742][ T5850] team0: Port device team_slave_0 added [ 78.161475][ T5847] team0: Port device team_slave_0 added [ 78.169801][ T5847] team0: Port device team_slave_1 added [ 78.185247][ T5845] team0: Port device team_slave_0 added [ 78.193370][ T5845] team0: Port device team_slave_1 added [ 78.212814][ T5850] team0: Port device team_slave_1 added [ 78.256350][ T5844] hsr_slave_0: entered promiscuous mode [ 78.263254][ T5844] hsr_slave_1: entered promiscuous mode [ 78.299167][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.306165][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.336809][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.350981][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.358618][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.384858][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.404823][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.411960][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.426954][ T54] Bluetooth: hci2: command tx timeout [ 78.438144][ T5842] Bluetooth: hci0: command tx timeout [ 78.443955][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.461190][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.468452][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.495458][ T5842] Bluetooth: hci1: command tx timeout [ 78.496202][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.513556][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.520696][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.546866][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.566928][ T5842] Bluetooth: hci4: command tx timeout [ 78.566944][ T54] Bluetooth: hci3: command tx timeout [ 78.579650][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.586605][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.612796][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.629400][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.636373][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.664148][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.676887][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.683866][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.710692][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.778324][ T5849] hsr_slave_0: entered promiscuous mode [ 78.784634][ T5849] hsr_slave_1: entered promiscuous mode [ 78.790937][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.798802][ T5849] Cannot create hsr debugfs directory [ 78.881881][ T5847] hsr_slave_0: entered promiscuous mode [ 78.888633][ T5847] hsr_slave_1: entered promiscuous mode [ 78.894602][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.903378][ T5847] Cannot create hsr debugfs directory [ 78.912212][ T5850] hsr_slave_0: entered promiscuous mode [ 78.921541][ T5850] hsr_slave_1: entered promiscuous mode [ 78.927759][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.935912][ T5850] Cannot create hsr debugfs directory [ 78.960445][ T5845] hsr_slave_0: entered promiscuous mode [ 78.966650][ T5845] hsr_slave_1: entered promiscuous mode [ 78.973002][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.980747][ T5845] Cannot create hsr debugfs directory [ 79.319215][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.330536][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.340853][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.351328][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.398914][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.422272][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.442839][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.463629][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.509093][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.532567][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.565051][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.589001][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.620108][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.630420][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.662421][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.692450][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.745249][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.756183][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.768080][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.780384][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.852646][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.932779][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.945444][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.974058][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.981433][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.015918][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.044764][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.051933][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.079519][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.086657][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.102020][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.109252][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.150152][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.170931][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.218983][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.230078][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.264036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.271251][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.281058][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.288260][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.307769][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.319288][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.326396][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.356214][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.363389][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.424914][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.474195][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.481362][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.491440][ T5842] Bluetooth: hci0: command tx timeout [ 80.497043][ T5842] Bluetooth: hci2: command tx timeout [ 80.504093][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.535120][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.542259][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.567195][ T5842] Bluetooth: hci1: command tx timeout [ 80.596265][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.617742][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.647190][ T5842] Bluetooth: hci4: command tx timeout [ 80.657039][ T5842] Bluetooth: hci3: command tx timeout [ 80.665336][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.726752][ T5844] veth0_vlan: entered promiscuous mode [ 80.754700][ T5849] veth0_vlan: entered promiscuous mode [ 80.783509][ T5844] veth1_vlan: entered promiscuous mode [ 80.793745][ T5849] veth1_vlan: entered promiscuous mode [ 80.802761][ T5847] veth0_vlan: entered promiscuous mode [ 80.849132][ T5847] veth1_vlan: entered promiscuous mode [ 80.869610][ T5845] veth0_vlan: entered promiscuous mode [ 80.901602][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.911543][ T5849] veth0_macvtap: entered promiscuous mode [ 80.920890][ T5845] veth1_vlan: entered promiscuous mode [ 80.943166][ T5849] veth1_macvtap: entered promiscuous mode [ 80.973101][ T5844] veth0_macvtap: entered promiscuous mode [ 80.986160][ T5844] veth1_macvtap: entered promiscuous mode [ 81.004289][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.018576][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.029361][ T5847] veth0_macvtap: entered promiscuous mode [ 81.051344][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.061049][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070793][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079743][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.104929][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.116151][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.129642][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.140449][ T5847] veth1_macvtap: entered promiscuous mode [ 81.153894][ T5845] veth0_macvtap: entered promiscuous mode [ 81.164492][ T5845] veth1_macvtap: entered promiscuous mode [ 81.184992][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.196027][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.216315][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.245049][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.254227][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.263299][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.272280][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293496][ T5850] veth0_vlan: entered promiscuous mode [ 81.308642][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.323930][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.334369][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.345156][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.357479][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.365225][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.376413][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.386634][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.397479][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.408309][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.418817][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.429792][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.462675][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.474812][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.485042][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.495761][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.507794][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.515481][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.526224][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.537375][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.549108][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.559044][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.569659][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.580999][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.591182][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600774][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.610434][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.619339][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.630673][ T5850] veth1_vlan: entered promiscuous mode [ 81.663031][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.672460][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.683331][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.694735][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.793406][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.808466][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.816358][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.819335][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.867419][ T5850] veth0_macvtap: entered promiscuous mode [ 81.890598][ T5850] veth1_macvtap: entered promiscuous mode [ 81.922576][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.934283][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.985895][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.988280][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.016816][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.019836][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.035183][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.046422][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057057][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.067781][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.077757][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.092060][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.111967][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.145424][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.146373][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.166009][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.169254][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.181315][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.191884][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.209307][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.219517][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.230104][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.240160][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.253991][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.266045][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.292711][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.316082][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.318439][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.342436][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.353940][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.376503][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.520160][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.548138][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.568632][ T5842] Bluetooth: hci0: command tx timeout [ 82.569348][ T54] Bluetooth: hci2: command tx timeout [ 82.646358][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.654463][ T54] Bluetooth: hci1: command tx timeout [ 82.665184][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.686522][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.707756][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.727176][ T54] Bluetooth: hci3: command tx timeout [ 82.727763][ T5842] Bluetooth: hci4: command tx timeout [ 82.803272][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.836840][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.028782][ T5899] sch_tbf: burst 88 is lower than device tunl0 mtu (1480) ! [ 83.653672][ T973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.856047][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.885505][ T973] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 104 [ 83.916364][ T973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.955347][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.986278][ T973] usb 3-1: Product: syz [ 83.999610][ T973] usb 3-1: Manufacturer: syz [ 84.016738][ T973] usb 3-1: SerialNumber: syz [ 84.314559][ T5913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.646901][ T5842] Bluetooth: hci0: command tx timeout [ 84.662053][ T5842] Bluetooth: hci2: command tx timeout [ 84.727308][ T5842] Bluetooth: hci1: command tx timeout [ 84.806889][ T5842] Bluetooth: hci4: command tx timeout [ 84.808071][ T54] Bluetooth: hci3: command tx timeout [ 84.954842][ T5913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.099668][ T5953] loop9: detected capacity change from 0 to 1 [ 85.137428][ T5953] Dev loop9: unable to read RDB block 1 [ 85.157578][ T5953] loop9: unable to read partition table [ 85.163540][ T5953] loop9: partition table beyond EOD, truncated [ 85.188896][ T973] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 85.196884][ T973] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 85.204405][ T973] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 85.233079][ T5953] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.398468][ T973] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 85.498553][ T973] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 85.617378][ T973] usb 3-1: USB disconnect, device number 2 [ 85.627325][ T973] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 85.842816][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.611186][ T5985] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 86.988794][ T8] cfg80211: failed to load regulatory.db [ 87.016843][ T58] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.226100][ T5991] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 87.277099][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 87.305061][ T58] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 87.327208][ T58] usb 3-1: config 0 has no interface number 0 [ 87.336365][ T58] usb 3-1: config 0 interface 163 has no altsetting 0 [ 87.371594][ T58] usb 3-1: New USB device found, idVendor=0dd8, idProduct=1060, bcdDevice=71.35 [ 87.406747][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.434009][ T58] usb 3-1: Product: syz [ 87.456818][ T58] usb 3-1: Manufacturer: syz [ 87.476768][ T58] usb 3-1: SerialNumber: syz [ 87.498412][ T58] usb 3-1: config 0 descriptor?? [ 87.529331][ T58] usb-storage 3-1:0.163: USB Mass Storage device detected [ 87.601409][ T58] usb-storage 3-1:0.163: Quirks match for vid 0dd8 pid 1060: 8 [ 87.614700][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 87.734097][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.939311][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 87.952230][ T25] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 87.963409][ T25] usb 2-1: config 0 has no interface number 0 [ 87.984941][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 87.999031][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.017423][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.017689][ T25] usb 2-1: Product: syz [ 88.051088][ T25] usb 2-1: Manufacturer: syz [ 88.055751][ T25] usb 2-1: SerialNumber: syz [ 88.103724][ T25] usb 2-1: config 0 descriptor?? [ 88.123923][ T25] smsc95xx v2.0.0 [ 88.216059][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 88.253227][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.265643][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.303666][ T5881] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.323288][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.364797][ T5881] usb 5-1: config 0 descriptor?? [ 88.555093][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 88.569605][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.846128][ T5881] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 88.991538][ T5929] Set syz1 is full, maxelem 65536 reached [ 89.196388][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 89.212710][ T25] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 89.228146][ T25] usb 2-1: USB disconnect, device number 2 [ 89.533732][ T5881] usb 3-1: USB disconnect, device number 3 [ 89.629332][ T5885] usb 5-1: USB disconnect, device number 2 [ 90.094306][ T6029] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 90.113732][ T25] IPVS: starting estimator thread 0... [ 90.207102][ T6032] IPVS: using max 19 ests per chain, 45600 per kthread [ 91.176899][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.357022][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 91.364156][ T25] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 91.378338][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 91.397700][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 91.419262][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 91.442455][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.471921][ T25] usb 4-1: config 0 has no interface number 0 [ 91.478971][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 91.490789][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 91.501339][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.513437][ T25] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.530594][ T25] usb 4-1: config 0 interface 125 has no altsetting 0 [ 91.538271][ T25] usb 4-1: config 0 interface 125 has no altsetting 2 [ 91.560425][ T25] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 91.580595][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.590594][ T25] usb 4-1: Product: syz [ 91.596738][ T25] usb 4-1: Manufacturer: syz [ 91.601491][ T25] usb 4-1: SerialNumber: syz [ 91.615723][ T25] usb 4-1: config 0 descriptor?? [ 91.625078][ T25] usb 4-1: selecting invalid altsetting 2 [ 92.028477][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.044777][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.074384][ T6091] team0: entered promiscuous mode [ 92.083904][ T6091] team_slave_0: entered promiscuous mode [ 92.121580][ T6091] team_slave_1: entered promiscuous mode [ 92.134654][ T6091] team0: left promiscuous mode [ 92.143727][ T6091] team_slave_0: left promiscuous mode [ 92.166371][ T6091] team_slave_1: left promiscuous mode [ 92.676868][ T973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.706480][ T5881] usb 4-1: USB disconnect, device number 2 [ 92.869636][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.886272][ T973] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.909812][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.929363][ T973] usb 1-1: config 0 descriptor?? [ 93.117065][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.167880][ T973] usbhid 1-1:0.0: can't add hid device: -71 [ 93.175346][ T973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.198760][ T973] usb 1-1: USB disconnect, device number 2 [ 93.223490][ T5848] udevd[5848]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory [ 93.251828][ T5848] udevd[5848]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 93.281347][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 93.311202][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 93.349722][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.394274][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.427050][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.435114][ T9] usb 2-1: Product: syz [ 93.472403][ T9] usb 2-1: Manufacturer: syz [ 93.489647][ T9] usb 2-1: SerialNumber: syz [ 93.516035][ T9] usb 2-1: config 0 descriptor?? [ 93.541741][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.567248][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 93.646893][ T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.826851][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 93.836134][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.868066][ T973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 93.886796][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.898165][ T973] usb 1-1: config 0 descriptor?? [ 93.918228][ T973] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.944993][ T973] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.166326][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 94.175067][ T9] em28xx 2-1:0.0: Config register raw data: 0xe9 [ 94.182341][ T9] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 94.196770][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 94.589605][ T9] usb 2-1: USB disconnect, device number 3 [ 94.896947][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.076831][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 95.087705][ T5885] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 95.098290][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.106369][ T5885] usb 5-1: Product: syz [ 95.107012][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.111337][ T5885] usb 5-1: Manufacturer: syz [ 95.130236][ T5885] usb 5-1: SerialNumber: syz [ 95.144405][ T5885] usb 5-1: config 0 descriptor?? [ 95.176988][ T973] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.284422][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.302148][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.313208][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.325865][ T9] usb 4-1: config 0 descriptor?? [ 95.356934][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 95.369075][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.406823][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.422149][ T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 95.431335][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.467898][ T973] usb 3-1: config 0 descriptor?? [ 95.588615][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 95.594736][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.604881][ T5885] airspy 5-1:0.0: Board ID: 00 [ 95.625867][ T5885] airspy 5-1:0.0: Firmware version: [ 95.643996][ T9] usb 4-1: USB disconnect, device number 3 [ 95.653920][ T5881] usb 1-1: USB disconnect, device number 3 [ 95.684670][ T5881] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 95.902795][ T973] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0002/input/input5 [ 95.994074][ T973] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 96.146861][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.306958][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 96.314238][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.326521][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.333491][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 96.342819][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.354244][ T9] usb 4-1: config 0 descriptor?? [ 96.418274][ T5885] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 96.450383][ T5885] airspy 5-1:0.0: Registered as swradio24 [ 96.456500][ T5885] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 96.475355][ T5885] usb 5-1: USB disconnect, device number 3 [ 96.748269][ T973] usb 3-1: USB disconnect, device number 4 [ 96.783904][ T9] nzxt-smart2 0003:1E71:2009.0003: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 97.155837][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.200855][ T5882] usb 4-1: USB disconnect, device number 4 [ 97.856963][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.046896][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 98.071504][ T5882] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 98.081923][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.109870][ T5882] usb 3-1: config 0 descriptor?? [ 98.146847][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.320189][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 98.345774][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.365132][ T9] usb 5-1: config 0 descriptor?? [ 98.385066][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 98.758847][ T6234] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.796224][ T973] IPVS: starting estimator thread 0... [ 98.797511][ T6232] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.808308][ T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 98.886927][ T6237] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.218067][ T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 99.349394][ T5882] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 99.376860][ T5882] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 99.410338][ T5882] asix 3-1:0.0: probe with driver asix failed with error -71 [ 99.443997][ T9] usb 5-1: USB disconnect, device number 4 [ 99.450452][ T5882] usb 3-1: USB disconnect, device number 5 [ 99.622541][ T6257] loop2: detected capacity change from 0 to 7 [ 99.631378][ T6257] Dev loop2: unable to read RDB block 7 [ 99.642876][ T6257] loop2: unable to read partition table [ 99.650510][ T6257] loop2: partition table beyond EOD, truncated [ 99.657637][ T6257] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.662126][ T6286] Zero length message leads to an empty skb [ 101.276736][ C1] [ 101.279127][ C1] ============================= [ 101.284090][ C1] [ BUG: Invalid wait context ] [ 101.288971][ C1] 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 Not tainted [ 101.295767][ C1] ----------------------------- [ 101.300729][ C1] syz.4.172/6312 is trying to lock: [ 101.305957][ C1] ffff88813fffc298 (&zone->lock){-.-.}-{3:3}, at: get_page_from_freelist+0xb3d/0x37a0 [ 101.315614][ C1] other info that might help us debug this: [ 101.321535][ C1] context-{2:2} [ 101.325026][ C1] 2 locks held by syz.4.172/6312: [ 101.330082][ C1] #0: ffffffff8fcb5050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 101.339641][ C1] #1: ffff8880b8744958 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0 [ 101.349639][ C1] stack backtrace: [ 101.353398][ C1] CPU: 1 UID: 0 PID: 6312 Comm: syz.4.172 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 101.353422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 101.353440][ C1] Call Trace: [ 101.353448][ C1] [ 101.353456][ C1] dump_stack_lvl+0x241/0x360 [ 101.353490][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.353517][ C1] ? __pfx__printk+0x10/0x10 [ 101.353540][ C1] ? try_to_wake_up+0x959/0x1470 [ 101.353569][ C1] __lock_acquire+0x15a8/0x2100 [ 101.353598][ C1] lock_acquire+0x1ed/0x550 [ 101.353619][ C1] ? get_page_from_freelist+0xb3d/0x37a0 [ 101.353645][ C1] ? __pfx_validate_chain+0x10/0x10 [ 101.353672][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 101.353717][ C1] ? __pfx_validate_chain+0x10/0x10 [ 101.353744][ C1] ? __pfx_validate_chain+0x10/0x10 [ 101.353773][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 101.353799][ C1] ? get_page_from_freelist+0xb3d/0x37a0 [ 101.353822][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 101.353852][ C1] get_page_from_freelist+0xb3d/0x37a0 [ 101.353896][ C1] __alloc_pages_noprof+0x292/0x710 [ 101.353920][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 101.353945][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.353977][ C1] ? __kernel_text_address+0xd/0x40 [ 101.354003][ C1] ? unwind_get_return_address+0x4d/0x90 [ 101.354037][ C1] alloc_pages_mpol_noprof+0x3e1/0x780 [ 101.354066][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 101.354092][ C1] ? stack_trace_save+0x118/0x1d0 [ 101.354122][ C1] ? alloc_pages_noprof+0x43/0x170 [ 101.354148][ C1] stack_depot_save_flags+0x72d/0x940 [ 101.354180][ C1] kasan_save_stack+0x4f/0x60 [ 101.354200][ C1] ? kasan_save_stack+0x3f/0x60 [ 101.354218][ C1] ? __kasan_record_aux_stack+0xac/0xc0 [ 101.354246][ C1] ? task_work_add+0xd9/0x490 [ 101.354270][ C1] ? run_posix_cpu_timers+0x6ac/0x810 [ 101.354296][ C1] ? tick_nohz_handler+0x37c/0x500 [ 101.354325][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 101.354351][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 101.354376][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 101.354401][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 101.354428][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.354449][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 101.354474][ C1] ? __rmqueue_pcplist+0x21fd/0x2a90 [ 101.354494][ C1] ? get_page_from_freelist+0x886/0x37a0 [ 101.354515][ C1] ? __alloc_pages_noprof+0x292/0x710 [ 101.354536][ C1] ? alloc_pages_mpol_noprof+0x3e1/0x780 [ 101.354562][ C1] ? stack_depot_save_flags+0x72d/0x940 [ 101.354590][ C1] ? kasan_save_track+0x51/0x80 [ 101.354610][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 101.354631][ C1] ? __kmalloc_node_noprof+0x290/0x4d0 [ 101.354659][ C1] ? alloc_slab_obj_exts+0x3a/0xa0 [ 101.354684][ C1] ? __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 101.354705][ C1] ? __kmalloc_noprof+0x305/0x4c0 [ 101.354731][ C1] ? __register_sysctl_table+0xd4/0x1430 [ 101.354756][ C1] ? devinet_init_net+0x3e4/0x850 [ 101.354775][ C1] ? ops_init+0x31e/0x590 [ 101.354804][ C1] ? setup_net+0x287/0x9e0 [ 101.354830][ C1] ? copy_net_ns+0x33f/0x570 [ 101.354856][ C1] ? create_new_namespaces+0x425/0x7b0 [ 101.354886][ C1] ? unshare_nsproxy_namespaces+0x124/0x180 [ 101.354917][ C1] ? ksys_unshare+0x57d/0xa70 [ 101.354936][ C1] ? __ia32_sys_unshare+0x37/0x40 [ 101.354957][ C1] ? __do_fast_syscall_32+0xb4/0x110 [ 101.354975][ C1] ? do_fast_syscall_32+0x34/0x80 [ 101.354993][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.355034][ C1] ? __phys_addr+0xba/0x170 [ 101.355059][ C1] __kasan_record_aux_stack+0xac/0xc0 [ 101.355091][ C1] task_work_add+0xd9/0x490 [ 101.355118][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 101.355140][ C1] ? __pfx_task_work_add+0x10/0x10 [ 101.355171][ C1] run_posix_cpu_timers+0x6ac/0x810 [ 101.355203][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 101.355231][ C1] ? sched_balance_trigger+0x1a3/0x890 [ 101.355257][ C1] tick_nohz_handler+0x37c/0x500 [ 101.355289][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 101.355320][ C1] __hrtimer_run_queues+0x551/0xd30 [ 101.355355][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 101.355381][ C1] ? sched_clock+0x4a/0x70 [ 101.355399][ C1] ? read_tsc+0x9/0x20 [ 101.355416][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 101.355441][ C1] hrtimer_interrupt+0x403/0xa40 [ 101.355478][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 101.355505][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 101.355533][ C1] [ 101.355540][ C1] [ 101.355547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.355577][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 101.355606][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e e4 2f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 8d 97 f5 65 8b 05 e4 c4 2d 74 85 c0 74 43 48 c7 04 24 0e 36 [ 101.355623][ C1] RSP: 0018:ffffc9000cdeee80 EFLAGS: 00000206 [ 101.355643][ C1] RAX: 331a6bf433601a00 RBX: 1ffff920019bddd4 RCX: ffffffff817b480a [ 101.355659][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a8e80 RDI: 0000000000000001 [ 101.355674][ C1] RBP: ffffc9000cdeef18 R08: ffffffff942ed847 R09: 1ffffffff285db08 [ 101.355688][ C1] R10: dffffc0000000000 R11: fffffbfff285db09 R12: dffffc0000000000 [ 101.355703][ C1] R13: 1ffff920019bddd0 R14: ffffc9000cdeeea0 R15: 0000000000000246 [ 101.355721][ C1] ? mark_lock+0x9a/0x360 [ 101.355749][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.355780][ C1] __rmqueue_pcplist+0x21fd/0x2a90 [ 101.355820][ C1] get_page_from_freelist+0x886/0x37a0 [ 101.355851][ C1] ? __pfx___might_resched+0x10/0x10 [ 101.355883][ C1] __alloc_pages_noprof+0x292/0x710 [ 101.355906][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 101.355928][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 101.355953][ C1] ? kernel_text_address+0xa7/0xe0 [ 101.355982][ C1] ? arch_stack_walk+0xfd/0x150 [ 101.356009][ C1] alloc_pages_mpol_noprof+0x3e1/0x780 [ 101.356044][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 101.356070][ C1] ? stack_trace_save+0x118/0x1d0 [ 101.356102][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 101.356131][ C1] ? alloc_pages_noprof+0xef/0x170 [ 101.356158][ C1] stack_depot_save_flags+0x72d/0x940 [ 101.356191][ C1] kasan_save_track+0x51/0x80 [ 101.356211][ C1] ? kasan_save_track+0x3f/0x80 [ 101.356230][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 101.356251][ C1] ? __kmalloc_node_noprof+0x290/0x4d0 [ 101.356277][ C1] ? alloc_slab_obj_exts+0x3a/0xa0 [ 101.356302][ C1] ? __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 101.356323][ C1] ? __kmalloc_noprof+0x305/0x4c0 [ 101.356349][ C1] ? __register_sysctl_table+0xd4/0x1430 [ 101.356374][ C1] ? devinet_init_net+0x3e4/0x850 [ 101.356393][ C1] ? ops_init+0x31e/0x590 [ 101.356420][ C1] ? setup_net+0x287/0x9e0 [ 101.356446][ C1] ? copy_net_ns+0x33f/0x570 [ 101.356472][ C1] ? create_new_namespaces+0x425/0x7b0 [ 101.356501][ C1] ? unshare_nsproxy_namespaces+0x124/0x180 [ 101.356532][ C1] ? ksys_unshare+0x57d/0xa70 [ 101.356552][ C1] ? __ia32_sys_unshare+0x37/0x40 [ 101.356572][ C1] ? __do_fast_syscall_32+0xb4/0x110 [ 101.356590][ C1] ? do_fast_syscall_32+0x34/0x80 [ 101.356607][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.356657][ C1] __kasan_kmalloc+0x98/0xb0 [ 101.356678][ C1] __kmalloc_node_noprof+0x290/0x4d0 [ 101.356703][ C1] ? alloc_slab_obj_exts+0x3a/0xa0 [ 101.356731][ C1] alloc_slab_obj_exts+0x3a/0xa0 [ 101.356755][ C1] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 101.356778][ C1] ? kasan_unpoison+0x46/0x70 [ 101.356797][ C1] __kmalloc_noprof+0x305/0x4c0 [ 101.356824][ C1] ? __register_sysctl_table+0xd4/0x1430 [ 101.356851][ C1] __register_sysctl_table+0xd4/0x1430 [ 101.356876][ C1] ? nlmsg_notify+0xfb/0x1c0 [ 101.356899][ C1] ? __devinet_sysctl_register+0x23b/0x2a0 [ 101.356920][ C1] ? __pfx___register_sysctl_table+0x10/0x10 [ 101.356946][ C1] ? is_module_address+0x27/0x50 [ 101.356965][ C1] ? register_net_sysctl_sz+0x33e/0x3b0 [ 101.356993][ C1] devinet_init_net+0x3e4/0x850 [ 101.357026][ C1] ops_init+0x31e/0x590 [ 101.357057][ C1] ? lockdep_init_map_type+0xa1/0x910 [ 101.357081][ C1] setup_net+0x287/0x9e0 [ 101.357108][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 101.357131][ C1] ? __pfx_setup_net+0x10/0x10 [ 101.357164][ C1] copy_net_ns+0x33f/0x570 [ 101.357194][ C1] create_new_namespaces+0x425/0x7b0 [ 101.357231][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 101.357264][ C1] ksys_unshare+0x57d/0xa70 [ 101.357289][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 101.357310][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.357336][ C1] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 101.357368][ C1] __ia32_sys_unshare+0x37/0x40 [ 101.357390][ C1] __do_fast_syscall_32+0xb4/0x110 [ 101.357409][ C1] ? exc_page_fault+0x590/0x8b0 [ 101.357438][ C1] do_fast_syscall_32+0x34/0x80 [ 101.357456][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.357481][ C1] RIP: 0023:0xf7f50579 [ 101.357505][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 101.357521][ C1] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 101.357543][ C1] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 101.357558][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.357569][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.357581][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.357592][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.357611][ C1] [ 101.395035][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 101.398696][ C1] vkms_vblank_simulate: vblank timer overrun