last executing test programs: 1m3.081023087s ago: executing program 1 (id=8): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m2.894242876s ago: executing program 1 (id=9): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) rename(&(0x7f0000000000)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', &(0x7f0000000440)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00') sendfile(r0, r0, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x4880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffffffffffe2c) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x3) 1m0.797836164s ago: executing program 1 (id=18): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x9, 0x2, 0x0, 0xf, 0x7, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 58.895906565s ago: executing program 1 (id=27): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 58.636741738s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 58.454640678s ago: executing program 1 (id=30): setns(0xc9, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0xf5}, @val, @mpls={[{0x1, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xfc, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b"}, {0x4, 0x7, "ad4b0531f50dd1048b7837eb7a3e6c96272d8d7af439cfce5a719b0e547bd0cbd3abe061bd9e941dcd39a53ed58f3e53e145b7cf6e223fc6d7f67f55cb"}]}}}}}, 0x136) 43.402798603s ago: executing program 32 (id=30): setns(0xc9, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0xf5}, @val, @mpls={[{0x1, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xfc, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b"}, {0x4, 0x7, "ad4b0531f50dd1048b7837eb7a3e6c96272d8d7af439cfce5a719b0e547bd0cbd3abe061bd9e941dcd39a53ed58f3e53e145b7cf6e223fc6d7f67f55cb"}]}}}}}, 0x136) 8.614347129s ago: executing program 0 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x7ed9508c4c099579, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x3, 0x2, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x884c0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x24}}, 0x0) 6.775250816s ago: executing program 0 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 6.674225428s ago: executing program 0 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x20000, 0x1) getdents64(r1, 0x0, 0x0) 6.604415343s ago: executing program 0 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 6.554276872s ago: executing program 0 (id=319): fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x9, 0x2f93) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x80002, 0x0) 6.312793145s ago: executing program 0 (id=323): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x80, 0x8800) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, 0x0) 4.004498773s ago: executing program 2 (id=339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 3.914622488s ago: executing program 2 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x7ed9508c4c099579, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x3, 0x2, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x884c0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x24}}, 0x0) 3.663696989s ago: executing program 4 (id=341): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xab94, 0xd, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0x40, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x484, 0xc, 0x9, 0xffe, 0x80000001, 0xa, 0x0, 0x1, 0x8001, 0x1]}) 3.663098342s ago: executing program 4 (id=342): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020007000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8942, &(0x7f0000000340)={'veth1_to_bridge\x00', @ifru_hwaddr=@multicast}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="180100003412000000000000000000001501010034120000950000000000ffdced02027b5c20000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020600) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0xffff, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xffffffffffffffff, 0x2, 0x1ff, 0xfefffff5, 0x9, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x10, 0x0, 0xff}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7, 0x1) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000300)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\x96\\\\//\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 2.62235843s ago: executing program 4 (id=345): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0xdf) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 2.220137036s ago: executing program 2 (id=346): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000010000100"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2.143464337s ago: executing program 2 (id=347): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe2000, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890d, 0x0) 1.227606858s ago: executing program 4 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xb, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 1.122998788s ago: executing program 4 (id=350): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000640), 0xf501, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x7, r1}, 0x38) 1.122329585s ago: executing program 3 (id=351): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="14"], 0x3c}}, 0x0) 1.052770725s ago: executing program 3 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 981.955985ms ago: executing program 3 (id=353): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020007000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8942, &(0x7f0000000340)={'veth1_to_bridge\x00', @ifru_hwaddr=@multicast}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="180100003412000000000000000000001501010034120000950000000000ffdced02027b5c20000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020600) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0xffff, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xffffffffffffffff, 0x2, 0x1ff, 0xfefffff5, 0x9, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x10, 0x0, 0xff}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7, 0x1) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000300)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\x96\\\\//\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 884.187137ms ago: executing program 4 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x7ed9508c4c099579, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x3, 0x2, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x884c0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x24}}, 0x0) 153.051338ms ago: executing program 2 (id=355): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000010000100"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 74.478261ms ago: executing program 2 (id=356): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0xdf) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 73.71148ms ago: executing program 3 (id=357): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x782810a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2900000001"], 0x29) 467.19µs ago: executing program 3 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xb, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 0s ago: executing program 3 (id=359): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36880' (ED25519) to the list of known hosts. [ 33.952052][ T5647] cgroup: Unknown subsys name 'net' [ 34.085690][ T5647] cgroup: Unknown subsys name 'cpuset' [ 34.091920][ T5647] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.086943][ T5647] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.005202][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.006258][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.006904][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.008219][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.008393][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.009319][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.009908][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.010019][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.010085][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.013259][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.013769][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.013832][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.014982][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.017405][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.023646][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.024223][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.034088][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.034704][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.035458][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.046760][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.674293][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.674343][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.674409][ T5732] bridge_slave_0: entered allmulticast mode [ 39.675175][ T5732] bridge_slave_0: entered promiscuous mode [ 39.688583][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.688654][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.689015][ T5746] bridge_slave_0: entered allmulticast mode [ 39.690288][ T5746] bridge_slave_0: entered promiscuous mode [ 39.718945][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.719020][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.719111][ T5732] bridge_slave_1: entered allmulticast mode [ 39.720297][ T5732] bridge_slave_1: entered promiscuous mode [ 39.742098][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.746778][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.747943][ T5746] bridge_slave_1: entered allmulticast mode [ 39.752927][ T5746] bridge_slave_1: entered promiscuous mode [ 39.822876][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.822982][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.823088][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.823182][ T5734] bridge_slave_0: entered allmulticast mode [ 39.824061][ T5734] bridge_slave_0: entered promiscuous mode [ 39.827224][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.835403][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.841735][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.841813][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.841907][ T5734] bridge_slave_1: entered allmulticast mode [ 39.843182][ T5734] bridge_slave_1: entered promiscuous mode [ 39.851103][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.889419][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.889498][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.889590][ T5733] bridge_slave_0: entered allmulticast mode [ 39.890888][ T5733] bridge_slave_0: entered promiscuous mode [ 39.894805][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.906145][ T5732] team0: Port device team_slave_0 added [ 39.914579][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.914692][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.914789][ T5733] bridge_slave_1: entered allmulticast mode [ 39.916030][ T5733] bridge_slave_1: entered promiscuous mode [ 39.932395][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.934233][ T5732] team0: Port device team_slave_1 added [ 39.949878][ T5746] team0: Port device team_slave_0 added [ 39.950753][ T5734] team0: Port device team_slave_0 added [ 39.965766][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.979668][ T5734] team0: Port device team_slave_1 added [ 39.980707][ T5746] team0: Port device team_slave_1 added [ 39.981505][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.981517][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.981538][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.983402][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.984131][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.984142][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.984163][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.035920][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.035936][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.035956][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.036905][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.036918][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.036937][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.047765][ T5733] team0: Port device team_slave_0 added [ 40.049855][ T5733] team0: Port device team_slave_1 added [ 40.050275][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.050284][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.050301][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.060249][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.060263][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.060281][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.089857][ T5732] hsr_slave_0: entered promiscuous mode [ 40.090318][ T5732] hsr_slave_1: entered promiscuous mode [ 40.097979][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.097995][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.098015][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.099679][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.099688][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.099702][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.154034][ T5746] hsr_slave_0: entered promiscuous mode [ 40.154507][ T5746] hsr_slave_1: entered promiscuous mode [ 40.154823][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 40.154872][ T5746] Cannot create hsr debugfs directory [ 40.164553][ T5733] hsr_slave_0: entered promiscuous mode [ 40.164981][ T5733] hsr_slave_1: entered promiscuous mode [ 40.165299][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 40.165310][ T5733] Cannot create hsr debugfs directory [ 40.176887][ T5734] hsr_slave_0: entered promiscuous mode [ 40.177687][ T5734] hsr_slave_1: entered promiscuous mode [ 40.178198][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 40.178217][ T5734] Cannot create hsr debugfs directory [ 40.457502][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.467557][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.486376][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.492034][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.492900][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.498169][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.500745][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.504651][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.554922][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.565815][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.571123][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.575746][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.576410][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.579353][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.588993][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.591447][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.627761][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.632850][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.633441][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.635527][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.640269][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.644242][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.646912][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.652181][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.705565][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.707624][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.708727][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.717043][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.717549][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.719544][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.730949][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.735396][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.808689][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.860412][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.873845][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.877560][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.878353][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.890765][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.890837][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.901400][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.941819][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.955655][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.955745][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.960253][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.978550][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.978598][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.979996][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.980040][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.984147][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.006276][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.006323][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.028948][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.042445][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.042495][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.056051][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.056158][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.099419][ T5740] Bluetooth: hci1: command tx timeout [ 41.099576][ T5740] Bluetooth: hci3: command tx timeout [ 41.099602][ T5092] Bluetooth: hci2: command tx timeout [ 41.099831][ T5740] Bluetooth: hci0: command tx timeout [ 41.347861][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.382688][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.393991][ T5732] veth0_vlan: entered promiscuous mode [ 41.398232][ T5732] veth1_vlan: entered promiscuous mode [ 41.412853][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.414570][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.451592][ T5732] veth0_macvtap: entered promiscuous mode [ 41.454960][ T5746] veth0_vlan: entered promiscuous mode [ 41.460352][ T5732] veth1_macvtap: entered promiscuous mode [ 41.477614][ T5746] veth1_vlan: entered promiscuous mode [ 41.482576][ T5734] veth0_vlan: entered promiscuous mode [ 41.489683][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.499417][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.503589][ T5734] veth1_vlan: entered promiscuous mode [ 41.507923][ T5733] veth0_vlan: entered promiscuous mode [ 41.522613][ T5733] veth1_vlan: entered promiscuous mode [ 41.537321][ T5746] veth0_macvtap: entered promiscuous mode [ 41.545859][ T5746] veth1_macvtap: entered promiscuous mode [ 41.574264][ T5734] veth0_macvtap: entered promiscuous mode [ 41.579147][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.580542][ T5733] veth0_macvtap: entered promiscuous mode [ 41.595083][ T5734] veth1_macvtap: entered promiscuous mode [ 41.596530][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.600877][ T5733] veth1_macvtap: entered promiscuous mode [ 41.617133][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.618782][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.618793][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.629673][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.632161][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.641779][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.660922][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.660935][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.662911][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.689186][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.689478][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.689752][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.689940][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690438][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.753287][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.770730][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.772669][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.772686][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.775016][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.775625][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.783087][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.813123][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.813142][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.833602][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.833621][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.879251][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.879272][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.897263][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.897277][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.950065][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.950133][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.959612][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.959914][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960101][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960128][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960151][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960172][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960198][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960220][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960242][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960267][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.982569][ T5882] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 42.210700][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.452891][ T5897] overlayfs: failed to resolve './bus': -2 [ 42.455517][ T5893] ceph: No mds server is up or the cluster is laggy [ 42.512048][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 42.524474][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 42.632621][ T5884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.180811][ T5745] Bluetooth: hci3: command tx timeout [ 43.180842][ T5092] Bluetooth: hci1: command tx timeout [ 43.180845][ T5745] Bluetooth: hci0: command tx timeout [ 43.297386][ T5596] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 43.299306][ T5596] wiimote 0005:057E:0330.0002: New device registered [ 43.326297][ T5902] wiimote 0005:057E:0330.0002: Device removed [ 43.397807][ T5907] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 43.397839][ T5907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8'. [ 43.577484][ T5905] fido_id[5905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.948670][ T5811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.998841][ T5736] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 44.118686][ T5811] usb 6-1: Using ep0 maxpacket: 16 [ 44.119294][ T5811] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 44.121475][ T5811] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.121497][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 44.121516][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.127693][ T5811] usb 6-1: config 0 descriptor?? [ 44.130732][ T5811] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 44.159488][ T5736] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 44.160540][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.160563][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.160580][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 44.160610][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.163755][ T5736] usb 5-1: config 0 descriptor?? [ 44.389700][ T5596] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 44.431342][ T5596] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6 [ 44.468673][ T5740] Bluetooth: hci2: command tx timeout [ 44.469900][ T5596] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7 [ 44.486033][ T5596] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input5 [ 44.581364][ T1156] IPVS: starting estimator thread 0... [ 44.649830][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.668336][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.673944][ T5921] IPVS: using max 27 ests per chain, 64800 per kthread [ 44.787196][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x6 [ 44.787220][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787232][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787244][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787256][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787267][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787278][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787290][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787301][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787312][ T5736] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 44.787355][ T5736] acrux 0003:1A34:0802.0003: item fetching failed at offset 37/41 [ 44.787971][ T5736] acrux 0003:1A34:0802.0003: parse failed [ 44.788001][ T5736] acrux 0003:1A34:0802.0003: probe with driver acrux failed with error -22 [ 44.978683][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.130231][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 45.130677][ T9] usb 7-1: config 0 has no interfaces? [ 45.130694][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.136133][ T9] usb 7-1: config 0 descriptor?? [ 45.258678][ T5740] Bluetooth: hci3: command tx timeout [ 45.259351][ T5740] Bluetooth: hci0: command tx timeout [ 45.351058][ T57] usb 7-1: USB disconnect, device number 2 [ 45.571037][ T42] usb 6-1: USB disconnect, device number 2 [ 45.860731][ T5942] evm: overlay not supported [ 45.867089][ T5942] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 45.928675][ T5944] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 45.979933][ T5740] Bluetooth: hci1: command tx timeout [ 46.397353][ T5961] FAULT_INJECTION: forcing a failure. [ 46.397353][ T5961] name failslab, interval 1, probability 0, space 0, times 1 [ 46.397376][ T5961] CPU: 3 UID: 0 PID: 5961 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 46.397390][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.397397][ T5961] Call Trace: [ 46.397402][ T5961] [ 46.397407][ T5961] dump_stack_lvl+0x100/0x190 [ 46.397427][ T5961] should_fail_ex.cold+0x5/0xa [ 46.397443][ T5961] should_failslab+0xc2/0x120 [ 46.397463][ T5961] __kmalloc_cache_noprof+0x91/0x6d0 [ 46.397476][ T5961] ? __request_region+0x5c/0xf0 [ 46.397491][ T5961] __request_region+0x5c/0xf0 [ 46.397506][ T5961] __comedi_check_request_region+0xfb/0x130 [ 46.397589][ T5961] comedi_check_request_region+0x3c/0xc0 [ 46.397605][ T5961] das16m1_attach+0x8a/0xc30 [ 46.397627][ T5961] comedi_device_attach+0x40e/0x6b0 [ 46.397647][ T5961] do_devconfig_ioctl+0x1b3/0x6d0 [ 46.397665][ T5961] ? comedi_unlocked_ioctl+0x180/0x3310 [ 46.397680][ T5961] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 46.397706][ T5961] ? tomoyo_path_number_perm+0x46d/0x580 [ 46.397719][ T5961] ? kasan_save_stack+0x3f/0x50 [ 46.397733][ T5961] ? kasan_save_stack+0x30/0x50 [ 46.397747][ T5961] ? kasan_save_track+0x14/0x30 [ 46.397761][ T5961] ? kasan_save_free_info+0x3b/0x70 [ 46.397782][ T5961] comedi_unlocked_ioctl+0x860/0x3310 [ 46.397800][ T5961] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 46.397824][ T5961] ? kasan_quarantine_put+0x104/0x240 [ 46.397839][ T5961] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.397855][ T5961] ? find_held_lock+0x2b/0x80 [ 46.397881][ T5961] ? tomoyo_path_number_perm+0x28f/0x580 [ 46.397899][ T5961] ? tomoyo_path_number_perm+0x28f/0x580 [ 46.397922][ T5961] ? tomoyo_path_number_perm+0x188/0x580 [ 46.397942][ T5961] comedi_compat_ioctl+0x438/0xe20 [ 46.397956][ T5961] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 46.397968][ T5961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.397986][ T5961] ? do_vfs_ioctl+0x226/0x13e0 [ 46.397999][ T5961] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 46.398015][ T5961] ? __fget_files+0x34/0x3d0 [ 46.398029][ T5961] ? find_held_lock+0x2b/0x80 [ 46.398041][ T5961] ? __fget_files+0x215/0x3d0 [ 46.398054][ T5961] ? hook_file_ioctl_common+0x140/0x440 [ 46.398070][ T5961] ? __fget_files+0x21f/0x3d0 [ 46.398087][ T5961] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 46.398099][ T5961] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 46.398114][ T5961] __do_fast_syscall_32+0x13a/0x8b0 [ 46.398131][ T5961] do_fast_syscall_32+0x32/0x70 [ 46.398147][ T5961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 46.398162][ T5961] RIP: 0023:0xf7ff6fec [ 46.398176][ T5961] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 46.398182][ T5961] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 46.398194][ T5961] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040946400 [ 46.398201][ T5961] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.398207][ T5961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 46.398213][ T5961] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 46.398220][ T5961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.398234][ T5961] [ 46.398243][ T5961] comedi comedi2: das16m1: I/O port conflict (0x140,16) [ 46.548631][ T5092] Bluetooth: hci2: command tx timeout [ 46.594730][ T5966] process 'syz.2.25' launched '/dev/fd/7' with NULL argv: empty string added [ 47.118701][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 47.298608][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 47.299069][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 47.303163][ T25] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 47.303178][ T25] usb 7-1: Product: syz [ 47.303185][ T25] usb 7-1: Manufacturer: syz [ 47.303192][ T25] usb 7-1: SerialNumber: syz [ 47.304407][ T25] usb 7-1: config 0 descriptor?? [ 47.323896][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 47.338684][ T5092] Bluetooth: hci0: command tx timeout [ 47.338708][ T5092] Bluetooth: hci3: command tx timeout [ 47.716236][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.737386][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 47.743695][ T5969] netlink: 232 bytes leftover after parsing attributes in process `syz.2.26'. [ 47.743709][ T5969] netlink: 232 bytes leftover after parsing attributes in process `syz.2.26'. [ 47.749971][ T5971] bridge_slave_0 (unregistering): left allmulticast mode [ 47.749988][ T5971] bridge_slave_0 (unregistering): left promiscuous mode [ 47.750710][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.015079][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.024918][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.061536][ T25] gspca_zc3xx: reg_w_i err -71 [ 48.061580][ T25] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 48.071757][ T25] usb 7-1: USB disconnect, device number 3 [ 48.644717][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'. [ 48.647720][ T5986] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 48.661565][ T5986] syz_tun: entered promiscuous mode [ 48.684181][ T5986] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 48.793753][ T5959] syz.1.18 (5959) used greatest stack depth: 19848 bytes left [ 48.821559][ T5988] FAULT_INJECTION: forcing a failure. [ 48.821559][ T5988] name failslab, interval 1, probability 0, space 0, times 0 [ 48.821593][ T5988] CPU: 3 UID: 0 PID: 5988 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 48.821615][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.821628][ T5988] Call Trace: [ 48.821635][ T5988] [ 48.821643][ T5988] dump_stack_lvl+0x100/0x190 [ 48.821673][ T5988] should_fail_ex.cold+0x5/0xa [ 48.821698][ T5988] should_failslab+0xc2/0x120 [ 48.821727][ T5988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 48.821750][ T5988] ? __pfx_map_id_range_down+0x10/0x10 [ 48.821781][ T5988] ? rcu_is_watching+0x13/0xc0 [ 48.821801][ T5988] ? security_inode_alloc+0x3b/0x2c0 [ 48.821837][ T5988] security_inode_alloc+0x3b/0x2c0 [ 48.821866][ T5988] inode_init_always_gfp+0xc6f/0xfb0 [ 48.821894][ T5988] alloc_inode+0x8e/0x250 [ 48.821913][ T5988] sock_alloc+0x44/0x280 [ 48.821931][ T5988] ? security_socket_create+0x7f/0x250 [ 48.821963][ T5988] __sock_create+0xc2/0x860 [ 48.821990][ T5988] __sys_socket+0x14d/0x260 [ 48.822013][ T5988] ? xfd_validate_state+0x129/0x190 [ 48.822041][ T5988] ? __pfx___sys_socket+0x10/0x10 [ 48.822090][ T5988] __ia32_sys_socket+0x72/0xb0 [ 48.822112][ T5988] ? lockdep_hardirqs_on+0x7d/0x110 [ 48.822136][ T5988] __do_fast_syscall_32+0x13a/0x8b0 [ 48.822163][ T5988] do_fast_syscall_32+0x32/0x70 [ 48.822185][ T5988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.822208][ T5988] RIP: 0023:0xf70befec [ 48.822229][ T5988] Code: Unable to access opcode bytes at 0xf70befc2. [ 48.822237][ T5988] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 48.822256][ T5988] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 48.822268][ T5988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.822278][ T5988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.822288][ T5988] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.822299][ T5988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.822320][ T5988] [ 48.827007][ T5988] socket: no more sockets [ 49.343258][ T5964] syz.0.23 (5964) used greatest stack depth: 18088 bytes left [ 49.418609][ T5740] Bluetooth: hci0: command 0x0406 tx timeout [ 53.499974][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.500488][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.557300][ T43] audit: type=1326 audit(1791033486.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.51" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 54.917309][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 57.534138][ T6074] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 58.401531][ T6098] UDC core: g1: couldn't find an available UDC or it's busy [ 58.728369][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 59.252587][ T74] cfg80211: failed to load regulatory.db [ 59.451366][ T6140] Bluetooth: MGMT ver 1.23 [ 59.532446][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.538222][ T6148] bridge_slave_0 (unregistering): left allmulticast mode [ 59.538247][ T6148] bridge_slave_0 (unregistering): left promiscuous mode [ 59.538314][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.598797][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.748651][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 59.751775][ T9] usb 8-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 59.753387][ T9] usb 8-1: config 4 has an invalid interface number: 51 but max is 0 [ 59.753407][ T9] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 59.753419][ T9] usb 8-1: config 4 has no interface number 0 [ 59.753444][ T9] usb 8-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.753463][ T9] usb 8-1: config 4 interface 51 has no altsetting 0 [ 59.755130][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.755144][ T9] usb 8-1: Product: syz [ 59.755152][ T9] usb 8-1: Manufacturer: syz [ 59.755159][ T9] usb 8-1: SerialNumber: syz [ 59.767684][ T9] cdc_eem 8-1:4.51: probe with driver cdc_eem failed with error -22 [ 60.963654][ T853] usb 8-1: USB disconnect, device number 2 [ 61.758630][ T853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.910015][ T853] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 61.910801][ T853] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.910814][ T853] usb 8-1: config 0 has no interface number 0 [ 61.912788][ T853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.912808][ T853] usb 8-1: Product: syz [ 61.912821][ T853] usb 8-1: Manufacturer: syz [ 61.912833][ T853] usb 8-1: SerialNumber: syz [ 61.916721][ T853] usb 8-1: config 0 descriptor?? [ 62.124860][ T853] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 62.135183][ T853] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 62.135479][ T853] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 62.135519][ T853] usb 8-1: media controller created [ 62.150736][ T853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.532606][ T9] usb 8-1: USB disconnect, device number 3 [ 63.249594][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.260110][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.267562][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.285306][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.292919][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.389241][ T6205] gadgetfs: bound to dummy_udc driver [ 63.495842][ T5810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.549355][ T6211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 63.549394][ T6211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 63.615125][ T5810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.628679][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 63.628938][ C0] gadgetfs: connected [ 63.629726][ T9] gadgetfs: disconnected [ 63.661630][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 63.791808][ T5810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.894361][ T5810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.903148][ T6224] Zero length message leads to an empty skb [ 63.923647][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.939308][ T6224] bridge_slave_0 (unregistering): left allmulticast mode [ 63.939328][ T6224] bridge_slave_0 (unregistering): left promiscuous mode [ 63.939369][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.382469][ T5810] bridge_slave_1: left allmulticast mode [ 64.382495][ T5810] bridge_slave_1: left promiscuous mode [ 64.383130][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.775653][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.790429][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.799153][ T5810] bond0 (unregistering): Released all slaves [ 64.836711][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.207864][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.207910][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.208022][ T6198] bridge_slave_0: entered allmulticast mode [ 65.226032][ T6198] bridge_slave_0: entered promiscuous mode [ 65.262894][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.263451][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.263981][ T6198] bridge_slave_1: entered allmulticast mode [ 65.265430][ T6198] bridge_slave_1: entered promiscuous mode [ 65.270699][ T6262] FAULT_INJECTION: forcing a failure. [ 65.270699][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 65.270726][ T6262] CPU: 3 UID: 0 PID: 6262 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 65.270748][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.270759][ T6262] Call Trace: [ 65.270766][ T6262] [ 65.270774][ T6262] dump_stack_lvl+0x100/0x190 [ 65.270807][ T6262] should_fail_ex.cold+0x5/0xa [ 65.270834][ T6262] should_failslab+0xc2/0x120 [ 65.270866][ T6262] __kmalloc_noprof+0xfc/0x840 [ 65.270892][ T6262] ? comedi_alloc_subdevices+0x4a/0x240 [ 65.270921][ T6262] comedi_alloc_subdevices+0x4a/0x240 [ 65.270948][ T6262] das16m1_attach+0x2ab/0xc30 [ 65.270980][ T6262] comedi_device_attach+0x40e/0x6b0 [ 65.271011][ T6262] do_devconfig_ioctl+0x1b3/0x6d0 [ 65.271039][ T6262] ? comedi_unlocked_ioctl+0x180/0x3310 [ 65.271061][ T6262] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 65.271103][ T6262] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.271124][ T6262] ? kasan_save_stack+0x3f/0x50 [ 65.271149][ T6262] ? kasan_save_stack+0x30/0x50 [ 65.271172][ T6262] ? kasan_save_track+0x14/0x30 [ 65.271195][ T6262] ? kasan_save_free_info+0x3b/0x70 [ 65.271228][ T6262] comedi_unlocked_ioctl+0x860/0x3310 [ 65.271258][ T6262] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.271301][ T6262] ? kasan_quarantine_put+0x104/0x240 [ 65.271326][ T6262] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.271351][ T6262] ? find_held_lock+0x2b/0x80 [ 65.271373][ T6262] ? tomoyo_path_number_perm+0x28f/0x580 [ 65.271393][ T6262] ? tomoyo_path_number_perm+0x28f/0x580 [ 65.271417][ T6262] ? tomoyo_path_number_perm+0x188/0x580 [ 65.271443][ T6262] comedi_compat_ioctl+0x438/0xe20 [ 65.271466][ T6262] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 65.271487][ T6262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.271517][ T6262] ? do_vfs_ioctl+0x226/0x13e0 [ 65.271539][ T6262] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.271564][ T6262] ? __fget_files+0x34/0x3d0 [ 65.271589][ T6262] ? find_held_lock+0x2b/0x80 [ 65.271612][ T6262] ? __fget_files+0x215/0x3d0 [ 65.271634][ T6262] ? hook_file_ioctl_common+0x140/0x440 [ 65.271661][ T6262] ? __fget_files+0x21f/0x3d0 [ 65.271691][ T6262] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 65.271713][ T6262] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 65.271737][ T6262] __do_fast_syscall_32+0x13a/0x8b0 [ 65.271768][ T6262] do_fast_syscall_32+0x32/0x70 [ 65.271794][ T6262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.271819][ T6262] RIP: 0023:0xf709efec [ 65.271840][ T6262] Code: Unable to access opcode bytes at 0xf709efc2. [ 65.271849][ T6262] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 65.271868][ T6262] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040946400 [ 65.271881][ T6262] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.271893][ T6262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.271904][ T6262] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.271916][ T6262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.271942][ T6262] [ 65.338685][ T5740] Bluetooth: hci4: command tx timeout [ 65.394706][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.439213][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.469942][ T5810] hsr_slave_0: left promiscuous mode [ 65.470493][ T5810] hsr_slave_1: left promiscuous mode [ 65.471929][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.471947][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.475825][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.475837][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.515337][ T5810] veth1_macvtap: left promiscuous mode [ 65.515421][ T5810] veth0_macvtap: left promiscuous mode [ 65.515651][ T5810] veth1_vlan: left promiscuous mode [ 65.515739][ T5810] veth0_vlan: left promiscuous mode [ 65.739127][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 65.761180][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 65.821501][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.821627][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 66.025844][ T6273] ceph: No mds server is up or the cluster is laggy [ 66.030014][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 66.030106][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 66.034845][ T5740] Bluetooth: hci0: unexpected event for opcode 0x200a [ 66.293865][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 66.296886][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 66.618919][ T6198] team0: Port device team_slave_0 added [ 66.625594][ T6198] team0: Port device team_slave_1 added [ 66.659835][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.659848][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.659863][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.665951][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.665963][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.665977][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.845470][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.936851][ T6283] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 67.023310][ T6198] hsr_slave_0: entered promiscuous mode [ 67.023930][ T6198] hsr_slave_1: entered promiscuous mode [ 67.024300][ T6198] debugfs: 'hsr0' already exists in 'hsr' [ 67.024317][ T6198] Cannot create hsr debugfs directory [ 67.418767][ T5740] Bluetooth: hci4: command tx timeout [ 67.495312][ T6288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.105'. [ 67.504827][ T6288] netlink: 'syz.3.105': attribute type 10 has an invalid length. [ 67.517168][ T6288] syz_tun: entered promiscuous mode [ 67.525842][ T6288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.549732][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.550088][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.657027][ T6198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.669651][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.676048][ T6198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.691211][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.691806][ T6198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.701347][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.702010][ T6198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.712575][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.714949][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.876359][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.897509][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.904657][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.904707][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.913952][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.914000][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.116651][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 68.309868][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.336482][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.358885][ T6323] warning: `syz.3.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.360281][ T1351] hid_parser_main: 8 callbacks suppressed [ 68.360295][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360308][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360320][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360332][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360343][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360354][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360366][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.360377][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.362920][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.362935][ T1351] hid-generic 684B:0002:0002.0004: unknown main item tag 0x0 [ 68.366383][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 68.367865][ T6322] netlink: 232 bytes leftover after parsing attributes in process `syz.0.110'. [ 68.367886][ T6322] netlink: 232 bytes leftover after parsing attributes in process `syz.0.110'. [ 68.372026][ T1351] hid-generic 684B:0002:0002.0004: hidraw1: HID v0.08 Device [syz0] on syz1 [ 68.445551][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.447256][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.481090][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.693660][ T6198] veth0_vlan: entered promiscuous mode [ 68.705727][ T6198] veth1_vlan: entered promiscuous mode [ 68.724671][ T6198] veth0_macvtap: entered promiscuous mode [ 68.727673][ T6198] veth1_macvtap: entered promiscuous mode [ 68.740104][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.745068][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.771390][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771417][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771435][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771452][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.812045][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.812066][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.832564][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.832583][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.168652][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.340301][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 69.341891][ T9] usb 9-1: config 0 has no interfaces? [ 69.341953][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.353706][ T9] usb 9-1: config 0 descriptor?? [ 69.415440][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.415649][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.498624][ T5740] Bluetooth: hci4: command tx timeout [ 69.585662][ T9] usb 9-1: USB disconnect, device number 2 [ 69.765630][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.114'. [ 69.766510][ T6356] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 69.875501][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 69.880898][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 70.137856][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 70.863128][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192142][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 71.380703][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 71.473227][ T6405] nvmet: adding nsid 1 to subsystem testsubsys [ 71.528000][ T6391] null_blk: nullb1: using native zone append [ 71.578932][ T5740] Bluetooth: hci4: command tx timeout [ 71.754879][ T6405] nvmet: failed to open block device /dev/nullb1: (-2) [ 71.798926][ T74] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 71.922182][ T6391] null_blk: disk nullb1 created [ 71.949347][ T74] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 71.950540][ T74] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.950564][ T74] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.950581][ T74] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.950609][ T74] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.952603][ T74] usb 9-1: config 0 descriptor?? [ 72.269406][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 72.270534][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 72.373585][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.374707][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.379194][ T1156] IPVS: starting estimator thread 0... [ 72.437262][ T74] acrux 0003:1A34:0802.0005: item fetching failed at offset 37/41 [ 72.437520][ T74] acrux 0003:1A34:0802.0005: parse failed [ 72.437549][ T74] acrux 0003:1A34:0802.0005: probe with driver acrux failed with error -22 [ 72.454577][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 72.471820][ T6433] IPVS: using max 43 ests per chain, 103200 per kthread [ 72.476887][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.487315][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.398643][ T74] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.558744][ T74] usb 7-1: Using ep0 maxpacket: 16 [ 73.559301][ T74] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 73.565634][ T74] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.565654][ T74] usb 7-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 73.565667][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.565682][ T74] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.573651][ T74] usb 7-1: config 0 descriptor?? [ 73.821943][ T6463] FAULT_INJECTION: forcing a failure. [ 73.821943][ T6463] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.821964][ T6463] CPU: 2 UID: 0 PID: 6463 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(full) [ 73.821977][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.821983][ T6463] Call Trace: [ 73.822000][ T6463] [ 73.822005][ T6463] dump_stack_lvl+0x100/0x190 [ 73.822030][ T6463] should_fail_ex.cold+0x5/0xa [ 73.822044][ T6463] get_futex_key+0x293/0x14f0 [ 73.822057][ T6463] ? __pfx_get_futex_key+0x10/0x10 [ 73.822069][ T6463] ? __mutex_unlock_slowpath+0x35d/0x930 [ 73.822089][ T6463] futex_wake+0xf4/0x5e0 [ 73.822105][ T6463] ? __pfx_futex_wake+0x10/0x10 [ 73.822121][ T6463] ? detach_task_ctx_data+0x83/0x490 [ 73.822143][ T6463] do_futex+0x2b2/0x440 [ 73.822162][ T6463] ? __pfx_do_futex+0x10/0x10 [ 73.822177][ T6463] ? __might_fault+0xc5/0x140 [ 73.822202][ T6463] mm_exit_exec_release+0x256/0x2f0 [ 73.822223][ T6463] do_exit+0x707/0x2a50 [ 73.822247][ T6463] ? __pfx_do_exit+0x10/0x10 [ 73.822268][ T6463] ? do_raw_spin_lock+0x128/0x260 [ 73.822288][ T6463] ? find_held_lock+0x2b/0x80 [ 73.822308][ T6463] ? get_signal+0x7e0/0x21e0 [ 73.822329][ T6463] do_group_exit+0xd5/0x2a0 [ 73.822342][ T6463] get_signal+0x1ec7/0x21e0 [ 73.822364][ T6463] ? __pfx_get_signal+0x10/0x10 [ 73.822381][ T6463] ? do_futex+0x190/0x440 [ 73.822394][ T6463] arch_do_signal_or_restart+0x91/0x7a0 [ 73.822411][ T6463] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 73.822433][ T6463] exit_to_user_mode_loop+0x139/0x700 [ 73.822445][ T6463] ? rcu_is_watching+0x13/0xc0 [ 73.822458][ T6463] __do_fast_syscall_32+0x59f/0x8b0 [ 73.822474][ T6463] do_fast_syscall_32+0x32/0x70 [ 73.822489][ T6463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.822510][ T6463] RIP: 0023:0xf7fe7fec [ 73.822524][ T6463] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 73.822534][ T6463] RSP: 002b:00000000f54a65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 73.822544][ T6463] RAX: fffffffffffffe00 RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 73.822552][ T6463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 73.822558][ T6463] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 73.822564][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.822570][ T6463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.822583][ T6463] [ 74.059090][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 74.096797][ T74] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 74.131896][ T6478] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 74.193426][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.196287][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.215262][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.215655][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.831043][ T2315] usb 7-1: USB disconnect, device number 4 [ 76.022371][ T6517] __nla_validate_parse: 1 callbacks suppressed [ 76.022392][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 76.077989][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 76.332156][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.333125][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.365884][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.366256][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.458737][ T5596] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.608621][ T5596] usb 8-1: Using ep0 maxpacket: 16 [ 78.609140][ T5596] usb 8-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 78.609991][ T5596] usb 8-1: config 4 has an invalid interface number: 51 but max is 0 [ 78.610004][ T5596] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 78.610013][ T5596] usb 8-1: config 4 has no interface number 0 [ 78.610029][ T5596] usb 8-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.610042][ T5596] usb 8-1: config 4 interface 51 has no altsetting 0 [ 78.611650][ T5596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.611667][ T5596] usb 8-1: Product: syz [ 78.611679][ T5596] usb 8-1: Manufacturer: syz [ 78.611691][ T5596] usb 8-1: SerialNumber: syz [ 78.615981][ T5596] cdc_eem 8-1:4.51: probe with driver cdc_eem failed with error -22 [ 78.728710][ T1351] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 78.879127][ T1351] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 78.879999][ T1351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.880017][ T1351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.880029][ T1351] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.880051][ T1351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.883957][ T1351] usb 7-1: config 0 descriptor?? [ 79.299300][ T1156] IPVS: starting estimator thread 0... [ 79.388835][ T6587] IPVS: using max 43 ests per chain, 103200 per kthread [ 79.402975][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.406369][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.514010][ T1351] hid_parser_main: 223 callbacks suppressed [ 79.514032][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x6 [ 79.514051][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514117][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514137][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514153][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514168][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514186][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514204][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514221][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514239][ T1351] acrux 0003:1A34:0802.0007: unknown main item tag 0x0 [ 79.514300][ T1351] acrux 0003:1A34:0802.0007: item fetching failed at offset 37/41 [ 79.514724][ T1351] acrux 0003:1A34:0802.0007: parse failed [ 79.514772][ T1351] acrux 0003:1A34:0802.0007: probe with driver acrux failed with error -22 [ 79.878405][ T9] usb 8-1: USB disconnect, device number 4 [ 80.633120][ T6613] ======================================================= [ 80.633120][ T6613] WARNING: The mand mount option has been deprecated and [ 80.633120][ T6613] and is ignored by this kernel. Remove the mand [ 80.633120][ T6613] option from the mount to silence this warning. [ 80.633120][ T6613] ======================================================= [ 81.048474][ T57] libceph: connect (1)[c::]:6789 error -101 [ 81.061017][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 81.065551][ T6624] ceph: No mds server is up or the cluster is laggy [ 81.330875][ T57] libceph: connect (1)[c::]:6789 error -101 [ 81.331789][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 81.402195][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.449080][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.785362][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.801923][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.410033][ T6650] binder: 6649:6650 ioctl c0306201 80000080 returned -14 [ 82.414572][ T6650] binder: 6649:6650 ioctl c0306201 800003c0 returned -14 [ 82.428667][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.598690][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 82.600144][ T57] usb 8-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 82.601425][ T57] usb 8-1: config 4 has an invalid interface number: 51 but max is 0 [ 82.601445][ T57] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 82.601461][ T57] usb 8-1: config 4 has no interface number 0 [ 82.601497][ T57] usb 8-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.601519][ T57] usb 8-1: config 4 interface 51 has no altsetting 0 [ 82.603362][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.603381][ T57] usb 8-1: Product: syz [ 82.603393][ T57] usb 8-1: Manufacturer: syz [ 82.603405][ T57] usb 8-1: SerialNumber: syz [ 82.611774][ T57] cdc_eem 8-1:4.51: probe with driver cdc_eem failed with error -22 [ 83.219346][ T6663] tipc: Started in network mode [ 83.219367][ T6663] tipc: Node identity 4, cluster identity 4711 [ 83.219378][ T6663] tipc: Node number set to 4 [ 83.826121][ T5736] usb 8-1: USB disconnect, device number 5 [ 83.844758][ T6655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.844776][ T6655] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 83.878471][ T6655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.878487][ T6655] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.548733][ T5745] Bluetooth: hci4: command 0x0406 tx timeout [ 84.561193][ T6655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.561210][ T6655] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 84.638917][ T5736] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 84.799439][ T5736] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 84.800543][ T5736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.800569][ T5736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.800588][ T5736] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.800620][ T5736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.808909][ T5736] usb 8-1: config 0 descriptor?? [ 85.242528][ T38] IPVS: starting estimator thread 0... [ 85.332219][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.332601][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.338850][ T6702] IPVS: using max 24 ests per chain, 57600 per kthread [ 85.480020][ T5736] hid_parser_main: 8 callbacks suppressed [ 85.480036][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x6 [ 85.480050][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480061][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480073][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480084][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480096][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480107][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480118][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480129][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480140][ T5736] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 85.480183][ T5736] acrux 0003:1A34:0802.0008: item fetching failed at offset 37/41 [ 85.480431][ T5736] acrux 0003:1A34:0802.0008: parse failed [ 85.480459][ T5736] acrux 0003:1A34:0802.0008: probe with driver acrux failed with error -22 [ 85.872900][ T6716] binfmt_misc: register: failed to install interpreter ./file2 [ 85.881872][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.882267][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.600541][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.600916][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.678837][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.679182][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.763465][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 87.764512][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 87.776667][ T6766] ceph: No mds server is up or the cluster is laggy [ 88.904766][ T6782] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.925316][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.925734][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.972084][ T6782] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 89.091247][ T6793] FAULT_INJECTION: forcing a failure. [ 89.091247][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 89.091269][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.3.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.091285][ T6793] Tainted: [L]=SOFTLOCKUP [ 89.091289][ T6793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.091295][ T6793] Call Trace: [ 89.091299][ T6793] [ 89.091304][ T6793] dump_stack_lvl+0x100/0x190 [ 89.091323][ T6793] should_fail_ex.cold+0x5/0xa [ 89.091339][ T6793] should_failslab+0xc2/0x120 [ 89.091358][ T6793] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 89.091374][ T6793] ? find_held_lock+0x2b/0x80 [ 89.091387][ T6793] ? sock_alloc_inode+0x26/0x2c0 [ 89.091412][ T6793] ? __pfx_sock_alloc_inode+0x10/0x10 [ 89.091426][ T6793] sock_alloc_inode+0x26/0x2c0 [ 89.091445][ T6793] ? __pfx_sock_alloc_inode+0x10/0x10 [ 89.091458][ T6793] alloc_inode+0x68/0x250 [ 89.091470][ T6793] sock_alloc+0x44/0x280 [ 89.091482][ T6793] ? security_socket_create+0x7f/0x250 [ 89.091501][ T6793] __sock_create+0xc2/0x860 [ 89.091518][ T6793] __sys_socket+0x14d/0x260 [ 89.091532][ T6793] ? xfd_validate_state+0x129/0x190 [ 89.091550][ T6793] ? __pfx___sys_socket+0x10/0x10 [ 89.091568][ T6793] __ia32_sys_socket+0x72/0xb0 [ 89.091582][ T6793] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.091610][ T6793] __do_fast_syscall_32+0x13a/0x8b0 [ 89.091629][ T6793] do_fast_syscall_32+0x32/0x70 [ 89.091644][ T6793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.091659][ T6793] RIP: 0023:0xf709efec [ 89.091673][ T6793] Code: Unable to access opcode bytes at 0xf709efc2. [ 89.091678][ T6793] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 89.091690][ T6793] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000000003 [ 89.091697][ T6793] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.091704][ T6793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.091711][ T6793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.091718][ T6793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.091732][ T6793] [ 89.091810][ T6793] socket: no more sockets [ 89.149769][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.151037][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.151158][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.151412][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.177348][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.177662][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.133344][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 90.187245][ T6832] FAULT_INJECTION: forcing a failure. [ 90.187245][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 90.187268][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.187283][ T6832] Tainted: [L]=SOFTLOCKUP [ 90.187288][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.187294][ T6832] Call Trace: [ 90.187298][ T6832] [ 90.187303][ T6832] dump_stack_lvl+0x100/0x190 [ 90.187322][ T6832] should_fail_ex.cold+0x5/0xa [ 90.187338][ T6832] should_failslab+0xc2/0x120 [ 90.187357][ T6832] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 90.187372][ T6832] ? find_held_lock+0x2b/0x80 [ 90.187385][ T6832] ? sock_alloc_inode+0x26/0x2c0 [ 90.187401][ T6832] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.187416][ T6832] sock_alloc_inode+0x26/0x2c0 [ 90.187451][ T6832] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.187470][ T6832] alloc_inode+0x68/0x250 [ 90.187482][ T6832] sock_alloc+0x44/0x280 [ 90.187495][ T6832] ? security_socket_create+0x7f/0x250 [ 90.187515][ T6832] __sock_create+0xc2/0x860 [ 90.187534][ T6832] __sys_socket+0x14d/0x260 [ 90.187548][ T6832] ? xfd_validate_state+0x129/0x190 [ 90.187567][ T6832] ? __pfx___sys_socket+0x10/0x10 [ 90.187586][ T6832] __ia32_sys_socket+0x72/0xb0 [ 90.187600][ T6832] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.187614][ T6832] __do_fast_syscall_32+0x13a/0x8b0 [ 90.187631][ T6832] do_fast_syscall_32+0x32/0x70 [ 90.187645][ T6832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.187660][ T6832] RIP: 0023:0xf70befec [ 90.187674][ T6832] Code: Unable to access opcode bytes at 0xf70befc2. [ 90.187679][ T6832] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 90.187691][ T6832] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000000003 [ 90.187698][ T6832] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.187705][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.187712][ T6832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.187718][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.187731][ T6832] [ 90.187763][ T6832] socket: no more sockets [ 90.291919][ T5596] libceph: connect (1)[c::]:6789 error -101 [ 90.293417][ T5596] libceph: mon0 (1)[c::]:6789 connect error [ 90.303440][ T5596] libceph: connect (1)[c::]:6789 error -101 [ 90.312181][ T6834] ceph: No mds server is up or the cluster is laggy [ 90.315556][ T5596] libceph: mon0 (1)[c::]:6789 connect error [ 91.818311][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 91.957744][ T6867] FAULT_INJECTION: forcing a failure. [ 91.957744][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 91.957791][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.3.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.957821][ T6867] Tainted: [L]=SOFTLOCKUP [ 91.957826][ T6867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.957832][ T6867] Call Trace: [ 91.957838][ T6867] [ 91.957843][ T6867] dump_stack_lvl+0x100/0x190 [ 91.957863][ T6867] should_fail_ex.cold+0x5/0xa [ 91.957880][ T6867] should_failslab+0xc2/0x120 [ 91.957898][ T6867] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.957915][ T6867] ? __asan_memcpy+0x3c/0x60 [ 91.957928][ T6867] ? __kernfs_new_node+0xd2/0xa10 [ 91.957947][ T6867] __kernfs_new_node+0xd2/0xa10 [ 91.957966][ T6867] ? __pfx___kernfs_new_node+0x10/0x10 [ 91.957991][ T6867] ? lock_acquire+0x1d1/0x380 [ 91.958009][ T6867] ? kernfs_root+0x23/0x2a0 [ 91.958026][ T6867] ? find_held_lock+0x2b/0x80 [ 91.958040][ T6867] ? kernfs_root+0xee/0x2a0 [ 91.958055][ T6867] ? kernfs_root+0xee/0x2a0 [ 91.958074][ T6867] kernfs_new_node+0x117/0x150 [ 91.958095][ T6867] __kernfs_create_file+0x53/0x350 [ 91.958110][ T6867] cgroup_addrm_files+0x4ef/0xdb0 [ 91.958136][ T6867] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 91.958161][ T6867] ? idr_replace+0xfa/0x170 [ 91.958179][ T6867] css_populate_dir+0x161/0x590 [ 91.958191][ T6867] cgroup_apply_control_enable+0x441/0xdd0 [ 91.958212][ T6867] cgroup_mkdir+0x57f/0x1330 [ 91.958230][ T6867] ? __pfx_cgroup_mkdir+0x10/0x10 [ 91.958247][ T6867] kernfs_iop_mkdir+0x111/0x190 [ 91.958263][ T6867] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 91.958279][ T6867] vfs_mkdir+0x364/0x850 [ 91.958295][ T6867] filename_mkdirat+0x48b/0x5e0 [ 91.958313][ T6867] ? __pfx_filename_mkdirat+0x10/0x10 [ 91.958330][ T6867] ? strncpy_from_user+0x19d/0x2d0 [ 91.958349][ T6867] ? do_getname+0x191/0x390 [ 91.958361][ T6867] __ia32_sys_mkdirat+0x88/0xc0 [ 91.958377][ T6867] __do_fast_syscall_32+0x13a/0x8b0 [ 91.958394][ T6867] do_fast_syscall_32+0x32/0x70 [ 91.958409][ T6867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.958423][ T6867] RIP: 0023:0xf709efec [ 91.958437][ T6867] Code: Unable to access opcode bytes at 0xf709efc2. [ 91.958442][ T6867] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 91.958453][ T6867] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 91.958461][ T6867] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 91.958467][ T6867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.958473][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.958480][ T6867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.958509][ T6867] [ 91.958754][ T6867] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 91.967089][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.967297][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.026863][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.027075][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.062961][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.063161][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.217528][ T35] libceph: connect (1)[c::]:6789 error -101 [ 92.217922][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 92.227112][ T35] libceph: connect (1)[c::]:6789 error -101 [ 92.228382][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 92.263809][ T6883] ceph: No mds server is up or the cluster is laggy [ 93.496307][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 93.627070][ T6916] capability: warning: `syz.3.267' uses 32-bit capabilities (legacy support in use) [ 93.693451][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 93.712778][ T6921] bond0: (slave syz_tun): Releasing backup interface [ 94.027691][ T9] libceph: connect (1)[c::]:6789 error -101 [ 94.040516][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 94.042087][ T6926] ceph: No mds server is up or the cluster is laggy [ 94.043228][ T9] libceph: connect (1)[c::]:6789 error -101 [ 94.043947][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 94.332830][ T853] libceph: connect (1)[c::]:6789 error -101 [ 94.339644][ T853] libceph: mon0 (1)[c::]:6789 connect error [ 94.547107][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.552675][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.646880][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 95.936856][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 95.979187][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 96.258949][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.259317][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.357668][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.358705][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.390037][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.390494][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.165370][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.186996][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.239685][ T7022] FAULT_INJECTION: forcing a failure. [ 98.239685][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 98.239714][ T7022] CPU: 1 UID: 0 PID: 7022 Comm: syz.4.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.239731][ T7022] Tainted: [L]=SOFTLOCKUP [ 98.239735][ T7022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.239742][ T7022] Call Trace: [ 98.239747][ T7022] [ 98.239752][ T7022] dump_stack_lvl+0x100/0x190 [ 98.239773][ T7022] should_fail_ex.cold+0x5/0xa [ 98.239788][ T7022] should_failslab+0xc2/0x120 [ 98.239828][ T7022] __kmalloc_cache_noprof+0x91/0x6d0 [ 98.239841][ T7022] ? lockdep_init_map_type+0x5c/0x250 [ 98.239861][ T7022] ? rtm_new_nexthop+0x27c3/0x8990 [ 98.239876][ T7022] rtm_new_nexthop+0x27c3/0x8990 [ 98.239887][ T7022] ? kfree_skbmem+0x19a/0x210 [ 98.239901][ T7022] ? stack_trace_save+0x8e/0xc0 [ 98.239923][ T7022] ? __pfx_stack_trace_save+0x10/0x10 [ 98.239942][ T7022] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 98.239954][ T7022] ? kfree_skbmem+0x19a/0x210 [ 98.239968][ T7022] ? kasan_save_stack+0x3f/0x50 [ 98.239984][ T7022] ? kasan_save_stack+0x30/0x50 [ 98.239999][ T7022] ? kasan_save_track+0x14/0x30 [ 98.240014][ T7022] ? kasan_save_free_info+0x3b/0x70 [ 98.240028][ T7022] ? __kasan_slab_free+0x5f/0x80 [ 98.240044][ T7022] ? kmem_cache_free+0x127/0x6c0 [ 98.240056][ T7022] ? kfree_skbmem+0x19a/0x210 [ 98.240070][ T7022] ? consume_skb+0xd1/0x110 [ 98.240083][ T7022] ? nlmon_xmit+0xa5/0xe0 [ 98.240096][ T7022] ? dev_hard_start_xmit+0x121/0x760 [ 98.240111][ T7022] ? __dev_queue_xmit+0x1c25/0x4a40 [ 98.240126][ T7022] ? netlink_deliver_tap+0xa4d/0xcc0 [ 98.240141][ T7022] ? netlink_unicast+0x62b/0x850 [ 98.240156][ T7022] ? netlink_sendmsg+0x8b0/0xda0 [ 98.240171][ T7022] ? ____sys_sendmsg+0xa4d/0xbe0 [ 98.240184][ T7022] ? ___sys_sendmsg+0x190/0x1e0 [ 98.240198][ T7022] ? __sys_sendmsg+0x160/0x210 [ 98.240207][ T7022] ? __do_fast_syscall_32+0x13a/0x8b0 [ 98.240222][ T7022] ? do_fast_syscall_32+0x32/0x70 [ 98.240236][ T7022] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.240271][ T7022] ? __lock_acquire+0x5c0/0x1f40 [ 98.240290][ T7022] ? find_held_lock+0x2b/0x80 [ 98.240305][ T7022] ? lock_acquire+0x1d1/0x380 [ 98.240321][ T7022] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 98.240334][ T7022] ? find_held_lock+0x2b/0x80 [ 98.240346][ T7022] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.240358][ T7022] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.240372][ T7022] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 98.240383][ T7022] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 98.240394][ T7022] rtnetlink_rcv_msg+0x95e/0xe90 [ 98.240408][ T7022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.240425][ T7022] ? ref_tracker_free+0x37e/0x6c0 [ 98.240439][ T7022] netlink_rcv_skb+0x159/0x420 [ 98.240457][ T7022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.240471][ T7022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.240494][ T7022] ? netlink_deliver_tap+0x1ae/0xcc0 [ 98.240513][ T7022] netlink_unicast+0x585/0x850 [ 98.240531][ T7022] ? __pfx_netlink_unicast+0x10/0x10 [ 98.240551][ T7022] netlink_sendmsg+0x8b0/0xda0 [ 98.240570][ T7022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.240588][ T7022] ? apparmor_socket_sendmsg+0x165/0x280 [ 98.240611][ T7022] ____sys_sendmsg+0xa4d/0xbe0 [ 98.240624][ T7022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.240642][ T7022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.240662][ T7022] ___sys_sendmsg+0x190/0x1e0 [ 98.240678][ T7022] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.240693][ T7022] ? futex_wait+0x11e/0x370 [ 98.240734][ T7022] ? find_held_lock+0x2b/0x80 [ 98.240770][ T7022] __sys_sendmsg+0x160/0x210 [ 98.240784][ T7022] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.240804][ T7022] __do_fast_syscall_32+0x13a/0x8b0 [ 98.240821][ T7022] do_fast_syscall_32+0x32/0x70 [ 98.240836][ T7022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.240850][ T7022] RIP: 0023:0xf7fe7fec [ 98.240866][ T7022] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 98.240871][ T7022] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 98.240883][ T7022] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 98.240890][ T7022] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.240897][ T7022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.240903][ T7022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.240909][ T7022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.240928][ T7022] [ 98.260048][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.414890][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.415221][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.457488][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.458456][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.763626][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.763943][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.791360][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.791595][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.927906][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 99.976829][ T7080] usb usb8: usbfs: process 7080 (syz.4.320) did not claim interface 0 before use [ 100.034173][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.035529][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.636052][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 101.156972][ T43] audit: type=1804 audit(1791033533.928:3): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/88/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 101.495584][ T5143] udevd[5143]: could not touch /run/udev/queue: No such file or directory [ 101.696780][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.699479][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.743922][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.744318][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.239139][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 102.573548][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 102.698308][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.698749][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.729195][ T7105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.986407][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 103.987633][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 104.009281][ T7150] ceph: No mds server is up or the cluster is laggy [ 104.322465][ T7157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.346'. [ 105.674526][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.674915][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.410560][ T7180] netlink: 72 bytes leftover after parsing attributes in process `syz.2.355'. [ 106.578804][ T7185] ceph: No mds server is up or the cluster is laggy [ 106.579853][ T74] libceph: connect (1)[c::]:6789 error -101 [ 106.579942][ T74] libceph: mon0 (1)[c::]:6789 connect error [ 106.949424][ T7194] [ 106.950214][ T7194] ====================================================== [ 106.952293][ T7194] WARNING: possible circular locking dependency detected [ 106.954337][ T7194] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.956362][ T7194] ------------------------------------------------------ [ 106.958625][ T7194] syz.3.359/7194 is trying to acquire lock: [ 106.960462][ T7194] ffffffff8efca0e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 106.963279][ T7194] [ 106.963279][ T7194] but task is already holding lock: [ 106.965894][ T7194] ffff8880267fbbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 106.968819][ T7194] [ 106.968819][ T7194] which lock already depends on the new lock. [ 106.968819][ T7194] [ 106.972552][ T7194] [ 106.972552][ T7194] the existing dependency chain (in reverse order) is: [ 106.975595][ T7194] [ 106.975595][ T7194] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 106.977904][ T7194] lock_acquire+0x1d1/0x380 [ 106.979450][ T7194] __mutex_lock+0x1a4/0x1bd0 [ 106.981017][ T7194] blkcg_activate_policy+0x34f/0xbf0 [ 106.982778][ T7194] blk_throtl_init+0x39a/0x5b0 [ 106.984405][ T7194] tg_set_conf.isra.0+0x252/0x500 [ 106.986196][ T7194] cgroup_file_write+0x1e6/0x8a0 [ 106.987884][ T7194] kernfs_fop_write_iter+0x3e0/0x5f0 [ 106.989661][ T7194] vfs_write+0x6af/0x1050 [ 106.991114][ T7194] ksys_write+0x12a/0x250 [ 106.992852][ T7194] __do_fast_syscall_32+0x13a/0x8b0 [ 106.994642][ T7194] do_fast_syscall_32+0x32/0x70 [ 106.996309][ T7194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.998436][ T7194] [ 106.998436][ T7194] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 107.001072][ T7194] lock_acquire+0x1d1/0x380 [ 107.002628][ T7194] blk_alloc_queue+0x610/0x790 [ 107.004237][ T7194] blk_mq_alloc_queue+0x174/0x290 [ 107.005991][ T7194] __blk_mq_alloc_disk+0x29/0x120 [ 107.007787][ T7194] loop_add+0x498/0xb60 [ 107.009592][ T7194] loop_init+0x1d3/0x200 [ 107.011106][ T7194] do_one_initcall+0x11c/0x6f0 [ 107.012890][ T7194] kernel_init_freeable+0x6ea/0x7b0 [ 107.014759][ T7194] kernel_init+0x21/0x1e0 [ 107.016527][ T7194] ret_from_fork+0x730/0xd60 [ 107.018106][ T7194] ret_from_fork_asm+0x1a/0x30 [ 107.019847][ T7194] [ 107.019847][ T7194] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 107.022040][ T7194] check_prev_add+0xeb/0xe60 [ 107.023587][ T7194] __lock_acquire+0x1528/0x1f40 [ 107.025405][ T7194] lock_acquire+0x1d1/0x380 [ 107.027177][ T7194] fs_reclaim_acquire+0xc4/0x100 [ 107.029090][ T7194] kmem_cache_alloc_noprof+0x63/0x6a0 [ 107.031229][ T7194] __radix_tree_preload+0x333/0x820 [ 107.033903][ T7194] blkg_conf_prep+0x489/0xf10 [ 107.036006][ T7194] tg_set_conf.isra.0+0x1ed/0x500 [ 107.038174][ T7194] cgroup_file_write+0x1e6/0x8a0 [ 107.039854][ T7194] kernfs_fop_write_iter+0x3e0/0x5f0 [ 107.041832][ T7194] vfs_write+0x6af/0x1050 [ 107.043740][ T7194] ksys_write+0x12a/0x250 [ 107.045529][ T7194] __do_fast_syscall_32+0x13a/0x8b0 [ 107.047615][ T7194] do_fast_syscall_32+0x32/0x70 [ 107.049576][ T7194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.052016][ T7194] [ 107.052016][ T7194] other info that might help us debug this: [ 107.052016][ T7194] [ 107.055154][ T7194] Chain exists of: [ 107.055154][ T7194] fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex [ 107.055154][ T7194] [ 107.060070][ T7194] Possible unsafe locking scenario: [ 107.060070][ T7194] [ 107.062635][ T7194] CPU0 CPU1 [ 107.064592][ T7194] ---- ---- [ 107.066342][ T7194] lock(&q->blkcg_mutex); [ 107.067944][ T7194] lock(&q->q_usage_counter(io)#17); [ 107.070732][ T7194] lock(&q->blkcg_mutex); [ 107.072975][ T7194] lock(fs_reclaim); [ 107.074453][ T7194] [ 107.074453][ T7194] *** DEADLOCK *** [ 107.074453][ T7194] [ 107.077109][ T7194] locks held by syz.3.359/7194: 6, last CPU#3: [ 107.078939][ T7194] #0: ffff88802945c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 107.082114][ T7194] #1: ffff88804d3a0460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 107.085373][ T7194] #2: ffff888028ba8c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 107.088893][ T7194] #3: ffff88806a52cd28 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 107.092617][ T7194] #4: ffff8880267fba40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 107.095728][ T7194] #5: ffff8880267fbbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 107.098593][ T7194] [ 107.098593][ T7194] stack backtrace: [ 107.100651][ T7194] CPU: 3 UID: 0 PID: 7194 Comm: syz.3.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.104200][ T7194] Tainted: [L]=SOFTLOCKUP [ 107.105585][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.109251][ T7194] Call Trace: [ 107.110425][ T7194] [ 107.111575][ T7194] dump_stack_lvl+0x100/0x190 [ 107.113306][ T7194] print_circular_bug.cold+0x178/0x1be [ 107.115191][ T7194] check_noncircular+0x146/0x160 [ 107.116914][ T7194] check_prev_add+0xeb/0xe60 [ 107.118380][ T7194] ? check_noncircular+0x97/0x160 [ 107.119957][ T7194] __lock_acquire+0x1528/0x1f40 [ 107.121537][ T7194] lock_acquire+0x1d1/0x380 [ 107.123043][ T7194] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 107.124821][ T7194] fs_reclaim_acquire+0xc4/0x100 [ 107.126463][ T7194] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 107.128161][ T7194] kmem_cache_alloc_noprof+0x63/0x6a0 [ 107.130025][ T7194] ? __radix_tree_preload+0x2f4/0x820 [ 107.131671][ T7194] ? __radix_tree_preload+0x333/0x820 [ 107.133280][ T7194] __radix_tree_preload+0x333/0x820 [ 107.134872][ T7194] blkg_conf_prep+0x489/0xf10 [ 107.136447][ T7194] tg_set_conf.isra.0+0x1ed/0x500 [ 107.138058][ T7194] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 107.139723][ T7194] ? kernfs_root+0xf8/0x2a0 [ 107.141119][ T7194] cgroup_file_write+0x1e6/0x8a0 [ 107.142628][ T7194] ? __pfx_tg_set_conf_u64+0x10/0x10 [ 107.144231][ T7194] ? __pfx_cgroup_file_write+0x10/0x10 [ 107.145935][ T7194] ? __kmalloc_noprof+0x350/0x840 [ 107.147556][ T7194] kernfs_fop_write_iter+0x3e0/0x5f0 [ 107.149256][ T7194] ? __pfx_cgroup_file_write+0x10/0x10 [ 107.150994][ T7194] vfs_write+0x6af/0x1050 [ 107.152418][ T7194] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 107.154210][ T7194] ? __pfx_vfs_write+0x10/0x10 [ 107.155707][ T7194] ? find_held_lock+0x2b/0x80 [ 107.157269][ T7194] ksys_write+0x12a/0x250 [ 107.158626][ T7194] ? __pfx_ksys_write+0x10/0x10 [ 107.160128][ T7194] __do_fast_syscall_32+0x13a/0x8b0 [ 107.161801][ T7194] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.163370][ T7194] do_fast_syscall_32+0x32/0x70 [ 107.164859][ T7194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.166759][ T7194] RIP: 0023:0xf709efec [ 107.168010][ T7194] Code: Unable to access opcode bytes at 0xf709efc2. [ 107.169967][ T7194] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 107.172546][ T7194] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 107.174995][ T7194] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 107.177377][ T7194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.179841][ T7194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.182228][ T7194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.184591][ T7194] [ 107.234316][ T25] usb 5-1: USB disconnect, device number 2 [ 107.260329][ T5736] usb 8-1: USB disconnect, device number 6 [ 107.263687][ T1351] usb 7-1: USB disconnect, device number 5 [ 107.492071][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.516639][ T7191] bond0: (slave syz_tun): Releasing backup interface [ 107.531923][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.632442][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.649500][ T35] usb 9-1: USB disconnect, device number 3 [ 107.677904][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.768278][ T13] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.777988][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 107.786461][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 107.793421][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 107.802489][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 107.837659][ T13] bridge_slave_1: left allmulticast mode [ 107.837681][ T13] bridge_slave_1: left promiscuous mode [ 107.837794][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.888359][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.893130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.894804][ T13] bond0 (unregistering): Released all slaves [ 107.903475][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 108.122557][ T13] hsr_slave_0: left promiscuous mode [ 108.122931][ T13] hsr_slave_1: left promiscuous mode [ 108.123381][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.123397][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.123959][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.123974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.127094][ T13] veth1_macvtap: left promiscuous mode [ 108.127132][ T13] veth0_macvtap: left promiscuous mode [ 108.127207][ T13] veth1_vlan: left promiscuous mode [ 108.127260][ T13] veth0_vlan: left promiscuous mode [ 108.210301][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.213834][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.483298][ T13] IPVS: stop unused estimator thread 0... [ 108.523688][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.573373][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.624085][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.674259][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.750331][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.759384][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 108.767870][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 108.776495][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 108.786732][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 108.796490][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.871502][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.933698][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.991885][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.001194][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 109.010857][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 109.022455][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 109.036001][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.043256][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 109.073807][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.111818][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.182198][ T13] bridge_slave_1: left allmulticast mode [ 109.182214][ T13] bridge_slave_1: left promiscuous mode [ 109.182285][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.183441][ T13] bridge_slave_0: left allmulticast mode [ 109.183453][ T13] bridge_slave_0: left promiscuous mode [ 109.183537][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.186553][ T13] bridge_slave_1: left allmulticast mode [ 109.186565][ T13] bridge_slave_1: left promiscuous mode [ 109.186633][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.200664][ T13] bridge_slave_1: left allmulticast mode [ 109.200687][ T13] bridge_slave_1: left promiscuous mode [ 109.200828][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.207045][ T13] bridge_slave_0: left allmulticast mode [ 109.207067][ T13] bridge_slave_0: left promiscuous mode [ 109.207179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.266958][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.267955][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.268721][ T13] bond0 (unregistering): Released all slaves [ 109.298289][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.302122][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.302711][ T13] bond0 (unregistering): Released all slaves [ 109.332615][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.335000][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.335981][ T13] bond0 (unregistering): Released all slaves [ 109.358617][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 109.378850][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20 [ 109.389812][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 109.401358][ T5445] 8021q: adding VLAN 0 to HW filter on device eth22 [ 109.421942][ T13] tipc: Left network mode [ 109.438823][ T13] rxrpc: Leaked peer a1 {1} 127.0.0.1:7003 [ 109.793269][ T13] hsr_slave_0: left promiscuous mode [ 109.793649][ T13] hsr_slave_1: left promiscuous mode [ 109.794094][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.794108][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.794543][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.794555][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.796939][ T13] hsr_slave_0: left promiscuous mode [ 109.797297][ T13] hsr_slave_1: left promiscuous mode [ 109.797657][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.797670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.798143][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.798155][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.809808][ T13] hsr_slave_0: left promiscuous mode [ 109.813027][ T13] hsr_slave_1: left promiscuous mode [ 109.813341][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.813356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.816235][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.816245][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.823934][ T13] veth1_macvtap: left promiscuous mode [ 109.823952][ T13] veth0_macvtap: left promiscuous mode [ 109.823988][ T13] veth1_vlan: left promiscuous mode [ 109.824013][ T13] veth0_vlan: left promiscuous mode [ 109.834887][ T13] veth1_macvtap: left promiscuous mode [ 109.834928][ T13] veth0_macvtap: left promiscuous mode [ 109.835001][ T13] veth1_vlan: left promiscuous mode [ 109.835067][ T13] veth0_vlan: left promiscuous mode [ 109.846552][ T13] veth1_macvtap: left promiscuous mode [ 109.846579][ T13] veth0_macvtap: left promiscuous mode [ 109.846627][ T13] veth1_vlan: left promiscuous mode [ 109.846661][ T13] veth0_vlan: left promiscuous mode [ 109.948484][ T13] team0 (unregistering): Port device team_slave_1 removed [ 109.954034][ T13] team0 (unregistering): Port device team_slave_0 removed [ 110.031143][ T13] team0 (unregistering): Port device team_slave_1 removed [ 110.034769][ T13] team0 (unregistering): Port device team_slave_0 removed [ 110.117974][ T13] team0 (unregistering): Port device team_slave_1 removed [ 110.122080][ T13] team0 (unregistering): Port device team_slave_0 removed [ 110.994023][ T13] IPVS: stop unused estimator thread 0... [ 110.994289][ T13] IPVS: stop unused estimator thread 0... [ 110.994480][ T13] IPVS: stop unused estimator thread 0...