last executing test programs: 17.211029645s ago: executing program 0 (id=661): r0 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 12.929491048s ago: executing program 0 (id=666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000340)={0x7, 'pimreg0\x00', {0x5}, 0x9}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x3}, {}]}]}}, &(0x7f0000000440)=""/83, 0x3e, 0x53, 0x1, 0x0, 0x0, @void, @value}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="c1"], 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00ffff0000000000000000000040000000000000000000000000000000000000000000380002"], 0x78) socket$nl_generic(0x10, 0x3, 0x10) 10.223862902s ago: executing program 0 (id=673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, &(0x7f0000000340)="9808c7cf761c6686374e32d65d1a98af55b9bd88339834318eb9e052c07b37316bf377455083bc8431b4156dafadd55b5f188725680334a259c2de16ddd9f761d9e7397bce2ee85f77eb20403d15be1aa9425c3b3948fbbf7e16ebaa010686838a6f86616ddc3e65fa4b0d39eccbb77c8fadae90c5fdbb1671dcd5aa3df687ac401dca58a7bde5d4def811921ca2c67a162dc6123913c9cf51d2d01fb4f01737c6fdfe260be1860c73d0cacf6fd4c375dfa468ca6a3b99f715c4b69241595d3ca646e02087555173f49959b8130ab86ac50557ec5a0e082e417b6b18ce4932eb03da41243940c7b2f622a933232bb92bf0e19df35dccf33b8c7c0a85bfea3d4dbbc1acb2190fe64fe319addd963752197906ad519d850b43600636b6e08fd3fed7b2a988cb0620a78cde681ce76f8e26ac59b5d503f08f8e85875d134b6c759dad26da2f25706b00c68f9f878fb0dae52a2ac53f4144e1930701e71e00d9c3ad6492c472b8bf8115480de40979e936fcf33a39eccac1c9c39be2839c18939adc9c214f79cc8d63166de2a6ddc9d2a666f65ea8c6a6620e5f05724675f7edabe63ee617295a1bf24f583fb9c80f89984f2c70a0b96db59dfbfd10cf077f82f5da3f23e3fd8b6c3c072ae5e448d27f5300dfbce3d5abe67f2a383b4b54ef727d848abc26c3fa190f13ca0f97af6c8c77831b33db78254ee36393f0d0af11e0ae565ab5cd5faf29fbb01233afcf61544dbf1ef78760a826ded6a84bba1e5ab9e754800106ce22355d645e2040b19b410a3aaeb3642c9446f6e9c37b50a15afc3ff360afa99a9876e9ca14566e5f365b8e33cf78f5c756eaf6257ea53727c25e4d72eef1f93b5ba7ca18e13ad7443899881967221af80aecf010cf2860a485b01ba2ef6a7f89708745fa78b04f3249edeefaf52446b77d0030bcd84bf884b6c0337f4e2fd977f58fc2864b26b3848bb50854289b22517155da706543e9bbcf960c22bfb3d20d95ab1b98470b4abcd336ff8487edb4a8fa4783ade40090213e592b931eaa148a9290ba5e224acd67f6b5ec94b151cf60d6c3e860e69a2e4ca083c33d801a59e659ac5b56335ebf4083d4558efac37f379a48201074c9c6f029bf90f406ff180eb6fa99d26f0104ce291223ac5ad7ed60dc2b639fe0c9380efbce2d0e14efd79d6d5cf8ec0b6dae73cd142830d5fda206668bb176461edc2e4973a84af57b2a0ed73c39da3f2b82cd5e1477c6789c4397c167eb2a1e17f0b8d30c9760cc10aae6fe2a947cee3844471414d7c8fba540837aff15cb82d5c49b9ebf8b9c20d0546b27e801f64c78d2873491a65da9136f1bbcd722c9873244b45e4f636de7ec0eda10f36a237e494d63a50692ff5cf89f9dce5f6fb67acaa7634f6d139ca5d76780355d5ef08f8bdd5af3e4c022f2c771bbeda1efc0d169c0c555a29b2b7bc87b297bc912409f9f633ed638d3efae21d3c79cf6a8586702663fc378ae95b1ddc00ba4d7504bf6581199707cbf6fb0e9d4c3f43624d20dba55f440a697ae69809be879ec3e2dae7879a59b72524841ef68fdeb51bf8cdddc1cc0537c6a82e5a25c512f613bc4aaf5ed3d829733c7417cdcd335b512e225f94add874569f8c87e6a65cc1ecb4a4a5fc98cf9dd464513303d3f2df41458f83ed99f4454083777a43fd8f964ca2922f034fbf62df35a151598aa551e0d809b839f95e58103954fa34ecac286f003035f767d4de768ca8f02e418c700033a4bdeeed214c0a8826adc821024145ae767cafcf0503e6709c1eb8ee481651a363c880f941a26630e51cc3e664bb0273be684ee4c7b5ef6c4c79d1aed7e563a7884895b32d5e25a92a3802e6973b78fef63b2bf3975c2fc36836586ba522785344c877a50f39c10de1ac5746753ae95471ddb224ca92c3b48ff38e171ab614c25c8ddc51a285eafd3639bd6c1a947a7f3eb9d1c9f94a90a654565daf79a5072b08d71e616fd128b3ac75a8b93cecf8882e32ac873efabf2c3cfb5de479030bdac14836dc45b27eb5a35ebcdaa9c25e120c5a7b2a7b36c84dd3419aba563aada1048fe1e7e6e9f77e8d53f246fe68ff84dab1e51fda95d487c31923a0f32aeb10f1bf4184a89e54734db39e8e3425c7df272902603e6eb88a427aa5ffc1039e0dcbd2c659bb0dbdb87d91557b6cc825c66af0f0f4326c0840d22c0e7fa3e6d79af6e2a394c9cdecbddb1d5782ae1e97ab8c1d1ed003968e1b78a431dfdc8e26e09ba0a150fa7895ea20deae6bb18b11814bf2ae16e34b3be02a58b816108436f66b1dea178ee4558b6117b625d3abea2ecc52b1c9b52fc4e5df4366272b851a00ff551dcdf17433ebc4306707eceea9b68099f0a5693bc823c239c1d80c9f2a2963d391e081a87595b446a9d5834cf5e6c248d280936ad702d4a9de8b9fb5cb2befce16706231eef6a7f906bda069f6e8506363ca115a267b865b1135925f8711e47f6fbd943135510fb9cf8062efdf8fc6ee5801227d02a5b65187915d757b475304c306b57ef22004867825860da6302cdf1275cc8a336f09d71c0acd4da02f8ea4ea4f5c52955d4b0718baa812e717d0fe4a8863305a95adf96ed402be423c597b0a402c1e1ea4c930d53421223c9d6d4b7fb654d0e92208d9bce672132e8559dcfbefb9598c210cee4f2cc12307f55eb9f2b1cd6e50a1f542b68e0b375362776205ef17dad8ef1de23a0d629474103c1b58a52a21479c122c9c0c3a6531fe7ef83effdf3a39b9c029704712f5f3ac0715f85c83556cf599425dc49ba80f4264ae9a75167e680d3c8205f9200a34f9d5b1980fcaf2e8335cf5a88052b794ffcf6ed4c39b3a1dc2f13f145e129ad7b55480f6aeb8435d625c6dae38937ecaa0c7fdca9db39132a604632c3153bb9777a1de3f3e4d8dccc5719f30ce6033bebac00ec7096fc3f8c0b30c2e1a73ccc27ae163c4c4e530ea68766ea81bd58323d8c71272f316c7b3a8594c879309ca9d79556bdb38bee4a8512f6f209637cf2ff86023952ac4129966c36e5519bea7d999764ac13e5bc19a6e4d1b5df303a8bdfed8024ecc7fba1c3bbf5cc5549ca2d2df8f96420975a5f641934fb2169b89851fb0ed7c432db01b786ac0884d874bf68de12d1f123b1b1a5402783f90cb59ec5ec9e13d7740d8d0de0d4f68217075c6db9526684fa4db543750a2b9317e4a0b345ee37f8983feeeac63b40d956f0c6e1589b0044e0f635dd00cc31710ed4cb43b88e67178472de901b90633218599559ce9aa8e5e089a94175fd2eebbe71ee77735b84e91602c7474ce885ce138672c0f1e23d8d863964f8f1bd431c06a0adeb6ea412158f61a81ea1235ff1afbb512eab71f239570196d69f9d0ede5087511f07e287290b7a104ace7a794b6a3ee0f5cc782a961b4f771934def6912676ed7583e609a2d80f12ed56555c5f605eab09eed228aa1fcda4fca351e30c802eeef3c5a99d66e27944abf726883e338c826e25b30a3d12416e2144227a70a50b5c1405add1cc86bc74c174251a500b3d35f3b08bc92fae5918ad610b3dd7368c3e84e4dab15702a8dca62199aa01bd5f25a475fa79899aadb9b00c8ffc047faa0faed1dc8afe378391d1df98d0a3a06e0f8bb517142f4ddb423825406dacec984ebca3b842fa4cc60a7d09965cc0ec62c08bd38ddc80984486fc16a6708bf98cd56eb6df2f76402716930ce2022445b31b02337e0efe99c438cee47b07e8289c655eae871bce726a2cf71cd261231a0affcb3cebd56b01e8466864c286604ea5298cf6b8e9c1925bdb8349f6bf9dcef39e9b8cc03257f5e6b5995441d61ab8939b387b15015a169b0729916cca13a92a05844a825c28542cff57a2ea30ebba268b08715f06b67e3bd7da572a74165b23a4f478b2c1b689a06259922a044a8a971c2274d477912a501dd3a32e6186a164ba377d49fb49b2620cf5db1dba14ba55b121b34cbeab659b64405c1514d4783e12eec0a2ceaeb0e829d2f96391dd583e33fb2ac8ef883ddbe8220c1bc384b44906080e093d3d4701097f87352974a48d15057a0b8575c0872f4c38577fc77bc06e2e0ab7230f6c7605165f3d5411f910f7d3919b9693717855545e48ae1f42bef534f8576cfb571caba2f44abe209508817326c0d4ec6ec92f9250e9909ae6c0651b6e33456ffbf654cd408c12c63e7cde0d409fd5c1b99e0557bcb33386d509c247aa6d4f585cad71a7c79f4a1b9bfa490d66d1ac68a36577ced11b359a2a9a1b58819cf62106f6540cb84ebb9a8c489828da825499c59b8eb9afef8965a936a00af59c7f975fcf4cc024863be2b590587fe01aafddc2f60d041c635beea03cc3d7d4bd89d1ecd4bda962d786b9e0d553189c916f556b24aa9df714b49d1a8e32e486f4f79ee255894a2e49f2f911f3cdebe2bf613fe524a82b183237e6d4ca318afff494202279373cdc345bff728a6e400a95b55a92fe47e4ae30e0f47f089caceba5cae36fb3b07a94cbf49ab8907a99ec3b51b9c2619ab538500baa825694540003406d30f4c64639c1748a26bc2f1cfa9da98696118a60b043b15879597e128b4e9d6f86f26cead2c39c5c233b6871cec53bc2c388a58d7929c365259ac585f83b3dad50eacedb90587b833f542611116a5d887de27a9e0278ec8a8d2be325e80cd949807a34e2fa850942f9456e1c20f7f6963267f9de2cef99e40cba15a2023d43040ac24eafee4c4f16142c453537da74080cc4ae15d3d7ede1dd84c9ccca5d47f8f5cd7d3dc7fb5e3e3436b0a7b8fe8622eeff282c7890d0945ecb2a4b34de0913a1f11a8348d346f13c85ebe4d7bea0fabc87b99352f009d43e85782fe3d9446543bcd04148400d3933b303c674db2e07be57d6bd965850a9e4be9989a2297899bbcce121eb62c5af37985b0e5f857801f45f41fe9db889f04a95ea39d31eac16fc9c28ea9d0455aa69712c10ad21e20fe7dc46cb3281e2df1a196f60c93bc193de6f2b99d83749596da70dec45cd28ac767f7d1ec421f26144a56f954456da587fd2afbb2b153e2a066c3823c5bdce93e786d2f1962e0cdf4cbb8c18896f4f5244a30ec17e770a35de55c87b74aea5e76a819020cb24e679b02f84c6d12dfc7bfe61d167638f727a2975aca44e1ff70d9483862c2c51610874d541a6433896e5f13bc04db2b4728524b64b0a65e4bbcb0aaff636e6a4c1e62d005dc0a260908dce79301c6ad8aae9a9919d14c1522eaf8aee59c755fcdd28c766978aba6c79105d47a205078851619cb2aa7b4904695dbe63f7f9542249997969235b03f4a69b7a2b9c1e32f8b7fb7ab9d5f5cf89783f144480d71a7ef9d5b2051d18b5770451c29857db97271c9a6f95b25c9b1bf483f4792563eae3e2ccaf02fb0def863a58a13cc5b6e039ab191e74c16a32eedc716a0a3260fedc6db883857ec372622d55855471a4b4338a2f1bb42d5bdec53213dbe93188ea42dc30cfa4dac1b7b25bf5d1385c217846a826cdd74195312fb67a5d79ffd4df501900a50d9b95b027687788c86681b236945a4de3f2629d3acfc84ceb19ec3c4c987f4039584d47a9e8c68e595fe58336bad5137235949b17699d527d8e04f458ba876d735d6871094b247c082b21c3b43b125f770d4f88408e671086741b95d71caf2dc6fdde5a52170b4fd8e740cc9a13851f654efa1aa3ef622234bfee0f3cccf580f3e9b8ce13efbcfbe485c91728b72d88b6cc91f3e37fc3a99855ed33e7d10059081e548514b4af50d59a10c6af9319640a105b9367872eb8e33a636e", 0x1000, 0x0, &(0x7f0000000040)={{0x3, @default, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10.10192983s ago: executing program 3 (id=674): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 8.042447611s ago: executing program 3 (id=678): r0 = creat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c080064ee6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x10c045f55bed3d0e, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/68, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, 0x0}) r4 = openat$snapshot(0xffffff9c, &(0x7f0000002080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1670c0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3302) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.111610634s ago: executing program 0 (id=679): syz_emit_vhci(&(0x7f0000005e00)=ANY=[@ANYBLOB="040e9c6e230c08"], 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000400)=""/37, 0x25}, {0x0}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f00000005c0)=""/240, 0xf0}], 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7fffeffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x101000, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r4}) 5.359087064s ago: executing program 4 (id=682): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd']) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 5.246681572s ago: executing program 1 (id=683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) 5.130015389s ago: executing program 4 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="260f300f2290dab100602e0f01c30f01dff4660fc7b5cd4766b9800000c00f326635004000000f30dfec0f467606", 0x2e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.069080814s ago: executing program 2 (id=685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340), 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="415b66934845e42acb83a6dbd1b12a2745576c45be86eeff2575833567f96eb9dd4a5ef3ffce4ea4f15804e73b945754a8a4fb4cd667072489d4a839397d9e8aca8717d2102305e397b04050046dd6c0361f79a35f0a9371975687164fb5207aa57f62531a2feac47a0da785a74e89", 0x6f}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) 4.991311209s ago: executing program 3 (id=686): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x7, r2}, 0x38) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) 4.69402631s ago: executing program 2 (id=687): socket$pppoe(0x18, 0x1, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xd0e}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4", 0x75}, {&(0x7f00000042c0)="ddbf2011806e6720f319cf7328576c5012720676d84a00000000e9db12cfcf6709009c76b79320582d6701000000b973616e6040781ec3f1b435b3f02989f94c0f97948d7eb40fa30d34ab7b60e54947269ebf42004d943feb7c6aaf40eb05797c4d8ee50225934e0000000000002b84d3910adadd7baf16836512e01c6600bf3dba330f622a890b81cfe7e3f5198eaa479f8fb43b6cb29da01738d3c731118d05cc82b7018f2fb6b312dbaad5a940880f1c43ecb052624e41d8cbc7a05194ce7de7c588ea428b45847c723836ced51013b9e9c15813cdc50c07b5fceb3f16ff584cb3e676a5ebf4113730733e88e1f9fa3fc220dc2ee0233d330baca3677f75dab3bb8091ee6bbe4f0a9c6c6af5e281bb728297e9bf53dca225c39b187f1b9b1c8a8f47be99061f8492d61b1d9164fbc3330a033b0aec02cb8e8b14b7dec5dbd7433a3e0b7b8094989b69943a14df82f603326dc70985f2e024e35e0ed3440d72a190623829558df3b4c69f80278e9b863ea7c32f576f3919d82cd12f4f7bf1489deacccda04f14c04f80c601f08b7ce4d458df2a7affffc926152cce41522d68fa3c251d9c38d54c45f4df4fb58205bd40c7aa9dc91278542071450f33c77653fe61a50e83a9db3413585be82594bd349afeaa956b5a0942c41b2b268fe1515c13db356cb922db4272091cab97595239e9", 0x1f2}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) 4.590998756s ago: executing program 4 (id=688): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED}}, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(0x0, 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 4.413757899s ago: executing program 4 (id=689): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 4.146262527s ago: executing program 2 (id=690): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffb6, 0xffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 4.145539337s ago: executing program 1 (id=691): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001180)=""/4102, &(0x7f00000003c0)=0x1006) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x1, 0x1, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000440)=[{0xff, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {}, {}, @time=@tick=0x200009}, {0x1, 0x8, 0xb7, 0x1, @tick=0x5, {}, {}, @control={0x81, 0x5, 0x200000}}, {0x3, 0x0, 0x80, 0x0, @tick=0x690, {0xff}, {}, @control}, {0x0, 0xfe, 0x0, 0x20, @tick, {0x0, 0x2}, {}, @result={0x0, 0x1}}, {0x0, 0x3, 0x0, 0x0, @tick=0x4, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x1, @tick=0x10001, {}, {0x4}, @control={0x8, 0x4, 0x8000}}, {0xfd, 0x0, 0x3, 0x0, @time, {0xef, 0x1}, {}, @raw8={"a800a1d0580900"}}], 0xc4) read$snapshot(r4, 0x0, 0xffffffbf) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001140)) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="650f09dc6a8166b81e018ee88fc978c7c966b822008ee8b8010000000f01d9f266f30f2295b97f0800000f32b9370200000f320f35", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000001100)={0xd000, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)='D-\xfa') ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x8}) socket$kcm(0x29, 0x0, 0x0) 3.920830952s ago: executing program 2 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.678446359s ago: executing program 0 (id=693): futex(&(0x7f000000cffc)=0x20000000, 0x5, 0x1, 0x0, &(0x7f0000000280)=0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYRESOCT=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 3.591991035s ago: executing program 1 (id=694): r0 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 3.565222197s ago: executing program 2 (id=695): syz_open_dev$evdev(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="abbd7000fcdbdf090000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000440), 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000580)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007"]) r5 = openat(0xffffffffffffffff, 0x0, 0x20002, 0x5) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r7, 0x3, r6, 0x5}) 2.530467057s ago: executing program 0 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="011000115200000000000500000004000180"], 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "2002000054d3741900000000b5860000"}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c"], 0xffdd) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200540600fe8000000000000000000000000000bbff02000000000000000000000000000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f3ffffff907800001312"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00220f00000006bc42e3700d7dec834f11e312013b50d1898a5aed4bab25b7a06fc749b7781408ae2df1bfc6837b60494980f5434e6a6b684b9ace9e8b5f864dfbc5358511809387ae8ef3e6c6a94626d8b2f1026f534712"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) r8 = socket$inet6(0xa, 0x80003, 0xff) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000100)={0x89, 0xfffffc01, 0x8, 0x1, 0x7cc5, 0x5d8}) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2.030894502s ago: executing program 4 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 1.738041191s ago: executing program 2 (id=698): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000004c0)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) lseek(r2, 0x7fffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mount(&(0x7f0000000480)=@nullb, 0x0, 0x0, 0x8200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) dup(0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 1.518316726s ago: executing program 3 (id=699): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED}}, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(0x0, 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1.485758388s ago: executing program 4 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 1.412931923s ago: executing program 1 (id=701): connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xd0e}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4", 0x75}, {&(0x7f00000042c0)="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", 0x1f2}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) 1.202314358s ago: executing program 3 (id=702): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.105196684s ago: executing program 3 (id=703): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x2ff, 0x1]) 1.091370285s ago: executing program 1 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) 0s ago: executing program 1 (id=705): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ocal softirq work is pending, handler #28a!!! [ 70.205405][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.207843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 70.225118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 70.226892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.233453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 70.242634][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.249071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 70.293066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 70.301480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 70.309752][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.379150][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.463287][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.522966][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.539984][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.751132][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.764657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.250373][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259846][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.863085][ T3756] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.336800][ T3774] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 73.350300][ T3774] cramfs: wrong magic [ 76.260734][ T3785] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.770879][ T3795] autofs4:pid:3795:autofs_fill_super: called with bogus options [ 76.808806][ T3789] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 76.815592][ T3789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.956941][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c679c00: rx timeout, send abort [ 78.064136][ T3808] loop1: detected capacity change from 0 to 512 [ 78.079502][ T3808] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 78.103565][ T3789] vhci_hcd vhci_hcd.0: Device attached [ 78.122482][ T3808] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.22: iget: bad i_size value: -67835469387268086 [ 78.137879][ T3808] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.22: couldn't read orphan inode 15 (err -117) [ 78.150413][ T3808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.159115][ T3808] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 78.176045][ T3808] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.22: Directory hole found for htree leaf block 0 [ 78.316210][ T3685] vhci_hcd: vhci_device speed not set [ 78.344147][ T3818] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.22: Directory hole found for htree leaf block 0 [ 78.405922][ T3685] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 78.466091][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c679c00: abort rx timeout. Force session deactivation [ 79.398461][ T3820] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.634337][ T3820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 79.640926][ T3820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.660223][ T3820] vhci_hcd vhci_hcd.0: Device attached [ 80.186764][ T3834] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 80.194649][ T3834] cramfs: wrong magic [ 80.355866][ T3725] vhci_hcd: vhci_device speed not set [ 80.425804][ T3725] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 80.763997][ T3826] vhci_hcd: connection reset by peer [ 80.774246][ T11] vhci_hcd: stop threads [ 80.784126][ T11] vhci_hcd: release socket [ 80.812012][ T11] vhci_hcd: disconnect device [ 81.489961][ T152] cfg80211: failed to load regulatory.db [ 82.935569][ T3796] vhci_hcd: connection reset by peer [ 82.941365][ T33] vhci_hcd: stop threads [ 82.946528][ T33] vhci_hcd: release socket [ 82.957701][ T33] vhci_hcd: disconnect device [ 83.233160][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 84.615782][ T3685] vhci_hcd: vhci_device speed not set [ 86.058457][ T3725] vhci_hcd: vhci_device speed not set [ 86.376078][ T3870] autofs4:pid:3870:autofs_fill_super: called with bogus options [ 86.425802][ T3688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.855798][ T3688] usb 2-1: Using ep0 maxpacket: 8 [ 87.436968][ T3688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.473588][ T3688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.499320][ T3688] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 87.541941][ T3688] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 87.581355][ T3688] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.632038][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.789998][ T3688] hub 2-1:1.0: bad descriptor, ignoring hub [ 87.830570][ T3688] hub: probe of 2-1:1.0 failed with error -5 [ 87.845055][ T3688] cdc_wdm 2-1:1.0: skipping garbage [ 87.857445][ T3688] cdc_wdm 2-1:1.0: skipping garbage [ 87.882255][ T3688] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.888478][ T3688] cdc_wdm 2-1:1.0: Unknown control protocol [ 88.457831][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880599d5400: rx timeout, send abort [ 88.966641][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880599d5400: abort rx timeout. Force session deactivation [ 89.091328][ T3894] loop4: detected capacity change from 0 to 512 [ 89.116115][ T3892] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 89.118940][ T3894] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 89.152676][ T3892] cramfs: wrong magic [ 89.194691][ T3894] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.43: iget: bad i_size value: -67835469387268086 [ 89.214210][ T3894] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.43: couldn't read orphan inode 15 (err -117) [ 89.229452][ T3894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.238688][ T3894] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 89.255342][ T3894] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.43: Directory hole found for htree leaf block 0 [ 89.350664][ T3685] usb 2-1: USB disconnect, device number 2 [ 89.906065][ T3894] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.43: Directory hole found for htree leaf block 0 [ 90.025294][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 91.374269][ T3919] kAFS: unable to lookup cell '/' [ 93.718895][ T3933] loop0: detected capacity change from 0 to 512 [ 93.740988][ T3933] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 93.837427][ T3933] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.55: iget: bad i_size value: -67835469387268086 [ 93.858171][ T3933] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.55: couldn't read orphan inode 15 (err -117) [ 93.878911][ T3933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.887703][ T3933] ext2 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 93.901315][ T3933] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.55: Directory hole found for htree leaf block 0 [ 94.227801][ T3936] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.55: Directory hole found for htree leaf block 0 [ 94.917849][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 95.208411][ T3725] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.395748][ T3725] usb 5-1: Using ep0 maxpacket: 32 [ 96.515986][ T3725] usb 5-1: config 0 has no interfaces? [ 96.677372][ T3725] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.706151][ T3725] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.714648][ T3725] usb 5-1: Product: syz [ 96.740475][ T3725] usb 5-1: Manufacturer: syz [ 96.745149][ T3725] usb 5-1: SerialNumber: syz [ 96.773729][ T3968] loop3: detected capacity change from 0 to 512 [ 96.787920][ T3725] usb 5-1: config 0 descriptor?? [ 96.793309][ T3968] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 96.818217][ T3968] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.68: iget: bad i_size value: -67835469387268086 [ 96.832711][ T3968] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 96.848010][ T3968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.856667][ T3968] ext2 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 96.872495][ T3968] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.68: Directory hole found for htree leaf block 0 [ 97.159151][ T3725] usb 5-1: USB disconnect, device number 2 [ 98.581839][ T3968] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.68: Directory hole found for htree leaf block 0 [ 98.706545][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 98.760027][ T3987] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET) [ 99.056063][ T3998] kAFS: unable to lookup cell '/' [ 99.837280][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 99.872666][ T3994] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.943588][ T3994] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 99.952507][ T3994] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.991697][ T3994] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 100.445553][ T4023] loop0: detected capacity change from 0 to 512 [ 100.454909][ T4023] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 100.495038][ T4023] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.81: iget: bad i_size value: -67835469387268086 [ 100.513912][ T4023] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.81: couldn't read orphan inode 15 (err -117) [ 100.548002][ T4023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.555823][ T3725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.556745][ T4023] ext2 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 100.579605][ T4023] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.81: Directory hole found for htree leaf block 0 [ 100.595198][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a84d000: rx timeout, send abort [ 101.095284][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a84d000: abort rx timeout. Force session deactivation [ 101.205917][ T3725] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.214920][ T3725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.267474][ T4027] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.81: Directory hole found for htree leaf block 0 [ 101.284833][ T3725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.304349][ T3725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.081181][ T4044] kAFS: unable to lookup cell '/' [ 102.486184][ T3725] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.495531][ T3725] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.503801][ T3725] usb 4-1: Product: syz [ 102.516486][ T3725] usb 4-1: Manufacturer: syz [ 102.525660][ C1] sched: RT throttling activated [ 102.603402][ T3725] cdc_wdm 4-1:1.0: skipping garbage [ 102.632393][ T3725] cdc_wdm 4-1:1.0: skipping garbage [ 102.668713][ T3725] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 102.681844][ T3725] cdc_wdm 4-1:1.0: Unknown control protocol [ 102.728194][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 103.760202][ T4051] Zero length message leads to an empty skb [ 103.888859][ T3718] usb 4-1: USB disconnect, device number 2 [ 106.494417][ T152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.579712][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059b14800: rx timeout, send abort [ 107.088134][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059b14800: abort rx timeout. Force session deactivation [ 107.559437][ T152] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 107.589310][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.613874][ T152] usb 3-1: config 0 descriptor?? [ 107.672162][ T152] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 107.901297][ T945] usb 3-1: USB disconnect, device number 2 [ 108.322985][ T4120] loop4: detected capacity change from 0 to 764 [ 108.796016][ T4115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.802300][ T4115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.809113][ T4115] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 108.816576][ T4115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.822574][ T4115] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.828607][ T4115] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 108.835889][ T4115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.841957][ T4115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.848684][ T4115] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 108.856758][ T4115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.862990][ T4115] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.871335][ T4115] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 108.879846][ T4115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.886030][ T4115] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.892405][ T4115] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 110.699746][ T3652] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.887772][ T3642] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.892351][ T3652] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.938314][ T4145] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 112.947149][ T4145] cramfs: wrong magic [ 114.348814][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888074b65c00: rx timeout, send abort [ 114.396699][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.402846][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.412026][ T3642] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.418140][ T3642] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.424164][ T3642] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.838491][ T4156] kAFS: unable to lookup cell '/' [ 114.857199][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888074b65c00: abort rx timeout. Force session deactivation [ 115.905443][ T4167] loop0: detected capacity change from 0 to 512 [ 115.916620][ T4167] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 115.945289][ T4167] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.119: iget: bad i_size value: -67835469387268086 [ 115.964687][ T4167] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.119: couldn't read orphan inode 15 (err -117) [ 115.982882][ T4167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.991768][ T4167] ext2 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 116.005349][ T4167] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.119: Directory hole found for htree leaf block 0 [ 116.496729][ T3642] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.505592][ T3642] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.744140][ T4181] device syzkaller0 entered promiscuous mode [ 116.793131][ T4183] device syzkaller0 left promiscuous mode [ 117.699792][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.793956][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 119.745919][ T26] usb 4-1: device descriptor read/all, error -71 [ 119.898978][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a70e800: rx timeout, send abort [ 120.065482][ T4207] kAFS: unable to lookup cell '/' [ 120.407372][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a70e800: abort rx timeout. Force session deactivation [ 122.230558][ T4228] loop4: detected capacity change from 0 to 512 [ 122.257136][ T4228] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 122.312866][ T4228] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.134: iget: bad i_size value: -67835469387268086 [ 122.367303][ T4228] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 122.386270][ T4228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.394861][ T4228] ext2 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 122.408279][ T4228] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.134: Directory hole found for htree leaf block 0 [ 122.526377][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.213407][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 125.351545][ T4248] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 127.480630][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880751c9000: rx timeout, send abort [ 128.713838][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880751c9000: abort rx timeout. Force session deactivation [ 129.216627][ T4280] loop4: detected capacity change from 0 to 512 [ 129.347239][ T3652] Bluetooth: Wrong link type (-71) [ 129.355100][ T4280] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 130.009809][ T4280] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.149: iget: bad i_size value: -67835469387268086 [ 130.024677][ T4280] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 130.048673][ T4280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.057435][ T4280] ext2 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 130.070365][ T4279] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.149: Directory hole found for htree leaf block 0 [ 132.875863][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882278][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159815][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 133.163177][ T4290] syz.0.150 (4290): drop_caches: 2 [ 135.241287][ T3652] Bluetooth: Wrong link type (-71) [ 135.658220][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058a80000: rx timeout, send abort [ 136.182040][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058a80000: abort rx timeout. Force session deactivation [ 136.210107][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 136.345830][ T4347] loop4: detected capacity change from 0 to 512 [ 136.368162][ T4347] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 136.486002][ T4347] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.168: iget: bad i_size value: -67835469387268086 [ 136.506222][ T4347] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.168: couldn't read orphan inode 15 (err -117) [ 136.539869][ T4347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.549369][ T4347] ext2 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 136.614197][ T4355] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.624511][ T4347] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.168: Directory hole found for htree leaf block 0 [ 137.167539][ T4355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 137.174132][ T4355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.537874][ T4355] vhci_hcd vhci_hcd.0: Device attached [ 138.275742][ T26] vhci_hcd: vhci_device speed not set [ 138.345930][ T26] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 138.550807][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 139.606965][ T4359] vhci_hcd: connection reset by peer [ 139.613338][ T4215] vhci_hcd: stop threads [ 139.617711][ T4215] vhci_hcd: release socket [ 139.622880][ T4215] vhci_hcd: disconnect device [ 139.625749][ T945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.839513][ T4389] hub 9-0:1.0: USB hub found [ 140.867391][ T4389] hub 9-0:1.0: 8 ports detected [ 140.887576][ T945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.702280][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.793222][ T945] usb 2-1: config 0 descriptor?? [ 141.886307][ T945] usb 2-1: can't set config #0, error -71 [ 141.924702][ T945] usb 2-1: USB disconnect, device number 3 [ 143.316980][ T4413] vivid-000: ================= START STATUS ================= [ 143.626176][ T26] vhci_hcd: vhci_device speed not set [ 143.743138][ T4413] vivid-000: Generate PTS: true [ 143.885030][ T4413] vivid-000: Generate SCR: true [ 143.905840][ T4413] tpg source WxH: 640x360 (Y'CbCr) [ 143.954434][ T4413] tpg field: 1 [ 143.965082][ T4413] tpg crop: 640x360@0x0 [ 143.985336][ T4413] tpg compose: 640x360@0x0 [ 144.005515][ T4413] tpg colorspace: 8 [ 144.009810][ T4413] tpg transfer function: 0/0 [ 144.035779][ T4413] tpg Y'CbCr encoding: 0/0 [ 144.044738][ T4413] tpg quantization: 0/0 [ 144.061386][ T4413] tpg RGB range: 0/2 [ 144.385921][ T4413] vivid-000: ================== END STATUS ================== [ 147.148739][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 148.338285][ T4454] syz.1.193 (4454) used greatest stack depth: 20000 bytes left [ 148.610243][ T4463] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.123320][ T4464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 149.129992][ T4464] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.343100][ T4464] vhci_hcd vhci_hcd.0: Device attached [ 149.439105][ T4468] vhci_hcd: connection closed [ 149.439361][ T3979] vhci_hcd: stop threads [ 149.496970][ T3979] vhci_hcd: release socket [ 149.532469][ T3979] vhci_hcd: disconnect device [ 149.537477][ T3649] vhci_hcd: vhci_device speed not set [ 149.575076][ T27] audit: type=1800 audit(1726577657.751:2): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.198" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 151.019358][ T4471] syz.1.197 (4471): drop_caches: 2 [ 155.331910][ T4526] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.505567][ T3642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.515543][ T3642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.523974][ T3642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.538089][ T3642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.547083][ T3642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.555335][ T3642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.562622][ T4526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 155.569265][ T4526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 155.600175][ T4526] vhci_hcd vhci_hcd.0: Device attached [ 156.677021][ T26] vhci_hcd: vhci_device speed not set [ 156.745800][ T26] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 156.883104][ T4537] vhci_hcd: connection reset by peer [ 156.888741][ T102] vhci_hcd: stop threads [ 156.893122][ T102] vhci_hcd: release socket [ 156.919943][ T102] vhci_hcd: disconnect device [ 157.171802][ T4536] chnl_net:caif_netlink_parms(): no params data found [ 157.647206][ T3652] Bluetooth: hci5: command tx timeout [ 158.432882][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.455404][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.520046][ T4536] device bridge_slave_0 entered promiscuous mode [ 158.590758][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.613045][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.637833][ T4536] device bridge_slave_1 entered promiscuous mode [ 158.829324][ T4536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.876152][ T4536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.337649][ T4536] team0: Port device team_slave_0 added [ 159.449011][ T4566] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 159.477299][ T4566] netlink: 2 bytes leftover after parsing attributes in process `syz.3.221'. [ 159.605796][ T4566] device bond0 entered promiscuous mode [ 159.755912][ T3652] Bluetooth: hci5: command tx timeout [ 160.152030][ T4566] device bond_slave_0 entered promiscuous mode [ 160.186791][ T4566] device bond_slave_1 entered promiscuous mode [ 160.223372][ T4566] bridge0: port 3(bond0) entered blocking state [ 160.266129][ T4566] bridge0: port 3(bond0) entered disabled state [ 160.314177][ T4566] bridge0: port 3(bond0) entered blocking state [ 160.321680][ T4566] bridge0: port 3(bond0) entered forwarding state [ 160.353672][ T4536] team0: Port device team_slave_1 added [ 161.635479][ T4536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.660341][ T4536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.699456][ T4536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.009536][ T3652] Bluetooth: hci5: command tx timeout [ 163.358308][ T3823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.368998][ T26] vhci_hcd: vhci_device speed not set [ 163.425977][ T4536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.433445][ T4536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.519683][ T4536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.556798][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 163.566088][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 163.617461][ T3823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.766070][ T945] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.250378][ T4536] device hsr_slave_0 entered promiscuous mode [ 164.263824][ T4536] device hsr_slave_1 entered promiscuous mode [ 164.276376][ T4536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.284967][ T4536] Cannot create hsr debugfs directory [ 164.347485][ T3823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.492675][ T3823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.505925][ T945] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 165.451756][ T3652] Bluetooth: hci5: command tx timeout [ 165.484425][ T945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.557391][ T945] usb 5-1: config 0 descriptor?? [ 165.605317][ T945] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 165.884531][ T3721] usb 5-1: USB disconnect, device number 3 [ 166.055941][ T4620] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 168.102337][ T4536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.776988][ T4536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.788411][ T4536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.859980][ T4536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.106777][ T3652] Bluetooth: hci2: unexpected cc 0x2002 length: 1 < 4 [ 170.114533][ T3652] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 170.537351][ T4536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.095388][ T3823] device hsr_slave_0 left promiscuous mode [ 171.244025][ T3823] device hsr_slave_1 left promiscuous mode [ 171.478834][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.498859][ T3823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.577569][ T4690] kAFS: unable to lookup cell '/' [ 171.736408][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.844431][ T3823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.991165][ T3823] device bridge_slave_1 left promiscuous mode [ 172.076315][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.300201][ T3823] device bridge_slave_0 left promiscuous mode [ 172.346185][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.499513][ T3823] device veth1_macvtap left promiscuous mode [ 172.536005][ T3823] device veth0_macvtap left promiscuous mode [ 172.552580][ T3823] device veth1_vlan left promiscuous mode [ 172.583165][ T3823] device veth0_vlan left promiscuous mode [ 174.127199][ T3652] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 174.136429][ T3652] Bluetooth: hci2: Injecting HCI hardware error event [ 174.144793][ T3642] Bluetooth: hci2: hardware error 0x00 [ 174.267597][ T3649] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 174.666024][ T3649] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.705747][ T3649] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.806060][ T3649] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.815176][ T3649] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.865748][ T3649] usb 3-1: Manufacturer: syz [ 174.911275][ T3649] usb 3-1: config 0 descriptor?? [ 175.171283][ T3649] rc_core: IR keymap rc-hauppauge not found [ 175.192041][ T3649] Registered IR keymap rc-empty [ 175.213522][ T3649] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 175.253190][ T3649] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 175.333123][ T3649] usb 3-1: USB disconnect, device number 3 [ 175.562816][ T3823] team0 (unregistering): Port device team_slave_1 removed [ 175.663226][ T3823] team0 (unregistering): Port device team_slave_0 removed [ 175.900421][ T3823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.206189][ T3642] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 176.597174][ T3823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.774938][ T4726] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.863237][ T3642] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 176.893159][ T4734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 176.899749][ T4734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.007073][ T4734] vhci_hcd vhci_hcd.0: Device attached [ 177.215771][ T3685] vhci_hcd: vhci_device speed not set [ 177.345760][ T3685] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 178.182832][ T4737] vhci_hcd: connection reset by peer [ 178.192263][ T4749] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 178.195755][ T33] vhci_hcd: stop threads [ 178.278852][ T33] vhci_hcd: release socket [ 178.294889][ T33] vhci_hcd: disconnect device [ 179.872913][ T3823] bond0 (unregistering): Released all slaves [ 180.021550][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.037800][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.056238][ T4757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.062217][ T4757] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.068315][ T4757] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 180.075812][ T4757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.081735][ T4757] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.087963][ T4757] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 180.095996][ T4757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.101919][ T4757] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.107879][ T4757] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 180.115045][ T4757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 180.120995][ T4757] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 180.126956][ T4757] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 180.195233][ T4536] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.234299][ T4536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.245451][ T4536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.313944][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.365036][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.540673][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.547833][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.289318][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.335386][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.396446][ T4000] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.403620][ T4000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.469023][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.512378][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.660482][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.688692][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.033573][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.205789][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.211917][ T3652] Bluetooth: hci5: command 0x0c1a tx timeout [ 182.218023][ T3642] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.218053][ T3657] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.248582][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.271653][ T3642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.297950][ T3642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.308757][ T3642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.318882][ T3642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.328960][ T3642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.336801][ T3642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.348627][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.510546][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.523800][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.621385][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.649841][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.678533][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.699546][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.265948][ T3685] vhci_hcd: vhci_device speed not set [ 184.094446][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.110190][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.133661][ T4536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.285732][ T3642] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.285805][ T3652] Bluetooth: hci5: command 0x0c1a tx timeout [ 184.293284][ T3657] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.365848][ T3642] Bluetooth: hci3: command tx timeout [ 184.414945][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.451694][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.491989][ T4807] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 184.547142][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.751340][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.773568][ T4536] device veth0_vlan entered promiscuous mode [ 184.804407][ T4786] chnl_net:caif_netlink_parms(): no params data found [ 184.870547][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.881283][ T3979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.982694][ T4536] device veth1_vlan entered promiscuous mode [ 185.182030][ T3823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.329453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.363959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.455575][ T3823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.478329][ T4822] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.547582][ T4536] device veth0_macvtap entered promiscuous mode [ 185.555499][ T4822] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 185.562063][ T4822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.583827][ T4822] vhci_hcd vhci_hcd.0: Device attached [ 185.607803][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.615005][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.637615][ T4786] device bridge_slave_0 entered promiscuous mode [ 185.692161][ T3823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.779129][ T4218] vhci_hcd: vhci_device speed not set [ 185.802151][ T4826] vhci_hcd: connection closed [ 185.802418][ T3979] vhci_hcd: stop threads [ 185.813926][ T4536] device veth1_macvtap entered promiscuous mode [ 185.822028][ T3979] vhci_hcd: release socket [ 185.839904][ T3979] vhci_hcd: disconnect device [ 185.845926][ T4218] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 185.846531][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.872741][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.900634][ T4786] device bridge_slave_1 entered promiscuous mode [ 186.008841][ T3823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.366166][ T3642] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.449953][ T3642] Bluetooth: hci3: command tx timeout [ 188.350471][ T4837] process 'syz.1.280' launched './file0' with NULL argv: empty string added [ 188.526209][ T3642] Bluetooth: hci3: command tx timeout [ 190.035027][ T4848] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 190.043775][ T4848] cramfs: wrong magic [ 190.606862][ T3642] Bluetooth: hci3: command tx timeout [ 190.753009][ T4854] fuse: Invalid rootmode [ 191.016992][ T4218] vhci_hcd: vhci_device speed not set [ 192.289614][ T4786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.302357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.315056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.399746][ T4786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.430461][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.459963][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.474780][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.492477][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.503135][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.531948][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.543498][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.562550][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.618687][ T4536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.719661][ T4786] team0: Port device team_slave_0 added [ 192.739378][ T4786] team0: Port device team_slave_1 added [ 192.842141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.851423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.867127][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.060179][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.108308][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.515766][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.555813][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.805839][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.832263][ T4536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.855677][ T4536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.881941][ T4536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.922864][ T4881] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.991611][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.025714][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.076182][ T4881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 194.082867][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.083380][ T4786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.122573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.132849][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132942][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.161715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.177562][ T4536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.199646][ T4536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.224073][ T4536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.341627][ T4890] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 194.348586][ T4890] cramfs: wrong magic [ 194.438986][ T4536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.560922][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.770439][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.377269][ T4786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.391139][ T4882] vhci_hcd: connection closed [ 195.392000][ T4881] vhci_hcd vhci_hcd.0: Device attached [ 195.434426][ T9] vhci_hcd: stop threads [ 195.470731][ T9] vhci_hcd: release socket [ 195.475303][ T9] vhci_hcd: disconnect device [ 195.566049][ T4895] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 195.939897][ T4786] device hsr_slave_0 entered promiscuous mode [ 195.975489][ T4786] device hsr_slave_1 entered promiscuous mode [ 196.006113][ T4786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.038531][ T4786] Cannot create hsr debugfs directory [ 196.308328][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.329194][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.456826][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.596650][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.633489][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.747407][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.172234][ T4944] device macsec0 entered promiscuous mode [ 201.390872][ T3823] device hsr_slave_0 left promiscuous mode [ 201.583551][ T3823] device hsr_slave_1 left promiscuous mode [ 202.718027][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.772595][ T3823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.967862][ T4961] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 202.977406][ T4961] cramfs: wrong magic [ 203.239909][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.267847][ T3823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.296259][ T3823] device bridge_slave_1 left promiscuous mode [ 203.322890][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.360372][ T3823] device bridge_slave_0 left promiscuous mode [ 203.389395][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.500740][ T3823] device veth1_macvtap left promiscuous mode [ 203.540104][ T3823] device veth0_macvtap left promiscuous mode [ 203.585891][ T3823] device veth1_vlan left promiscuous mode [ 203.591810][ T3823] device veth0_vlan left promiscuous mode [ 204.980682][ T945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 205.946892][ T945] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 205.975680][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.020040][ T945] usb 2-1: config 0 descriptor?? [ 206.099796][ T945] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 206.337695][ T4991] hub 9-0:1.0: USB hub found [ 206.357654][ T4991] hub 9-0:1.0: 8 ports detected [ 206.460045][ T945] usb 2-1: USB disconnect, device number 4 [ 210.434969][ T5003] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 210.441861][ T5003] cramfs: wrong magic [ 210.830185][ T3823] team0 (unregistering): Port device team_slave_1 removed [ 210.994069][ T3823] team0 (unregistering): Port device team_slave_0 removed [ 211.250420][ T3823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.984851][ T3823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.087122][ T5045] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 215.450750][ T5053] kAFS: unable to lookup cell '/' [ 215.618455][ T3823] bond0 (unregistering): Released all slaves [ 216.210661][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.228204][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.237601][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.245898][ T5051] net veth1_virt_wifi ,: renamed from virt_wifi0 [ 216.362127][ T4786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.425979][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.445249][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.452916][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.636511][ T4786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.669095][ T4786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.799628][ T4786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.987677][ T4786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.038453][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.076670][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.121046][ T4786] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.150448][ T5055] chnl_net:caif_netlink_parms(): no params data found [ 218.246766][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.285487][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.301426][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.308683][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.360652][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.483960][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.523372][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.530599][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.538779][ T3654] Bluetooth: hci0: command tx timeout [ 219.365092][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.484859][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.524930][ T5055] device bridge_slave_0 entered promiscuous mode [ 219.702227][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.711410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.720566][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.733428][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.741631][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.791399][ T5055] device bridge_slave_1 entered promiscuous mode [ 220.228383][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 220.446334][ T5100] device bridge_slave_1 left promiscuous mode [ 220.452695][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.534255][ T5100] bridge1: port 1(bridge_slave_1) entered blocking state [ 220.555755][ T5100] bridge1: port 1(bridge_slave_1) entered disabled state [ 220.564092][ T5100] device bridge_slave_1 entered promiscuous mode [ 220.616001][ T3654] Bluetooth: hci0: command tx timeout [ 220.624605][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.683349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.709255][ T5109] kAFS: unable to lookup cell '/' [ 220.889848][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.060275][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.236605][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.506733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.528305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.559413][ T4786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.659792][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 222.428135][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.447374][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.464007][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.560362][ T4496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.700938][ T3654] Bluetooth: hci0: command tx timeout [ 222.751331][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.744090][ T5130] loop3: detected capacity change from 0 to 512 [ 223.773711][ T5130] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 223.809134][ T5130] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.351: iget: bad i_size value: -67835469387268086 [ 223.823413][ T5130] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.351: couldn't read orphan inode 15 (err -117) [ 223.836974][ T5130] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 223.846042][ T5130] ext2 filesystem being mounted at /80/file0 supports timestamps until 2038 (0x7fffffff) [ 223.858511][ T5130] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.351: Directory hole found for htree leaf block 0 [ 224.095866][ T4496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.567091][ T5055] team0: Port device team_slave_0 added [ 224.688255][ T4496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.701679][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 224.767233][ T3642] Bluetooth: hci0: command tx timeout [ 224.817544][ T5055] team0: Port device team_slave_1 added [ 226.584451][ T4496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.541513][ T5153] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 227.549344][ T5153] cramfs: wrong magic [ 227.766619][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.049486][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.157441][ T5158] kAFS: unable to lookup cell '/' [ 228.974290][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.998930][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.013409][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.069712][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.109865][ T4786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.179951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.196991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.149037][ T5055] device hsr_slave_0 entered promiscuous mode [ 230.157157][ T5055] device hsr_slave_1 entered promiscuous mode [ 230.163916][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.208816][ T5055] Cannot create hsr debugfs directory [ 230.330180][ T5174] loop1: detected capacity change from 0 to 512 [ 230.339055][ T5174] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 230.361486][ T5174] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.362: iget: bad i_size value: -67835469387268086 [ 230.376225][ T5174] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.362: couldn't read orphan inode 15 (err -117) [ 230.388507][ T5174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.397119][ T5174] ext2 filesystem being mounted at /96/file0 supports timestamps until 2038 (0x7fffffff) [ 230.409356][ T5174] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.362: Directory hole found for htree leaf block 0 [ 231.636422][ T5166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.642476][ T5166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.648652][ T5166] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 231.658338][ T5166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.664281][ T5166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.670285][ T5166] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 231.677526][ T5166] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 231.684910][ T5166] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 231.690921][ T5166] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 231.698101][ T5166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.704008][ T5166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 231.710849][ T5166] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 231.718048][ T5166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.723975][ T5166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 231.730245][ T5166] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 231.860157][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 233.399580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.420976][ T5227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.367'. [ 233.422388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.607918][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.632029][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.647067][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.764993][ T4786] device veth0_vlan entered promiscuous mode [ 233.784210][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.804560][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.806242][ T3654] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.818169][ T3657] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.825265][ T3642] Bluetooth: hci5: command 0x0c1a tx timeout [ 233.831398][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.962723][ T4786] device veth1_vlan entered promiscuous mode [ 234.180920][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.217213][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.920971][ T5239] kAFS: unable to lookup cell '/' [ 235.412775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.426879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.489060][ T4786] device veth0_macvtap entered promiscuous mode [ 235.591859][ T4786] device veth1_macvtap entered promiscuous mode [ 235.713353][ T5227] infiniband syz0: set active [ 235.722933][ T5227] infiniband syz0: added bond_slave_0 [ 235.729221][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.741714][ T5055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.766235][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.781019][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.784962][ T5227] rdma_rxe: unable to create cq [ 235.801687][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.801802][ T5227] infiniband syz0: Couldn't create ib_mad CQ [ 235.823831][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.824503][ T5227] infiniband syz0: Couldn't open port 1 [ 235.844454][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.860588][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.871385][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.882310][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.893133][ T3652] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.899664][ T3654] Bluetooth: hci5: command 0x0c1a tx timeout [ 235.899685][ T3657] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.905749][ T3652] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.929356][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.943435][ T5055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.967704][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.982533][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.996279][ T5227] RDS/IB: syz0: added [ 236.000782][ T5227] smc: adding ib device syz0 with port count 1 [ 236.012907][ T5227] smc: ib device syz0 port 1 has pnetid [ 236.018937][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.028522][ T5055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.052577][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.075504][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.100288][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.127815][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.138178][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.149748][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.159822][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.170610][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.193936][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.208310][ T5055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.249987][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.284133][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.318063][ T4786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.336619][ T4786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.355674][ T4786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.364578][ T4786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.742898][ T4032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.781320][ T4032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.803252][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.851218][ T5256] loop1: detected capacity change from 0 to 512 [ 236.853738][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.867473][ T5256] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 236.900004][ T4032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.003157][ T5256] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.372: iget: bad i_size value: -67835469387268086 [ 237.010962][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.023865][ T5256] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.372: couldn't read orphan inode 15 (err -117) [ 237.036295][ T5256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.044540][ T4032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.044867][ T5256] ext2 filesystem being mounted at /100/file0 supports timestamps until 2038 (0x7fffffff) [ 237.808681][ T5256] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.372: Directory hole found for htree leaf block 0 [ 238.019071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.114656][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 238.167312][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.207775][ T5055] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.274109][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.311449][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.367845][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.375009][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.425452][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.473038][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.500224][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.528586][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.535849][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.558702][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.577635][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.639780][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.701966][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.734595][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.772171][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.865817][ T5286] kAFS: unable to lookup cell '/' [ 238.913104][ T5055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.924832][ T5055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.633135][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.658722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.675532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.747621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.793138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.879468][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.432898][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.457327][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.469733][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.552925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.553683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.606621][ T5312] loop0: detected capacity change from 0 to 512 [ 241.616458][ T5312] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 241.636601][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.637322][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.638148][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.638749][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.648790][ T5055] device veth0_vlan entered promiscuous mode [ 241.651612][ T5312] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.383: iget: bad i_size value: -67835469387268086 [ 241.652068][ T5312] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.383: couldn't read orphan inode 15 (err -117) [ 241.652488][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.652586][ T5312] ext2 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 241.656269][ T5312] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.383: Directory hole found for htree leaf block 0 [ 241.701826][ T5055] device veth1_vlan entered promiscuous mode [ 241.773194][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.782467][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.783421][ T4536] EXT4-fs (loop0): unmounting filesystem. [ 241.783809][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.793922][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.847526][ T5055] device veth0_macvtap entered promiscuous mode [ 241.864429][ T5055] device veth1_macvtap entered promiscuous mode [ 241.962318][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.275747][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.302060][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.321866][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.374575][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.395642][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.405542][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.431174][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.449839][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.475268][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.495036][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.513402][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.535333][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.561277][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.581185][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.613502][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.638092][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.668722][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.694914][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.755240][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.768547][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.778796][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.789633][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.799900][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.810700][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.823578][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.836039][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.876643][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.898797][ T5055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.931220][ T5055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.959175][ T5055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.995676][ T5055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.244896][ T5326] kAFS: unable to lookup cell '/' [ 244.209371][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.235681][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.281447][ T3657] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 244.335979][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.414125][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.479842][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.513524][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.619963][ T4496] device hsr_slave_0 left promiscuous mode [ 244.696291][ T4496] device hsr_slave_1 left promiscuous mode [ 244.722609][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.752752][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.790105][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.833760][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.865664][ T4496] device bridge_slave_1 left promiscuous mode [ 244.904198][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.951834][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.971087][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.980392][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.990595][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.000795][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.009248][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.039988][ T4496] device bridge_slave_0 left promiscuous mode [ 245.075409][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.308895][ T4496] device veth1_macvtap left promiscuous mode [ 245.322167][ T4496] device veth0_macvtap left promiscuous mode [ 245.345725][ T4496] device veth1_vlan left promiscuous mode [ 245.363008][ T4496] device veth0_vlan left promiscuous mode [ 246.458516][ T5349] kvm [5348]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x5ce00000000 [ 250.729830][ T3657] Bluetooth: hci1: command tx timeout [ 250.736043][ T3652] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 250.744617][ T3652] Bluetooth: hci4: Injecting HCI hardware error event [ 250.754619][ T3652] Bluetooth: hci4: hardware error 0x00 [ 251.252457][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.263909][ T3642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.272512][ T3642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.280931][ T3642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.291341][ T3642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.298973][ T3642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.450818][ T5370] kAFS: unable to lookup cell '/' [ 252.245148][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 252.293131][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 252.339114][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.384526][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.768463][ T3654] Bluetooth: hci1: command tx timeout [ 252.831613][ T4496] bond0 (unregistering): Released all slaves [ 252.858966][ T3652] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 253.157813][ T3652] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 253.327049][ T3652] Bluetooth: hci2: command tx timeout [ 254.846387][ T3652] Bluetooth: hci1: command tx timeout [ 255.415891][ T3652] Bluetooth: hci2: command tx timeout [ 255.514770][ T4496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.567710][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.574102][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.673974][ T4496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.739709][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 255.862774][ T4496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.999131][ T4496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.270307][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.287394][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.297211][ T5342] device bridge_slave_0 entered promiscuous mode [ 256.352116][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.360859][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.379196][ T5342] device bridge_slave_1 entered promiscuous mode [ 256.541226][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.615282][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.897833][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 256.926633][ T3652] Bluetooth: hci1: command tx timeout [ 257.056634][ T5342] team0: Port device team_slave_0 added [ 257.072118][ T5342] team0: Port device team_slave_1 added [ 257.175819][ T3652] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 257.184999][ T3652] Bluetooth: hci5: Injecting HCI hardware error event [ 257.194079][ T3657] Bluetooth: hci5: hardware error 0x00 [ 257.311378][ T5428] kAFS: unable to lookup cell '/' [ 257.496155][ T3652] Bluetooth: hci2: command tx timeout [ 258.346692][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.353827][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.532895][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.020118][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.033302][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.074406][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.302396][ T3654] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 259.463746][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.495333][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.528134][ T5365] device bridge_slave_0 entered promiscuous mode [ 259.565792][ T3654] Bluetooth: hci2: command tx timeout [ 259.629936][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.661428][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.671453][ T5365] device bridge_slave_1 entered promiscuous mode [ 259.701540][ T5342] device hsr_slave_0 entered promiscuous mode [ 259.718073][ T5342] device hsr_slave_1 entered promiscuous mode [ 259.738531][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.757142][ T5342] Cannot create hsr debugfs directory [ 260.141260][ T3657] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 260.229591][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.334406][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.630455][ T5365] team0: Port device team_slave_0 added [ 260.667829][ T5365] team0: Port device team_slave_1 added [ 260.724969][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.740172][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.794503][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.743327][ T3657] Bluetooth: hci2: command tx timeout [ 261.764547][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.782471][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.845055][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.951130][ T27] audit: type=1326 audit(1726577770.131:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.123943][ T27] audit: type=1326 audit(1726577770.161:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.163288][ T5365] device hsr_slave_0 entered promiscuous mode [ 262.195501][ T5365] device hsr_slave_1 entered promiscuous mode [ 262.227045][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.236097][ T27] audit: type=1326 audit(1726577770.301:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.260295][ T5365] Cannot create hsr debugfs directory [ 262.273062][ T27] audit: type=1326 audit(1726577770.301:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.296877][ T27] audit: type=1326 audit(1726577770.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.331277][ T27] audit: type=1326 audit(1726577770.301:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5460 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 262.354495][ T4496] device bridge_slave_1 left promiscuous mode [ 262.370608][ T4496] bridge1: port 1(bridge_slave_1) entered disabled state [ 262.426785][ T4496] device hsr_slave_0 left promiscuous mode [ 262.453446][ T4496] device hsr_slave_1 left promiscuous mode [ 262.484876][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.513353][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.561793][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.601477][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.655031][ T4496] bridge0: port 3(bond0) entered disabled state [ 262.689213][ T4496] device bridge_slave_0 left promiscuous mode [ 262.695515][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.813556][ T4496] device veth1_macvtap left promiscuous mode [ 262.820642][ T4496] device veth0_macvtap left promiscuous mode [ 262.826945][ T4496] device veth1_vlan left promiscuous mode [ 262.833094][ T4496] device veth0_vlan left promiscuous mode [ 262.874616][ T5480] kvm [5479]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x5ce00000000 [ 262.947664][ T4496] infiniband syz0: set down [ 263.301903][ T5485] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 263.343300][ T3652] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 263.353930][ T3652] Bluetooth: hci0: Injecting HCI hardware error event [ 263.363385][ T3652] Bluetooth: hci0: hardware error 0x00 [ 263.800870][ T5489] kAFS: unable to lookup cell '/' [ 265.034172][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 265.226104][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 265.347965][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.357142][ T4496] device bond_slave_1 left promiscuous mode [ 265.406004][ T3652] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 265.505738][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.521565][ T4496] device bond_slave_0 left promiscuous mode [ 265.554441][ T3823] smc: removing ib device syz0 [ 265.803557][ T5504] 9pnet_fd: Insufficient options for proto=fd [ 266.192474][ T4496] bond0 (unregistering): Released all slaves [ 266.431153][ T3690] infiniband syz0: ib_query_port failed (-19) [ 266.475104][ T5501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 267.274161][ T5342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.781887][ T5342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.243955][ T5342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.292712][ T5342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.572561][ T5365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.289081][ T5365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.372216][ T5365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.580488][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.687915][ T5365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.797331][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.820861][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.833692][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.934193][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.019123][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.178117][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.185372][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.195126][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.233049][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.405858][ T4000] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.413154][ T4000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.734184][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.804379][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.841013][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.856606][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.870400][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.909494][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.944828][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.998642][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.012826][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.031998][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.041691][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.063580][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.090544][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.132973][ T5365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.176813][ T5365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.226654][ T5365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.286729][ T5365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.370251][ T5540] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 272.728101][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.848800][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.867015][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.970697][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.009131][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.030035][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.084237][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.091512][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.160066][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.336360][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.344531][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.353293][ T5583] 9pnet_virtio: no channels available for device syz [ 273.375441][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.398844][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.431025][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.438286][ T4032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.465164][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.504116][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.552173][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.592605][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.641628][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.701525][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.742716][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.762395][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.783318][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.806698][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.826741][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.859222][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.975134][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.998744][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.029345][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.087338][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.124295][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.209609][ T5342] device veth0_vlan entered promiscuous mode [ 275.401656][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.436402][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.454373][ T5342] device veth1_vlan entered promiscuous mode [ 275.791329][ T5619] block device autoloading is deprecated and will be removed. [ 275.839445][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.864122][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.903454][ T5342] device veth0_macvtap entered promiscuous mode [ 275.924073][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.947116][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.986734][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.014938][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.041102][ T5342] device veth1_macvtap entered promiscuous mode [ 276.072422][ T4496] device hsr_slave_0 left promiscuous mode [ 276.091904][ T4496] device hsr_slave_1 left promiscuous mode [ 276.163253][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.175721][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.195535][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.204246][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.222011][ T4496] device bridge_slave_1 left promiscuous mode [ 276.240181][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.288298][ T4496] device bridge_slave_0 left promiscuous mode [ 276.300581][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.372437][ T4496] device veth1_macvtap left promiscuous mode [ 276.385474][ T4496] device veth0_macvtap left promiscuous mode [ 276.400022][ T4496] device veth1_vlan left promiscuous mode [ 276.409185][ T4496] device veth0_vlan left promiscuous mode [ 277.424628][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 277.481897][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 277.532809][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.588702][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.191955][ T4496] bond0 (unregistering): Released all slaves [ 278.338773][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.350461][ T5639] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.417343][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.492447][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.531448][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.555725][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.612214][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.665903][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.697928][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.768596][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.787483][ T4000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.893345][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.921568][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.415829][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.464223][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.516725][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.527751][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.540885][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.567714][ T5342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.631039][ T5342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.710395][ T5342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.765671][ T5342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.803833][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.823575][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.896837][ T5664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.937923][ T5666] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 279.952676][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.963439][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.988010][ T5664] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.004680][ T5664] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 280.018128][ T5664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.024342][ T5664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.035458][ T5664] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 280.103617][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.134324][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.174538][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.193643][ T5365] device veth0_vlan entered promiscuous mode [ 280.225525][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.250732][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.312267][ T5365] device veth1_vlan entered promiscuous mode [ 280.333994][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.346185][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.374635][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.394290][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.413651][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.430310][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.470771][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.503011][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.569408][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.611536][ T5365] device veth0_macvtap entered promiscuous mode [ 280.643784][ T5365] device veth1_macvtap entered promiscuous mode [ 280.750170][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.792922][ T5671] vivid-000: ================= START STATUS ================= [ 280.802150][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.824710][ T5671] vivid-000: Generate PTS: true [ 280.831538][ T5671] vivid-000: Generate SCR: true [ 280.842379][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.845076][ T5671] tpg source WxH: 640x360 (Y'CbCr) [ 280.875952][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.879268][ T5671] tpg field: 1 [ 280.904574][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.910961][ T5671] tpg crop: 640x360@0x0 [ 280.935282][ T5671] tpg compose: 640x360@0x0 [ 280.948575][ T5671] tpg colorspace: 8 [ 280.968406][ T5671] tpg transfer function: 0/0 [ 280.973123][ T5671] tpg Y'CbCr encoding: 0/0 [ 280.976925][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.984317][ T5671] tpg quantization: 0/0 [ 281.002045][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.004908][ T5671] tpg RGB range: 0/2 [ 281.038541][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.038841][ T5671] vivid-000: ================== END STATUS ================== [ 281.059520][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.072638][ T27] audit: type=1326 audit(1726577789.251:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.111603][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.131752][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.170398][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.191560][ T27] audit: type=1326 audit(1726577789.261:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.244068][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.264737][ T27] audit: type=1326 audit(1726577789.261:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.296168][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.315946][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.342443][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.365717][ T27] audit: type=1326 audit(1726577789.261:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.414136][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.425770][ T27] audit: type=1326 audit(1726577789.261:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.440437][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.455718][ T3689] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 281.477923][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.518095][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.518312][ T27] audit: type=1326 audit(1726577789.261:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.565081][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.598663][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.625478][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.642303][ T27] audit: type=1326 audit(1726577789.261:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.643495][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.693459][ T5365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.712769][ T5365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.723588][ T27] audit: type=1326 audit(1726577789.261:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.723632][ T27] audit: type=1326 audit(1726577789.261:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.849538][ T5365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.851968][ T27] audit: type=1326 audit(1726577789.261:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 281.865946][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 281.965746][ T3657] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.043135][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.065903][ T3657] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.087673][ T5365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.976764][ T3689] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 283.006439][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.014589][ T3689] usb 3-1: Product: syz [ 283.071682][ T3689] usb 3-1: Manufacturer: syz [ 283.101495][ T3689] usb 3-1: SerialNumber: syz [ 283.112669][ T5689] loop0: detected capacity change from 0 to 512 [ 283.122529][ T5689] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 283.146876][ T3689] usb 3-1: config 0 descriptor?? [ 283.182293][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.196653][ T5675] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.205177][ T5689] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.456: iget: bad i_size value: -67835469387268086 [ 283.220016][ T5689] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.456: couldn't read orphan inode 15 (err -117) [ 283.232537][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.233808][ T5689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.248749][ T5689] ext2 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 283.316629][ T3689] redrat3 3-1:0.0: Couldn't find all endpoints [ 283.839621][ T5674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.893843][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.907268][ T5674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.930825][ T4536] EXT4-fs (loop0): unmounting filesystem. [ 284.055751][ T3657] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.068731][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.127286][ T3657] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.369054][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.445425][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.928748][ T5708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.013079][ T5709] loop0: detected capacity change from 0 to 764 [ 285.090589][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.339095][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.684558][ T3649] usb 3-1: USB disconnect, device number 4 [ 287.153193][ T5735] loop1: detected capacity change from 0 to 512 [ 287.168729][ T5735] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 287.177863][ T5737] vivid-000: ================= START STATUS ================= [ 287.209913][ T5735] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.467: iget: bad i_size value: -67835469387268086 [ 287.225393][ T5735] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.467: couldn't read orphan inode 15 (err -117) [ 287.246912][ T5735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 287.255449][ T5735] ext2 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 287.267640][ T5737] vivid-000: Generate PTS: true [ 287.272574][ T5737] vivid-000: Generate SCR: true [ 287.540175][ T5737] tpg source WxH: 640x360 (Y'CbCr) [ 287.548262][ T5737] tpg field: 1 [ 287.551804][ T5737] tpg crop: 640x360@0x0 [ 287.757671][ T5737] tpg compose: 640x360@0x0 [ 287.856028][ T5737] tpg colorspace: 8 [ 287.859999][ T5737] tpg transfer function: 0/0 [ 287.926694][ T5737] tpg Y'CbCr encoding: 0/0 [ 287.945759][ T5737] tpg quantization: 0/0 [ 287.962947][ T5737] tpg RGB range: 0/2 [ 287.972293][ T5737] vivid-000: ================== END STATUS ================== [ 288.065981][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 288.884668][ T5753] loop4: detected capacity change from 0 to 764 [ 290.411927][ T5771] ======================================================= [ 290.411927][ T5771] WARNING: The mand mount option has been deprecated and [ 290.411927][ T5771] and is ignored by this kernel. Remove the mand [ 290.411927][ T5771] option from the mount to silence this warning. [ 290.411927][ T5771] ======================================================= [ 290.490422][ T5777] loop1: detected capacity change from 0 to 512 [ 290.521833][ T5777] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 290.563611][ T5774] netlink: 'syz.3.477': attribute type 3 has an invalid length. [ 290.615162][ T5777] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.480: iget: bad i_size value: -67835469387268086 [ 290.634587][ T5777] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.480: couldn't read orphan inode 15 (err -117) [ 290.651479][ T5777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 290.660721][ T5777] ext2 filesystem being mounted at /132/file0 supports timestamps until 2038 (0x7fffffff) [ 291.424195][ T5787] vivid-000: ================= START STATUS ================= [ 291.449506][ T5787] vivid-000: Generate PTS: true [ 291.466741][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 291.493084][ T5787] vivid-000: Generate SCR: true [ 291.525831][ T5787] tpg source WxH: 640x360 (Y'CbCr) [ 291.535970][ T5787] tpg field: 1 [ 291.551399][ T5787] tpg crop: 640x360@0x0 [ 291.575730][ T5787] tpg compose: 640x360@0x0 [ 291.585928][ T5787] tpg colorspace: 8 [ 291.609755][ T5787] tpg transfer function: 0/0 [ 291.620413][ T5787] tpg Y'CbCr encoding: 0/0 [ 291.645706][ T5787] tpg quantization: 0/0 [ 291.651736][ T5787] tpg RGB range: 0/2 [ 291.674242][ T5787] vivid-000: ================== END STATUS ================== [ 292.697278][ T5806] loop1: detected capacity change from 0 to 764 [ 293.148784][ T5816] Bluetooth: MGMT ver 1.22 [ 297.223318][ T5855] loop4: detected capacity change from 0 to 764 [ 300.991826][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 300.991843][ T27] audit: type=1326 audit(1726577809.171:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905e37def9 code=0x7fc00000 [ 301.203300][ T27] audit: type=1326 audit(1726577809.381:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f905e37def9 code=0x7fc00000 [ 301.298128][ T3657] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 302.691863][ T5910] loop0: detected capacity change from 0 to 764 [ 305.456598][ T5929] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 305.463761][ T5929] cramfs: wrong magic [ 305.923090][ T3657] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 305.932665][ T3657] Bluetooth: hci2: Injecting HCI hardware error event [ 305.941823][ T3652] Bluetooth: hci2: hardware error 0x00 [ 307.098774][ T5952] loop1: detected capacity change from 0 to 764 [ 308.053439][ T3652] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 308.156171][ T3652] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.978455][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 310.000025][ T27] audit: type=1326 audit(1726577818.181:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.1.546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f824817def9 code=0x0 [ 310.058141][ T5973] syz.2.544 (5973) used greatest stack depth: 19736 bytes left [ 310.600523][ T5997] loop2: detected capacity change from 0 to 764 [ 314.267317][ T6018] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 314.276718][ T6018] cramfs: wrong magic [ 314.553707][ T6019] netlink: 892 bytes leftover after parsing attributes in process `syz.4.558'. [ 315.598195][ T6035] loop4: detected capacity change from 0 to 764 [ 317.132112][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138505][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.518618][ T6080] netlink: 'syz.0.576': attribute type 3 has an invalid length. [ 320.885288][ T6084] loop0: detected capacity change from 0 to 764 [ 322.196303][ T6093] sg_write: data in/out 74397768/126 bytes for SCSI command 0x0-- guessing data in; [ 322.196303][ T6093] program syz.2.580 not setting count and/or reply_len properly [ 323.354008][ T6116] netlink: 'syz.3.588': attribute type 3 has an invalid length. [ 323.594988][ T6118] fuse: Unknown parameter 'group_i00000000000000000000' [ 324.695196][ T6129] loop1: detected capacity change from 0 to 764 [ 327.514163][ T6151] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.109529][ T27] audit: type=1326 audit(1726577836.291:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 328.264739][ T6165] netlink: 'syz.0.602': attribute type 3 has an invalid length. [ 328.405367][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.603'. [ 329.409589][ T27] audit: type=1326 audit(1726577837.591:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 329.521711][ T27] audit: type=1326 audit(1726577837.621:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 329.544275][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.639009][ T27] audit: type=1326 audit(1726577837.621:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 329.661116][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.733204][ T27] audit: type=1326 audit(1726577837.621:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 329.766069][ T6181] loop3: detected capacity change from 0 to 764 [ 329.815682][ T27] audit: type=1326 audit(1726577837.621:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 330.112080][ T3690] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 330.955928][ T3690] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 331.056457][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.089764][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.132106][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.235719][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.265032][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.314194][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.406493][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.435914][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.451210][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.555930][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.570148][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.609147][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.715963][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.738199][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.738248][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.945776][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.945813][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.945834][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.025954][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.025989][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.026011][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.115805][ T3690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.163119][ T3690] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.186168][ T3690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.385899][ T3690] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 332.415795][ T3690] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 332.424546][ T3690] usb 5-1: Product: syz [ 332.429048][ T3690] usb 5-1: Manufacturer: syz [ 332.435705][ T3690] usb 5-1: SerialNumber: syz [ 332.458979][ T3690] usb 5-1: config 0 descriptor?? [ 332.599632][ T6211] capability: warning: `syz.0.615' uses deprecated v2 capabilities in a way that may be insecure [ 332.610594][ T3690] usb 5-1: can't set config #0, error -71 [ 332.628221][ T3690] usb 5-1: USB disconnect, device number 4 [ 333.903853][ T6221] netlink: 'syz.4.618': attribute type 3 has an invalid length. [ 334.140417][ T27] audit: type=1326 audit(1726577842.321:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 334.162529][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.329432][ T6225] loop4: detected capacity change from 0 to 764 [ 334.692390][ T27] audit: type=1326 audit(1726577842.851:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 335.665685][ T27] audit: type=1326 audit(1726577843.051:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 335.754854][ T27] audit: type=1326 audit(1726577843.051:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 335.777382][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.840195][ T27] audit: type=1326 audit(1726577843.051:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 335.862303][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.926767][ T27] audit: type=1326 audit(1726577843.051:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 336.001365][ T27] audit: type=1326 audit(1726577843.051:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 336.062318][ T27] audit: type=1326 audit(1726577843.051:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 336.183644][ T27] audit: type=1326 audit(1726577843.051:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 336.264991][ T27] audit: type=1326 audit(1726577843.051:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 336.528501][ T6257] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 338.034905][ T6268] loop2: detected capacity change from 0 to 764 [ 339.596231][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'. [ 339.820626][ T6284] 9pnet_fd: Insufficient options for proto=fd [ 340.003988][ T6295] netlink: 'syz.4.640': attribute type 3 has an invalid length. [ 340.161443][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 340.161460][ T27] audit: type=1326 audit(1726577848.341:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 341.788699][ T6317] loop2: detected capacity change from 0 to 764 [ 345.462952][ T27] audit: type=1326 audit(1726577853.641:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824817def9 code=0x7fc00000 [ 346.317232][ T945] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 346.560380][ T6364] loop3: detected capacity change from 0 to 764 [ 346.825835][ T945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.955708][ T945] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 346.964661][ T945] usb 3-1: can't read configurations, error -71 [ 347.715817][ T3685] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 350.161534][ T6386] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 350.263521][ T6386] cramfs: wrong magic [ 351.315765][ T3685] usb 2-1: device descriptor read/all, error -61 [ 351.679667][ T3685] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.418665][ T27] audit: type=1326 audit(1726577861.601:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.703456][ T27] audit: type=1326 audit(1726577861.601:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.739332][ T27] audit: type=1326 audit(1726577861.601:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.844111][ T27] audit: type=1326 audit(1726577861.601:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.870665][ T27] audit: type=1326 audit(1726577861.601:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.931276][ T27] audit: type=1326 audit(1726577861.641:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.954993][ T27] audit: type=1326 audit(1726577861.641:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 353.981441][ T27] audit: type=1326 audit(1726577861.641:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7ffc0000 [ 354.004660][ T27] audit: type=1326 audit(1726577861.651:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30b57def9 code=0x7fc00000 [ 354.012188][ T6419] loop3: detected capacity change from 0 to 764 [ 354.035072][ T27] audit: type=1326 audit(1726577862.111:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f905e37def9 code=0x0 [ 356.372278][ T6431] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 356.505611][ T6431] cramfs: wrong magic [ 358.721660][ T6439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.746137][ T6439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 358.796934][ T6439] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 358.805903][ T27] audit: type=1326 audit(1726577866.981:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 358.906364][ T27] audit: type=1326 audit(1726577867.091:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 359.042461][ T27] audit: type=1326 audit(1726577867.091:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 359.806074][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.709025][ T27] audit: type=1326 audit(1726577869.891:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 361.855290][ T27] audit: type=1326 audit(1726577870.031:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 361.888337][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.989557][ T27] audit: type=1326 audit(1726577870.031:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 362.107255][ T27] audit: type=1326 audit(1726577870.031:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 362.201217][ T27] audit: type=1326 audit(1726577870.031:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 362.308323][ T6500] device syzkaller0 entered promiscuous mode [ 362.356255][ T27] audit: type=1326 audit(1726577870.031:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 362.445801][ T27] audit: type=1326 audit(1726577870.031:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ad37def9 code=0x7fc00000 [ 362.657364][ T3654] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 362.965746][ T6509] netlink: 'syz.2.698': attribute type 4 has an invalid length. [ 364.095731][ T3721] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 370.285658][ T3652] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.449377][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.455785][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.888806][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.895225][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.285528][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 469.292550][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6516/1:b..l [ 469.301035][ C1] (detected by 1, t=10502 jiffies, g=30097, q=197 ncpus=2) [ 469.308359][ C1] task:syz.4.700 state:R running task stack:24792 pid:6516 ppid:5365 flags:0x00004000 [ 469.320470][ C1] Call Trace: [ 469.323782][ C1] [ 469.326742][ C1] __schedule+0x143f/0x4570 [ 469.331390][ C1] ? reacquire_held_locks+0x660/0x660 [ 469.336812][ C1] ? release_firmware_map_entry+0x186/0x186 [ 469.342745][ C1] ? print_irqtrace_events+0x210/0x210 [ 469.348256][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 469.353564][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 469.358705][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 469.364484][ C1] ? rcu_is_watching+0x11/0xb0 [ 469.369287][ C1] irqentry_exit+0x53/0x80 [ 469.373732][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 469.379757][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 469.386294][ C1] Code: 48 8b 3d a8 37 0f 0d 48 89 de 5b e9 07 ab 56 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0d f4 bf 77 7e 65 8b 15 f5 bf 77 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 469.406124][ C1] RSP: 0018:ffffc9000a027718 EFLAGS: 00000246 [ 469.412225][ C1] RAX: ffffffff81b8c9ce RBX: 00000000000004ef RCX: ffff88807d210000 [ 469.420226][ C1] RDX: 0000000080000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 469.428222][ C1] RBP: ffffc9000a0278b0 R08: ffffffff8aa37aa7 R09: ffffffff8aa376dc [ 469.436220][ C1] R10: 0000000000000002 R11: ffff88807d210000 R12: 1ffff1100ea2ccd1 [ 469.444215][ C1] R13: ffffffff81b8c7e7 R14: ffff88807516668c R15: ffffc9000a027800 [ 469.452218][ C1] ? filemap_map_pages+0x277/0x12c0 [ 469.457552][ C1] ? xas_find+0xfc/0xaa0 [ 469.461826][ C1] ? xas_find+0x4c7/0xaa0 [ 469.466186][ C1] ? filemap_map_pages+0x45e/0x12c0 [ 469.471740][ C1] filemap_map_pages+0x45e/0x12c0 [ 469.476809][ C1] ? count_memcg_event_mm+0x90/0x410 [ 469.482132][ C1] ? filemap_read_folio+0x780/0x780 [ 469.487360][ C1] ? count_memcg_event_mm+0x90/0x410 [ 469.492699][ C1] handle_mm_fault+0x33e0/0x5340 [ 469.497676][ C1] ? follow_page_pte+0x39c/0x1880 [ 469.502755][ C1] ? numa_migrate_prep+0x250/0x250 [ 469.507910][ C1] ? follow_page_mask+0xb8a/0x1420 [ 469.513076][ C1] ? __sanitizer_cov_trace_switch+0xb/0xe0 [ 469.518922][ C1] __get_user_pages+0x4f3/0x1190 [ 469.523908][ C1] ? populate_vma_page_range+0x2b0/0x2b0 [ 469.529620][ C1] populate_vma_page_range+0x217/0x2b0 [ 469.535123][ C1] __mm_populate+0x275/0x440 [ 469.539748][ C1] ? check_vma_flags+0x4d0/0x4d0 [ 469.544725][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 469.549366][ C1] ? account_locked_vm+0xe0/0xe0 [ 469.554339][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 469.560437][ C1] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 469.565449][ C1] do_syscall_64+0x3b/0xb0 [ 469.569904][ C1] ? clear_bhb_loop+0x45/0xa0 [ 469.574617][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.580553][ C1] RIP: 0033:0x7fe04cb7def9 [ 469.585052][ C1] RSP: 002b:00007fe04da0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 469.593587][ C1] RAX: ffffffffffffffda RBX: 00007fe04cd36058 RCX: 00007fe04cb7def9 [ 469.601585][ C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 469.609583][ C1] RBP: 00007fe04cbf0b76 R08: ffffffffffffffff R09: 0000000000000000 [ 469.617582][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 469.625579][ C1] R13: 0000000000000001 R14: 00007fe04cd36058 R15: 00007ffc33f28b18 [ 469.633596][ C1] [ 469.636644][ C1] rcu: rcu_preempt kthread starved for 9542 jiffies! g30097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 469.647948][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 469.657947][ C1] rcu: RCU grace-period kthread stack dump: [ 469.663849][ C1] task:rcu_preempt state:R running task stack:27288 pid:16 ppid:2 flags:0x00004000 [ 469.674667][ C1] Call Trace: [ 469.677969][ C1] [ 469.680929][ C1] __schedule+0x143f/0x4570 [ 469.685506][ C1] ? _raw_spin_unlock+0x40/0x40 [ 469.690413][ C1] ? release_firmware_map_entry+0x186/0x186 [ 469.696347][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 469.701759][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 469.707775][ C1] ? _raw_spin_unlock+0x40/0x40 [ 469.712669][ C1] schedule+0xbf/0x180 [ 469.716865][ C1] schedule_timeout+0x1b9/0x300 [ 469.721747][ C1] ? console_conditional_schedule+0x40/0x40 [ 469.727672][ C1] ? update_process_times+0x1b0/0x1b0 [ 469.733165][ C1] ? prepare_to_swait_event+0x329/0x350 [ 469.738844][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 469.743733][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 469.749919][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 469.755164][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 469.759971][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 469.765932][ C1] ? finish_swait+0xcf/0x1e0 [ 469.770572][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 469.775205][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 469.780435][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 469.786369][ C1] ? __kthread_parkme+0x168/0x1c0 [ 469.791452][ C1] kthread+0x28d/0x320 [ 469.795547][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 469.800685][ C1] ? kthread_blkcg+0xd0/0xd0 [ 469.805305][ C1] ret_from_fork+0x1f/0x30 [ 469.809786][ C1] [ 469.812851][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 469.819217][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.110-syzkaller #0 [ 469.827319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 469.837412][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 469.843261][ C1] Code: 7c d9 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 a4 3b e0 f6 0f 1f 44 00 00 e8 ba 78 d9 f6 0f 00 2d 93 5c b6 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 fb fa 30 f7 [ 469.862897][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 469.869082][ C1] RAX: ffffffff8ab13686 RBX: 0000000000000000 RCX: ffff888017ff1dc0 [ 469.877078][ C1] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5d6dc0 [ 469.885074][ C1] RBP: ffffc90000177c10 R08: ffffffff8ab13668 R09: ffffed1002ffe3b9 [ 469.893096][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 469.901094][ C1] R13: ffff88801d3c2004 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 469.909180][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 469.918143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.924777][ C1] CR2: 000055a54cf0d998 CR3: 000000006670b000 CR4: 00000000003506e0 [ 469.932778][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.940773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.948765][ C1] Call Trace: [ 469.952088][ C1] [ 469.954970][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 469.961354][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 469.967040][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 469.972019][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 469.977137][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 469.982386][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 469.987808][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 469.992774][ C1] ? hrtimer_run_queues+0x163/0x450 [ 469.998099][ C1] ? update_process_times+0x147/0x1b0 [ 470.003503][ C1] ? tick_sched_timer+0x386/0x550 [ 470.008592][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 470.014167][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 470.019872][ C1] ? hrtimer_interrupt+0x980/0x980 [ 470.025021][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 470.031136][ C1] ? hrtimer_interrupt+0x392/0x980 [ 470.036304][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 470.042497][ C1] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 470.048351][ C1] [ 470.051309][ C1] [ 470.054261][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 470.060463][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 470.065607][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 470.070837][ C1] ? acpi_idle_do_entry+0x10f/0x340 [ 470.076074][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 470.081407][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 470.087445][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 470.093127][ C1] acpi_idle_enter+0x352/0x4f0 [ 470.097946][ C1] cpuidle_enter_state+0x516/0xf80 [ 470.103104][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 470.108516][ C1] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 470.114283][ C1] cpuidle_enter+0x59/0x90 [ 470.118733][ C1] do_idle+0x3ce/0x680 [ 470.122851][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 470.128125][ C1] ? schedule_idle+0x57/0x90 [ 470.132754][ C1] ? do_idle+0x663/0x680 [ 470.137047][ C1] cpu_startup_entry+0x3d/0x60 [ 470.141846][ C1] start_secondary+0xe4/0xf0 [ 470.146469][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 470.152413][ C1]