last executing test programs: 6m52.757902303s ago: executing program 4 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x180000504) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 6m49.638225636s ago: executing program 4 (id=31): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d4e6de642760f09b8204716fd7b48173b06dea78a7df4aa4d55372759cbb7275d3fc0f6feb2142993dea7bc9be16f983af4cfeb9a377d5350a0f055be80619d6a", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000003080)='1\x00', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353cc"], 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 6m47.914101456s ago: executing program 4 (id=41): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) 6m46.794570362s ago: executing program 4 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, 0x0, 0x0) 6m46.487253126s ago: executing program 4 (id=48): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m45.922830134s ago: executing program 4 (id=50): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) r4 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) 6m44.933647403s ago: executing program 32 (id=50): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) r4 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) 6m18.55014826s ago: executing program 3 (id=137): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6m17.677780175s ago: executing program 3 (id=140): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c85, 0x23, @random, @val={0x1, 0x1, [{0x16, 0x1}]}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m17.168870921s ago: executing program 3 (id=141): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) readv(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 6m16.211655389s ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) 6m15.800296007s ago: executing program 3 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200)=0x3, 0x4) listen(r1, 0x0) 6m13.694823653s ago: executing program 3 (id=153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mknod(&(0x7f0000002080)='./file0\x00', 0x4, 0x101) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 6m13.368231625s ago: executing program 33 (id=153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mknod(&(0x7f0000002080)='./file0\x00', 0x4, 0x101) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 6m10.844244372s ago: executing program 2 (id=167): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x0, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x3, 0x200, 0x2, 0x42, 0x8000, 0x0, r2, r3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6m10.528851127s ago: executing program 2 (id=169): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m10.140011414s ago: executing program 2 (id=170): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 6m9.870845078s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 6m9.677436548s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m9.530725119s ago: executing program 2 (id=174): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8", 0x2b) write$qrtrtun(r0, &(0x7f00000009c0)="25375468d806f651fd4481058460159cd8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c9bb440e69e82bb46cd07f6eee8286930573bbfa022955a1744b947e767704184270cf3dbc17d9913088b56292b25558fe91a2e21b2800d9df4092b45890ea3b905daecb08061e0ad4b472504bf1a9013ab24d5434e7a5b02aef143998ebd6a9b286ea0a89c306bf504f078e2d6f6f8a34435f1ae8083fb593c1a72308c97fb", 0xb4) write$qrtrtun(r0, &(0x7f00000005c0)="418ed3d937933303e64e5112018529758e8fa16105aa17494715055305545739b03d026bc09677c79711fc7cf817848a090089dd82b94cc05e3289b965ce56282ad7440c3e08fa7a1a3684a39c45a038e398fad722b0221f4d46b1dad19d2b871a510e54580593fe577e9a377d256a9d0fe8761d733602a29017da3f0ae9d668003ca005609559c0ed6f3917604a2bfdb22a3607fae4bac92f92cf9c28c80b76e18f3e28874e3828dcd857f08ec90e5dd10e36c48e2d4abf0ca76c42d38278ebe62ce40d51b367279eebb1b73aa428aeb6e40614b6f226921193d9763a70160c49b42b2a993c5e2c03c1face2c0c55f240c184ddb1852bb70a", 0xf9) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x282) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5m58.147365848s ago: executing program 0 (id=212): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x60, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m54.5957641s ago: executing program 0 (id=219): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4e55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 5m54.229568199s ago: executing program 34 (id=174): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8", 0x2b) write$qrtrtun(r0, &(0x7f00000009c0)="25375468d806f651fd4481058460159cd8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c9bb440e69e82bb46cd07f6eee8286930573bbfa022955a1744b947e767704184270cf3dbc17d9913088b56292b25558fe91a2e21b2800d9df4092b45890ea3b905daecb08061e0ad4b472504bf1a9013ab24d5434e7a5b02aef143998ebd6a9b286ea0a89c306bf504f078e2d6f6f8a34435f1ae8083fb593c1a72308c97fb", 0xb4) write$qrtrtun(r0, &(0x7f00000005c0)="418ed3d937933303e64e5112018529758e8fa16105aa17494715055305545739b03d026bc09677c79711fc7cf817848a090089dd82b94cc05e3289b965ce56282ad7440c3e08fa7a1a3684a39c45a038e398fad722b0221f4d46b1dad19d2b871a510e54580593fe577e9a377d256a9d0fe8761d733602a29017da3f0ae9d668003ca005609559c0ed6f3917604a2bfdb22a3607fae4bac92f92cf9c28c80b76e18f3e28874e3828dcd857f08ec90e5dd10e36c48e2d4abf0ca76c42d38278ebe62ce40d51b367279eebb1b73aa428aeb6e40614b6f226921193d9763a70160c49b42b2a993c5e2c03c1face2c0c55f240c184ddb1852bb70a", 0xf9) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x282) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5m54.122123111s ago: executing program 0 (id=221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m51.202947074s ago: executing program 0 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40100) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) 5m50.261539712s ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m49.238461362s ago: executing program 0 (id=236): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000280)=0x210003) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084149, &(0x7f0000000180)=0x4) 5m34.169960611s ago: executing program 35 (id=236): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000280)=0x210003) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084149, &(0x7f0000000180)=0x4) 3m51.839384344s ago: executing program 6 (id=669): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xb, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000280)="36d0e866b80a0000000f23c82ed0ad005066350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753bfbacef0f82c88f0f82c88f78e66efbafc0c66b83ac8000066efda6509", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m50.550653588s ago: executing program 6 (id=672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r3, r5, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000040)=' \t', 0x0}, 0x20) 3m50.295235493s ago: executing program 6 (id=675): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x13, 0x0, [@remote, @empty, @multicast1, @rand_addr]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m49.49191019s ago: executing program 6 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 3m49.124591727s ago: executing program 6 (id=677): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 3m46.706244274s ago: executing program 6 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 3m46.158625029s ago: executing program 36 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 2m57.011277068s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2m27.650456057s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2m6.069362848s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1m25.563945383s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 35.337551531s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 22.569001815s ago: executing program 5 (id=1181): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r1 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x242, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) 20.263079127s ago: executing program 5 (id=1188): syz_io_uring_setup(0x3d07, &(0x7f0000000880)={0x0, 0x7a6c, 0x2, 0x1, 0x1a8}, &(0x7f00000003c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x5, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e25"}]}}}}}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000300)=0xdddd1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.481010442s ago: executing program 5 (id=1194): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 16.770459188s ago: executing program 5 (id=1197): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r3, 0x0, r4, 0x0, 0xffffffe1, 0x0) 15.232085833s ago: executing program 5 (id=1200): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 14.028820141s ago: executing program 5 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001b00)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0500000000000000", @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) close(0x4) 13.745954209s ago: executing program 1 (id=68): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 6.04880125s ago: executing program 9 (id=1221): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 5.646794688s ago: executing program 8 (id=1224): openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000c"], 0x76}}, 0xc000) 4.477287671s ago: executing program 9 (id=1225): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) prctl$PR_GET_TSC(0x43, 0x0) memfd_secret(0x0) 3.77480157s ago: executing program 8 (id=1227): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.102412799s ago: executing program 8 (id=1229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r2) write$char_usb(r4, &(0x7f0000000240)="a7145f8d6e4105b593765b96a5e8567d91a18cfc27646410e4fbcb273c2d93d8b89fa9780590c6d494d66f4843aef30d6877", 0x32) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0xfc, 0x0, 0x7e, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff, 0x5, 0x0, 0x8, 0xfff}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.04971631s ago: executing program 9 (id=1231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x11, 0x40000023, r1, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @random="156307be2ebb", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @ipv4}}}}}}, 0x0) 1.828548142s ago: executing program 8 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) 1.815915962s ago: executing program 9 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffffffe) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.642896792s ago: executing program 7 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0xfff, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 854.110914ms ago: executing program 7 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 742.348507ms ago: executing program 8 (id=1237): io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0xa5ef, 0x0, 0xfffffffc}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 669.801141ms ago: executing program 7 (id=1238): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 553.128477ms ago: executing program 9 (id=1239): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/182, &(0x7f0000000040)=0xb6) 503.323701ms ago: executing program 7 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) socket$nl_rdma(0x10, 0x3, 0x14) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x1) add_key$user(0x0, 0x0, &(0x7f0000000100)="705b718b88163f7441e824b4047c78f0ffc0a108ed", 0x15, r2) 314.770678ms ago: executing program 7 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x2, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) 295.23604ms ago: executing program 9 (id=1242): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 228.255821ms ago: executing program 8 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 0s ago: executing program 7 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) kernel console output (not intermixed with test programs): blems! [ 262.988391][ T8763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.988408][ T8763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.989405][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.009489][ T8763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.009533][ T8763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.009565][ T8763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.009597][ T8763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.532075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b3a800: rx timeout, send abort [ 263.543718][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b3b000: rx timeout, send abort [ 264.042180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b3a800: abort rx timeout. Force session deactivation [ 264.054562][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b3b000: abort rx timeout. Force session deactivation [ 264.097431][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.130200][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.191726][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 264.191745][ T29] audit: type=1800 audit(1740355268.854:50): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.648" name="file1" dev="overlay" ino=956 res=0 errno=0 [ 264.308106][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.320877][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.752501][ T8997] bridge_slave_0: left allmulticast mode [ 264.829659][ T8997] bridge_slave_0: left promiscuous mode [ 264.855113][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.819773][ T8997] bridge_slave_1: left allmulticast mode [ 265.855785][ T8997] bridge_slave_1: left promiscuous mode [ 265.861634][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.893983][ T8997] bond0: (slave bond_slave_0): Releasing backup interface [ 265.937029][ T8997] bond0: (slave bond_slave_1): Releasing backup interface [ 266.044492][ T8997] team0: Port device team_slave_0 removed [ 266.218297][ T8997] team0: Port device team_slave_1 removed [ 266.256306][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.302088][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.329427][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.357722][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.476150][ T9003] team0: Mode changed to "loadbalance" [ 266.553639][ T9007] netlink: 'syz.5.658': attribute type 1 has an invalid length. [ 266.586445][ T9007] netlink: 'syz.5.658': attribute type 2 has an invalid length. [ 266.930001][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.660'. [ 266.935604][ T6786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.104709][ T6786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.410807][ T6786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.532222][ T6786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.784311][ T6786] bridge_slave_1: left allmulticast mode [ 267.793589][ T6786] bridge_slave_1: left promiscuous mode [ 267.808381][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.822543][ T6786] bridge_slave_0: left allmulticast mode [ 267.832983][ T6786] bridge_slave_0: left promiscuous mode [ 267.842818][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.043277][ T5138] Bluetooth: hci0: command 0x1407 tx timeout [ 268.050489][ T9013] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 268.846011][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.858024][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.873675][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.885396][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.900520][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.909472][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.913573][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.981027][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.005940][ T6786] bond0 (unregistering): Released all slaves [ 269.850946][ T6786] hsr_slave_0: left promiscuous mode [ 269.864937][ T6786] hsr_slave_1: left promiscuous mode [ 269.887948][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.928445][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.026128][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.067916][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.154321][ T6786] veth1_macvtap: left promiscuous mode [ 270.159931][ T6786] veth0_macvtap: left promiscuous mode [ 270.215960][ T6786] veth1_vlan: left promiscuous mode [ 270.221383][ T6786] veth0_vlan: left promiscuous mode [ 270.996609][ T5138] Bluetooth: hci3: command tx timeout [ 272.642763][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 272.663841][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:7 Not tainted 6.14.0-rc4-syzkaller #0 [ 272.663871][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.663886][ T5839] Workqueue: hci4 hci_rx_work [ 272.663915][ T5839] Call Trace: [ 272.663924][ T5839] [ 272.663934][ T5839] dump_stack_lvl+0x241/0x360 [ 272.663963][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.663985][ T5839] ? __pfx__printk+0x10/0x10 [ 272.664023][ T5839] ? __kmalloc_cache_noprof+0x243/0x390 [ 272.664045][ T5839] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 272.664088][ T5839] sysfs_create_dir_ns+0x2ce/0x3a0 [ 272.664123][ T5839] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 272.664167][ T5839] kobject_add_internal+0x435/0x8d0 [ 272.664209][ T5839] kobject_add+0x152/0x220 [ 272.664239][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 272.664265][ T5839] ? device_add+0x3e7/0xbf0 [ 272.664297][ T5839] ? __pfx_kobject_add+0x10/0x10 [ 272.664337][ T5839] ? _raw_spin_unlock+0x28/0x50 [ 272.664365][ T5839] ? get_device_parent+0x165/0x410 [ 272.664400][ T5839] device_add+0x4e5/0xbf0 [ 272.664439][ T5839] hci_conn_add_sysfs+0xe8/0x200 [ 272.664475][ T5839] le_conn_complete_evt+0xd1a/0x1360 [ 272.664517][ T5839] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 272.664542][ T5839] ? __mutex_unlock_slowpath+0x227/0x800 [ 272.664576][ T5839] ? __skb_clone+0x5c/0x6c0 [ 272.664613][ T5839] ? skb_pull_data+0x112/0x230 [ 272.664643][ T5839] hci_le_conn_complete_evt+0x18c/0x420 [ 272.664678][ T5839] hci_event_packet+0xa54/0x1540 [ 272.664717][ T5839] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 272.664749][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 272.664783][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 272.664813][ T5839] ? kcov_remote_start+0x450/0x7d0 [ 272.664841][ T5839] ? __get_immv32+0x50/0x350 [ 272.664872][ T5839] ? hci_send_to_monitor+0xdc/0x530 [ 272.664903][ T5839] hci_rx_work+0x3f3/0xdb0 [ 272.664935][ T5839] ? process_scheduled_works+0x9c6/0x18e0 [ 272.664961][ T5839] process_scheduled_works+0xabe/0x18e0 [ 272.665021][ T5839] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.665059][ T5839] ? assign_work+0x364/0x3d0 [ 272.665091][ T5839] worker_thread+0x870/0xd30 [ 272.665135][ T5839] ? __kthread_parkme+0x169/0x1d0 [ 272.665168][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 272.665196][ T5839] kthread+0x7a9/0x920 [ 272.665225][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665258][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 272.665285][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665320][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665355][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665384][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.665407][ T5839] ? lockdep_hardirqs_on+0x99/0x150 [ 272.665432][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665464][ T5839] ret_from_fork+0x4b/0x80 [ 272.665491][ T5839] ? __pfx_kthread+0x10/0x10 [ 272.665523][ T5839] ret_from_fork_asm+0x1a/0x30 [ 272.665566][ T5839] [ 272.665680][ T5839] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 272.961703][ T5839] Bluetooth: hci4: failed to register connection device [ 273.074087][ T5839] Bluetooth: hci3: command tx timeout [ 273.120656][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 273.176828][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 273.404248][ T5839] Bluetooth: hci0: command 0x1407 tx timeout [ 273.789057][ T6597] syz_tun: left promiscuous mode [ 273.823945][ T6597] batman_adv: batadv0: Removing interface: macvlan2 [ 273.921849][ T9037] chnl_net:caif_netlink_parms(): no params data found [ 273.940600][ T9094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.272692][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.292743][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.303226][ T9037] bridge_slave_0: entered allmulticast mode [ 274.310695][ T9037] bridge_slave_0: entered promiscuous mode [ 274.338324][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.373476][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.401313][ T9037] bridge_slave_1: entered allmulticast mode [ 274.409477][ T9037] bridge_slave_1: entered promiscuous mode [ 274.510256][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.546848][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.777168][ T6786] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.867731][ T9037] team0: Port device team_slave_0 added [ 274.952468][ T6786] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.154572][ T5138] Bluetooth: hci3: command tx timeout [ 275.186328][ T9037] team0: Port device team_slave_1 added [ 275.241665][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.256343][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.269335][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.281376][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.310042][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.398242][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.413050][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.424309][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.433006][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.198285][ T6786] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.519142][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.783930][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.245260][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.259371][ T5839] Bluetooth: hci3: command tx timeout [ 277.566941][ T6786] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.634108][ T5138] Bluetooth: hci1: command tx timeout [ 277.699547][ T9162] fuse: Bad value for 'rootmode' [ 277.762787][ T9037] hsr_slave_0: entered promiscuous mode [ 277.770436][ T9037] hsr_slave_1: entered promiscuous mode [ 277.776896][ T9037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.786237][ T5875] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 277.794735][ T9037] Cannot create hsr debugfs directory [ 277.974061][ T5875] usb 8-1: Using ep0 maxpacket: 8 [ 277.990028][ T5875] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.036194][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.078447][ T5875] usb 8-1: Product: syz [ 278.108528][ T5875] usb 8-1: Manufacturer: syz [ 278.141699][ T5875] usb 8-1: SerialNumber: syz [ 278.183734][ T6786] bridge_slave_1: left allmulticast mode [ 278.200948][ T5875] usb 8-1: config 0 descriptor?? [ 278.206350][ T6786] bridge_slave_1: left promiscuous mode [ 278.232935][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.288093][ T6786] bridge_slave_0: left allmulticast mode [ 278.309709][ T6786] bridge_slave_0: left promiscuous mode [ 278.968471][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.170291][ T5875] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.644256][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 279.714030][ T5138] Bluetooth: hci1: command tx timeout [ 279.831726][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.843692][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.855261][ T6786] bond0 (unregistering): (slave team0): Releasing backup interface [ 279.867743][ T6786] bond0 (unregistering): Released all slaves [ 279.887349][ T29] audit: type=1800 audit(1740355284.544:51): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.700" name="/" dev="fuse" ino=0 res=0 errno=0 [ 280.165854][ T6786] tipc: Left network mode [ 280.398780][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 280.410055][ T5875] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 280.434145][ T5875] usb 8-1: USB disconnect, device number 8 [ 281.793949][ T5138] Bluetooth: hci1: command tx timeout [ 283.875865][ T5138] Bluetooth: hci1: command tx timeout [ 283.888717][ T6248] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 284.074315][ T6248] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 284.082687][ T6248] usb 9-1: config 0 has no interface number 0 [ 284.107716][ T6248] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 284.129166][ T6248] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.137845][ T6248] usb 9-1: Product: syz [ 284.142427][ T6248] usb 9-1: Manufacturer: syz [ 284.147221][ T6248] usb 9-1: SerialNumber: syz [ 284.155682][ T6248] usb 9-1: config 0 descriptor?? [ 284.436006][ T6248] usb 9-1: Found UVC 0.08 device syz (046d:0823) [ 284.442561][ T6248] usb 9-1: No valid video chain found. [ 284.459351][ T6248] usb 9-1: USB disconnect, device number 7 [ 285.499419][ T6786] hsr_slave_0: left promiscuous mode [ 285.512799][ T6786] hsr_slave_1: left promiscuous mode [ 285.533668][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.544131][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.551828][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.597582][ T6786] veth1_macvtap: left promiscuous mode [ 285.603305][ T6786] veth0_macvtap: left promiscuous mode [ 285.609380][ T6786] veth1_vlan: left promiscuous mode [ 285.615356][ T6786] veth0_vlan: left promiscuous mode [ 285.722407][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.720'. [ 286.593095][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 286.725885][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 289.038130][ T9264] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.055802][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.056946][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.081900][ T9133] bridge_slave_0: entered allmulticast mode [ 289.083200][ T9133] bridge_slave_0: entered promiscuous mode [ 289.101552][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.101626][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.101776][ T9133] bridge_slave_1: entered allmulticast mode [ 289.102872][ T9133] bridge_slave_1: entered promiscuous mode [ 289.298277][ T9264] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.367690][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.374421][ T9133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.459245][ T9264] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.590396][ T9264] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.652427][ T9133] team0: Port device team_slave_0 added [ 289.692983][ T9133] team0: Port device team_slave_1 added [ 289.768936][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.784331][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.830375][ T9133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.862636][ T9037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.887089][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.918874][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.947799][ T9133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.972180][ T9037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.036773][ T9264] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.046852][ T9037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.095056][ T9264] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.108443][ T9037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.130460][ T9133] hsr_slave_0: entered promiscuous mode [ 290.137333][ T9133] hsr_slave_1: entered promiscuous mode [ 290.143503][ T9133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.152124][ T9133] Cannot create hsr debugfs directory [ 290.164950][ T9264] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.223472][ T9264] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.619894][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.651114][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.782597][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.789816][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.825570][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.832827][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.906544][ T9133] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 290.936482][ T9133] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 290.958223][ T9133] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 290.973368][ T9133] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 291.121713][ T9332] kvm: pic: non byte read [ 291.135037][ T9332] kvm: pic: level sensitive irq not supported [ 291.135175][ T9332] kvm: pic: non byte read [ 291.191616][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.267813][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.340742][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.347943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.430387][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.437591][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.736591][ T9037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.809297][ T9037] veth0_vlan: entered promiscuous mode [ 292.840844][ T9037] veth1_vlan: entered promiscuous mode [ 293.033431][ T9037] veth0_macvtap: entered promiscuous mode [ 293.108747][ T9037] veth1_macvtap: entered promiscuous mode [ 293.148688][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.181141][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.201089][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.217911][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.232418][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.290096][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.293950][ T6242] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 293.388923][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.444615][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.476011][ T6242] usb 8-1: Using ep0 maxpacket: 16 [ 293.499801][ T6242] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 293.504259][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.521645][ T6242] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.557695][ T6242] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.567126][ T6242] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.569502][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.594250][ T6242] usb 8-1: Product: syz [ 293.598553][ T6242] usb 8-1: Manufacturer: syz [ 293.603217][ T6242] usb 8-1: SerialNumber: syz [ 293.715814][ T6242] usb 8-1: config 0 descriptor?? [ 293.779998][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.067012][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 294.207029][ T9037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.211564][ T6242] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.278684][ T6242] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 294.373998][ T9037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.382772][ T9037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.392113][ T9037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.719451][ T6242] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 294.726731][ T6242] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 294.748494][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.778557][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.831087][ T6794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.851683][ T6794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.299668][ T9133] veth0_vlan: entered promiscuous mode [ 295.454025][ T6248] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 295.469354][ T6794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.559921][ T9133] veth1_vlan: entered promiscuous mode [ 295.681388][ T6248] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 295.723840][ T6248] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.732891][ T6248] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 295.754023][ T6242] em28xx 8-1:0.0: AC97 vendor ID = 0x00fc00fe [ 295.761869][ T6794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.766827][ T6248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.846278][ T6248] usb 6-1: config 0 descriptor?? [ 295.901689][ T9133] veth0_macvtap: entered promiscuous mode [ 295.957012][ T9133] veth1_macvtap: entered promiscuous mode [ 295.968956][ T6242] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 296.001856][ T6242] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 296.019295][ T6242] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 296.047622][ T6242] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 296.059562][ T6794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.075261][ T6242] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 296.104202][ T6242] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 296.117586][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.150884][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.157801][ T6242] usb 8-1: USB disconnect, device number 9 [ 296.171177][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.243900][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.262649][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.295948][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.316951][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.495557][ T6794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.595257][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.623958][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.640688][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.671123][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.683888][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.694542][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.707134][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.741807][ T9133] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.761381][ T9133] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.773102][ T9133] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.792272][ T9133] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.922805][ T6794] bridge_slave_1: left allmulticast mode [ 296.954128][ T6794] bridge_slave_1: left promiscuous mode [ 296.959934][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.993365][ T6794] bridge_slave_0: left allmulticast mode [ 297.008005][ T6794] bridge_slave_0: left promiscuous mode [ 297.019532][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.148650][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 298.155469][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 298.253598][ T6242] usb 6-1: USB disconnect, device number 8 [ 298.281413][ T9436] ceph: No mds server is up or the cluster is laggy [ 298.830135][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.840301][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.849391][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.858074][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.866306][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.041928][ T9445] Falling back ldisc for ptm0. [ 299.685357][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.737216][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 299.746925][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 300.116911][ T9463] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 300.696295][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.722876][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.747981][ T6794] bond0 (unregistering): Released all slaves [ 300.974097][ T6772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.981997][ T6772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.720832][ T5839] Bluetooth: hci3: command tx timeout [ 302.201284][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.224083][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.359211][ T6794] hsr_slave_0: left promiscuous mode [ 302.380118][ T6794] hsr_slave_1: left promiscuous mode [ 302.387385][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.399229][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.418879][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.467769][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.557827][ T6794] veth1_macvtap: left promiscuous mode [ 302.569191][ T6794] veth0_macvtap: left promiscuous mode [ 302.577857][ T6794] veth1_vlan: left promiscuous mode [ 302.583412][ T6794] veth0_vlan: left promiscuous mode [ 303.719434][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 303.761085][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 303.794219][ T5839] Bluetooth: hci3: command tx timeout [ 304.672351][ T9510] netlink: 'syz.9.686': attribute type 3 has an invalid length. [ 304.680348][ T9510] netlink: 'syz.9.686': attribute type 3 has an invalid length. [ 304.693196][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.9.686'. [ 305.568530][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 305.579713][ T9518] loop6: detected capacity change from 0 to 64 [ 305.665629][ T9524] Cannot find add_set index 0 as target [ 305.926220][ T5839] Bluetooth: hci3: command tx timeout [ 306.428549][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 306.440124][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.449629][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 306.465709][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.474956][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 307.010663][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.041398][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.059708][ T9451] bridge_slave_0: entered allmulticast mode [ 307.234637][ T9451] bridge_slave_0: entered promiscuous mode [ 307.246223][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.254290][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.261564][ T9451] bridge_slave_1: entered allmulticast mode [ 308.271435][ T5839] Bluetooth: hci3: command tx timeout [ 308.314433][ T9451] bridge_slave_1: entered promiscuous mode [ 309.338670][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.224013][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.530989][ T9451] team0: Port device team_slave_0 added [ 310.540473][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.7.764'. [ 310.589581][ T9451] team0: Port device team_slave_1 added [ 310.794094][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.819769][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.914465][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.978056][ T29] audit: type=1326 audit(1740355315.644:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 310.998169][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.054682][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.113939][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.184173][ T29] audit: type=1326 audit(1740355315.664:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 311.253920][ T29] audit: type=1326 audit(1740355315.694:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 311.344113][ T29] audit: type=1326 audit(1740355315.714:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.203927][ T29] audit: type=1326 audit(1740355315.754:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.229129][ T9451] hsr_slave_0: entered promiscuous mode [ 312.269529][ T9451] hsr_slave_1: entered promiscuous mode [ 312.654270][ T29] audit: type=1326 audit(1740355315.754:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.679363][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.685785][ T29] audit: type=1326 audit(1740355315.754:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.714035][ T29] audit: type=1326 audit(1740355315.754:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.764440][ T9451] Cannot create hsr debugfs directory [ 312.790813][ T29] audit: type=1326 audit(1740355315.754:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 312.934040][ T29] audit: type=1326 audit(1740355315.754:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.7.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b41d8d169 code=0x7ffc0000 [ 313.138038][ T9590] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 313.184625][ T9593] bridge0: port 1(erspan0) entered blocking state [ 313.235029][ T9593] bridge0: port 1(erspan0) entered disabled state [ 313.278536][ T9593] erspan0: entered allmulticast mode [ 313.315738][ T9593] erspan0: entered promiscuous mode [ 313.351444][ T9593] bridge0: port 1(erspan0) entered blocking state [ 313.358084][ T9593] bridge0: port 1(erspan0) entered forwarding state [ 316.355950][ T9451] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.437526][ T9451] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.507901][ T9451] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.546383][ T9451] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.594751][ T6248] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 316.800068][ T9634] loop0: detected capacity change from 0 to 7 [ 316.814081][ T6248] usb 6-1: Using ep0 maxpacket: 8 [ 316.848465][ T9634] Dev loop0: unable to read RDB block 7 [ 316.866355][ T9634] loop0: AHDI p2 [ 316.879846][ T9634] loop0: partition table partially beyond EOD, truncated [ 316.907155][ T6248] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 316.937273][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.955432][ T6248] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.992905][ T6248] usb 6-1: config 0 has no interface number 1 [ 317.022793][ T6248] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 317.069356][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.100813][ T6248] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 317.135342][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.142463][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.142594][ T6248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.244460][ T6248] usb 6-1: Product: syz [ 317.248309][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.255776][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.292081][ T6248] usb 6-1: Manufacturer: syz [ 317.307257][ T6248] usb 6-1: SerialNumber: syz [ 317.342898][ T6248] usb 6-1: config 0 descriptor?? [ 317.362147][ T6248] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 317.410202][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.581874][ T6248] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 317.595447][ T2345] pvrusb2: Invalid write control endpoint [ 317.657792][ T2345] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 317.674321][ T6248] usb 6-1: USB disconnect, device number 9 [ 317.712401][ T2345] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 318.316979][ T9661] tracefs: Bad value for 'gid' [ 318.324428][ T9661] tracefs: Bad value for 'gid' [ 318.813257][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.892681][ T9663] syzkaller0: entered promiscuous mode [ 318.913885][ T9663] syzkaller0: entered allmulticast mode [ 319.278356][ T9672] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 319.695957][ T9451] veth0_vlan: entered promiscuous mode [ 319.708333][ T9451] veth1_vlan: entered promiscuous mode [ 319.781306][ T9451] veth0_macvtap: entered promiscuous mode [ 320.361348][ T9451] veth1_macvtap: entered promiscuous mode [ 320.518975][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.594484][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.706672][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.724518][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.809394][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.850400][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.866103][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.015226][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.067616][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.103845][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.189871][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.218562][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.254060][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.295560][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.372564][ T9451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.413987][ T9451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.422759][ T9451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.434374][ T9451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.864834][ T5876] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 321.887344][ T9705] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.066548][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 322.086271][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 322.092325][ T9710] team0: Failed to send options change via netlink (err -105) [ 322.111029][ T9710] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 322.121869][ T9710] team0: Port device team_slave_1 removed [ 322.144653][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.224141][ T5876] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.234509][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.244665][ T5876] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 322.254856][ T5876] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 322.264183][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.277347][ T5876] usb 8-1: config 0 descriptor?? [ 322.286031][ T9705] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.385899][ T5138] Bluetooth: hci5: urb ffff888031e63900 submission failed (90) [ 322.466863][ T9705] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.547237][ T5876] usb 8-1: USB disconnect, device number 10 [ 322.651231][ T9705] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.687142][ T6772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.719140][ T6772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.810325][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.844064][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.933490][ T9722] program syz.8.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.975159][ T9705] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.069037][ T9705] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.120889][ T9705] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.172139][ T9705] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.437445][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.608112][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.682447][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.767931][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.938425][ T35] bridge_slave_1: left allmulticast mode [ 325.951346][ T35] bridge_slave_1: left promiscuous mode [ 325.964276][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.973519][ T35] bridge_slave_0: left allmulticast mode [ 325.994704][ T35] bridge_slave_0: left promiscuous mode [ 326.000499][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.433713][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.456047][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.471146][ T35] bond0 (unregistering): Released all slaves [ 326.733577][ T35] hsr_slave_0: left promiscuous mode [ 326.740433][ T35] hsr_slave_1: left promiscuous mode [ 326.750688][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.779281][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.795985][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.803455][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.943983][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 326.944011][ T29] audit: type=1804 audit(1740355331.614:76): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.810" name="/newroot/12/file0" dev="tmpfs" ino=81 res=1 errno=0 [ 327.004683][ T9786] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 327.014742][ T9786] ref_ctr increment failed for inode: 0x51 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807f714440 [ 327.173207][ T35] veth1_macvtap: left promiscuous mode [ 327.194132][ T29] audit: type=1804 audit(1740355331.614:77): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.810" name="/newroot/12/file0" dev="tmpfs" ino=81 res=1 errno=0 [ 327.231693][ T35] veth0_macvtap: left promiscuous mode [ 327.252101][ T35] veth1_vlan: left promiscuous mode [ 327.267535][ T35] veth0_vlan: left promiscuous mode [ 328.280609][ T5876] IPVS: starting estimator thread 0... [ 328.286494][ T9801] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.340968][ T9799] kvm: pic: single mode not supported [ 328.413981][ T9804] IPVS: using max 19 ests per chain, 45600 per kthread [ 328.580962][ T29] audit: type=1326 audit(1740355333.224:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 328.663543][ T29] audit: type=1326 audit(1740355333.284:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 328.725516][ T29] audit: type=1326 audit(1740355333.294:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 328.835368][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.847355][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.863189][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.875526][ T29] audit: type=1326 audit(1740355333.294:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 328.954584][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.985998][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.997783][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.035878][ T29] audit: type=1326 audit(1740355333.294:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 329.075977][ T29] audit: type=1326 audit(1740355333.294:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 329.160945][ T29] audit: type=1326 audit(1740355333.294:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 329.378641][ T29] audit: type=1326 audit(1740355333.294:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 331.074155][ T5839] Bluetooth: hci3: command tx timeout [ 333.156155][ T5138] Bluetooth: hci3: command tx timeout [ 333.359491][ T35] team0 (unregistering): Port device team_slave_1 removed [ 333.455629][ T35] team0 (unregistering): Port device team_slave_0 removed [ 333.508705][ T9866] fuse: Bad value for 'fd' [ 334.128073][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.8.828'. [ 334.144082][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.8.828'. [ 334.153394][ T9854] netlink: 44 bytes leftover after parsing attributes in process `syz.8.828'. [ 334.197372][ T9852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.203710][ T9852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.280880][ T9852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.316750][ T9852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.324170][ T9852] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.356261][ T9852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.395267][ T9852] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.417194][ T9852] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.447245][ T9852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.463658][ T9852] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.485874][ T9852] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.556145][ T9818] chnl_net:caif_netlink_parms(): no params data found [ 336.314096][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 336.354200][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 336.434182][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.442303][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.462445][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.495593][ T9818] bridge_slave_0: entered allmulticast mode [ 336.514412][ T5138] Bluetooth: hci3: command 0x040f tx timeout [ 336.585402][ T9818] bridge_slave_0: entered promiscuous mode [ 336.618278][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.640559][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.664166][ T9818] bridge_slave_1: entered allmulticast mode [ 336.694771][ T9818] bridge_slave_1: entered promiscuous mode [ 336.768935][ T9911] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.787537][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.828002][ T9818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.863666][ T9911] kvm: pic: non byte read [ 336.889404][ T9911] kvm: pic: level sensitive irq not supported [ 336.889487][ T9911] kvm: pic: non byte read [ 336.944494][ T9911] kvm: pic: level sensitive irq not supported [ 336.944598][ T9911] kvm: pic: non byte read [ 337.024214][ T9911] kvm: pic: level sensitive irq not supported [ 337.024293][ T9911] kvm: pic: non byte read [ 337.059382][ T9911] kvm: pic: level sensitive irq not supported [ 337.059466][ T9911] kvm: pic: non byte read [ 337.094345][ T9911] kvm: pic: level sensitive irq not supported [ 337.094429][ T9911] kvm: pic: non byte read [ 337.859367][ T9911] kvm: pic: level sensitive irq not supported [ 337.859451][ T9911] kvm: pic: non byte read [ 337.922469][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.845'. [ 337.934254][ T9818] team0: Port device team_slave_0 added [ 337.975044][ T9911] kvm: pic: level sensitive irq not supported [ 337.975191][ T9911] kvm: pic: non byte read [ 338.040255][ T9818] team0: Port device team_slave_1 added [ 338.198416][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.223917][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.305051][ T9818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.317738][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.324756][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.350868][ T9818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.355791][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 338.764006][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 338.770355][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 338.779637][ T5138] Bluetooth: hci3: command 0x040f tx timeout [ 340.377066][ T9818] hsr_slave_0: entered promiscuous mode [ 340.394544][ T9818] hsr_slave_1: entered promiscuous mode [ 340.410776][ T9818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.433949][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 340.449335][ T9818] Cannot create hsr debugfs directory [ 340.886092][ T5839] Bluetooth: hci3: command 0x040f tx timeout [ 340.886239][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.109133][ T9960] Invalid logical block size (-2) [ 342.914242][ T5138] Bluetooth: hci3: command 0x040f tx timeout [ 344.098739][ T9818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.332245][ T9818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.566792][ T9818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.063939][ T5138] Bluetooth: hci3: command 0x040f tx timeout [ 345.514351][ T9818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 346.782095][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.876490][T10028] netlink: 232 bytes leftover after parsing attributes in process `syz.5.870'. [ 347.339981][ T9818] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.421698][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.428869][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.541563][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.548749][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.679966][T10034] netlink: 'syz.8.871': attribute type 4 has an invalid length. [ 347.740853][T10036] netlink: 'syz.8.871': attribute type 4 has an invalid length. [ 348.433279][T10054] random: crng reseeded on system resumption [ 349.247104][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.378107][ T9818] veth0_vlan: entered promiscuous mode [ 349.445051][ T9818] veth1_vlan: entered promiscuous mode [ 349.520579][ T9818] veth0_macvtap: entered promiscuous mode [ 349.543213][ T9818] veth1_macvtap: entered promiscuous mode [ 349.624000][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.663934][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.729109][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.802358][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.882640][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.909118][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.947551][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.038155][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.107252][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.138495][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.188070][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.208610][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.237890][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.264290][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.317923][ T9818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.354483][ T9818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.374567][ T9818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.403915][ T9818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.628504][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.655100][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.960274][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.959384][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.106844][T10087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 352.127910][T10087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 352.618580][T10089] vlan2: entered promiscuous mode [ 352.623732][T10089] vlan2: entered allmulticast mode [ 352.685529][T10089] vlan0: entered allmulticast mode [ 352.691082][T10089] veth0_vlan: entered allmulticast mode [ 352.728559][T10089] vlan0: entered promiscuous mode [ 352.791137][T10089] team0: Port device vlan2 added [ 353.361614][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.477553][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.578899][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.667388][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.800869][ T1141] bridge_slave_1: left allmulticast mode [ 353.809174][ T1141] bridge_slave_1: left promiscuous mode [ 353.819782][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.831485][ T1141] bridge_slave_0: left allmulticast mode [ 353.837775][ T1141] bridge_slave_0: left promiscuous mode [ 353.844722][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.243239][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.257904][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.268214][ T1141] bond0 (unregistering): Released all slaves [ 354.575302][ T1141] hsr_slave_0: left promiscuous mode [ 354.581443][ T1141] hsr_slave_1: left promiscuous mode [ 354.587686][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.598707][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.608386][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.621190][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.671265][ T1141] veth1_macvtap: left promiscuous mode [ 354.688144][ T1141] veth0_macvtap: left promiscuous mode [ 354.697715][ T1141] veth1_vlan: left promiscuous mode [ 354.703162][ T1141] veth0_vlan: left promiscuous mode [ 355.125511][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 355.125528][ T29] audit: type=1800 audit(1740355359.794:108): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.890" name="/" dev="9p" ino=2 res=0 errno=0 [ 355.463615][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.495005][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.513286][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.525542][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.533975][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 355.542405][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.045895][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 356.458763][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 357.355934][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.897'. [ 357.633988][ T5839] Bluetooth: hci3: command tx timeout [ 358.135215][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.902'. [ 358.614055][ T5876] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 358.670567][T10142] chnl_net:caif_netlink_parms(): no params data found [ 358.803006][ T5876] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 358.817106][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.889792][ T5876] usb 10-1: config 0 descriptor?? [ 359.476241][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.483181][T10211] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 359.737594][ T5839] Bluetooth: hci3: command tx timeout [ 359.798491][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.907442][T10142] bridge_slave_0: entered allmulticast mode [ 360.005123][T10142] bridge_slave_0: entered promiscuous mode [ 360.045845][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.074065][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.081336][T10142] bridge_slave_1: entered allmulticast mode [ 360.144483][T10142] bridge_slave_1: entered promiscuous mode [ 360.312411][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.362445][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.521281][T10142] team0: Port device team_slave_0 added [ 360.565322][T10142] team0: Port device team_slave_1 added [ 360.627433][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.635310][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.662039][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.677154][T10224] netlink: 96 bytes leftover after parsing attributes in process `syz.8.910'. [ 360.738735][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.774103][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.814248][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.034246][ T5876] usb 10-1: Cannot set autoneg [ 361.034382][ T5876] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 361.049856][T10142] hsr_slave_0: entered promiscuous mode [ 361.061651][ T5876] usb 10-1: USB disconnect, device number 2 [ 361.486533][T10142] hsr_slave_1: entered promiscuous mode [ 361.531093][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.614183][T10142] Cannot create hsr debugfs directory [ 361.803943][ T5839] Bluetooth: hci3: command tx timeout [ 363.874080][ T5839] Bluetooth: hci3: command tx timeout [ 366.095507][T10142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.168466][T10142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.201689][T10142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.242425][T10142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 367.683080][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.819638][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.988299][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 368.011623][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 368.033946][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 368.067031][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.074254][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.088803][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 368.191709][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.022232][ T6242] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 369.048876][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.091808][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.101349][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.102573][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.115925][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.123528][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.131549][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.139360][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.147290][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.155059][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.162525][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.170581][ T6251] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 369.200800][ T6251] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 369.274054][ T6242] usb 10-1: Using ep0 maxpacket: 16 [ 369.294576][ T6242] usb 10-1: config 0 has no interfaces? [ 369.308261][ T6242] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 369.343848][ T6242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.352004][ T6242] usb 10-1: Product: syz [ 369.403839][ T6242] usb 10-1: Manufacturer: syz [ 369.414789][ T6242] usb 10-1: SerialNumber: syz [ 369.464865][ T6242] usb 10-1: config 0 descriptor?? [ 369.641648][T10310] netlink: 80 bytes leftover after parsing attributes in process `syz.7.927'. [ 369.748111][T10310] program syz.7.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.783319][T10310] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 369.897121][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.918634][ T6251] usb 10-1: USB disconnect, device number 3 [ 369.938013][T10316] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 370.011039][T10142] veth0_vlan: entered promiscuous mode [ 370.036359][T10142] veth1_vlan: entered promiscuous mode [ 370.109594][T10142] veth0_macvtap: entered promiscuous mode [ 370.145413][T10142] veth1_macvtap: entered promiscuous mode [ 370.187611][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.233947][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.248403][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.269271][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.287586][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.312577][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.345075][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.370242][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.399558][ T6242] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 370.427794][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.451388][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.463909][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.487951][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.510052][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.542116][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.564971][ T6242] usb 8-1: Using ep0 maxpacket: 8 [ 370.579500][ T6242] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 370.597645][T10142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.607159][ T6242] usb 8-1: config 0 has no interface number 0 [ 370.653978][T10142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.665517][ T6242] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 370.694019][ T6242] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.702088][ T6242] usb 8-1: Product: syz [ 370.707039][T10142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.719605][T10142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.728561][ T6242] usb 8-1: Manufacturer: syz [ 370.734125][ T6242] usb 8-1: SerialNumber: syz [ 370.746092][ T6242] usb 8-1: config 0 descriptor?? [ 371.523342][ T6242] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 371.533945][ T6242] usb 8-1: No valid video chain found. [ 371.564469][ T6242] usb 8-1: USB disconnect, device number 11 [ 371.631044][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.677117][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.774445][ T6250] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 371.870653][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.905471][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.958734][ T6250] usb 9-1: config 0 has an invalid interface number: 30 but max is 0 [ 372.037440][ T6250] usb 9-1: config 0 has no interface number 0 [ 372.375282][ T6250] usb 9-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 372.410387][ T6250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.432299][ T6250] usb 9-1: Product: syz [ 372.471939][ T6250] usb 9-1: Manufacturer: syz [ 372.520783][ T6250] usb 9-1: SerialNumber: syz [ 372.551907][ T6250] usb 9-1: config 0 descriptor?? [ 372.735299][ T6250] hub 9-1:0.30: bad descriptor, ignoring hub [ 372.741378][ T6250] hub 9-1:0.30: probe with driver hub failed with error -5 [ 372.776675][ T6250] keyspan 9-1:0.30: Keyspan - (without firmware) converter detected [ 373.790163][ T6250] usb 9-1: USB disconnect, device number 8 [ 373.812183][ T6250] keyspan 9-1:0.30: device disconnected [ 374.916577][ T6800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.074085][ T5876] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 375.096655][ T6800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.244854][ T6800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.265950][ T5876] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.280836][ T5876] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 375.339407][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.371855][ T6800] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.395350][ T5876] usb 10-1: config 0 descriptor?? [ 375.432484][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 375.676036][ T6800] bridge_slave_1: left allmulticast mode [ 375.706901][ T6800] bridge_slave_1: left promiscuous mode [ 375.712793][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.832837][T10384] infiniband syz0: set down [ 375.838516][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 375.845377][T10384] infiniband syz0: added ipvlan1 [ 375.853307][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 375.869765][ T6800] bridge_slave_0: left allmulticast mode [ 375.880677][T10384] syz0: rxe_create_cq: returned err = -12 [ 375.887053][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 375.894377][ T6800] bridge_slave_0: left promiscuous mode [ 375.900120][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 375.907469][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.916838][T10384] infiniband syz0: Couldn't create ib_mad CQ [ 375.923519][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 375.933113][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 375.944312][T10384] infiniband syz0: Couldn't open port 1 [ 375.955810][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 375.988748][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 376.231133][T10384] RDS/IB: syz0: added [ 376.235720][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 376.246150][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 376.255666][T10384] smc: adding ib device syz0 with port count 1 [ 376.285328][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 376.292503][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 376.299814][T10384] smc: ib device syz0 port 1 has pnetid [ 376.311282][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 376.336521][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 376.374004][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 376.408649][ T5876] pwc: Registered as video103. [ 376.416798][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input14 [ 376.453725][ T5876] usb 10-1: USB disconnect, device number 4 [ 376.746805][ T29] audit: type=1326 audit(1740355381.404:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 376.933931][ T29] audit: type=1326 audit(1740355381.404:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 377.029298][ T29] audit: type=1326 audit(1740355381.404:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 377.124058][ T29] audit: type=1326 audit(1740355381.404:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 377.206991][ T29] audit: type=1326 audit(1740355381.404:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 377.301145][ T29] audit: type=1326 audit(1740355381.404:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 377.453399][ T29] audit: type=1326 audit(1740355381.404:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 378.183863][ T29] audit: type=1326 audit(1740355381.404:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 378.344144][ T29] audit: type=1326 audit(1740355381.414:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 378.366589][ T29] audit: type=1326 audit(1740355381.444:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.8.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 379.574434][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.614060][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.624416][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.634158][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.642287][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.650724][ T5138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.679740][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 379.689007][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.714119][ T2345] pvrusb2: Failure uploading firmware1 [ 379.719644][ T2345] pvrusb2: Device initialization was not successful. [ 379.757705][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 379.769433][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 379.781379][ T2345] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 379.783552][ T6248] pvrusb2: Device being rendered inoperable [ 379.804782][ T2345] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 379.831827][ T6250] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 379.863225][ T6250] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.937606][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.951488][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.964099][ T6800] bond0 (unregistering): Released all slaves [ 380.104230][T10436] netlink: 'syz.8.951': attribute type 4 has an invalid length. [ 381.794852][ T5138] Bluetooth: hci3: command tx timeout [ 382.384323][T10461] ip6t_rpfilter: unknown options [ 383.877649][ T5138] Bluetooth: hci3: command tx timeout [ 384.044072][ T6249] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 384.237584][ T6249] usb 9-1: Using ep0 maxpacket: 32 [ 384.248347][ T6249] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 384.265955][ T6249] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 384.284333][ T6249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.292463][ T6249] usb 9-1: Product: syz [ 384.312769][ T6249] usb 9-1: Manufacturer: syz [ 384.319279][ T6249] usb 9-1: SerialNumber: syz [ 384.338924][ T6249] usb 9-1: config 0 descriptor?? [ 384.344885][T10466] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 384.354917][ T6249] hub 9-1:0.0: bad descriptor, ignoring hub [ 384.362497][ T6249] hub 9-1:0.0: probe with driver hub failed with error -5 [ 384.373647][ T6249] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 384.718938][T10426] chnl_net:caif_netlink_parms(): no params data found [ 385.067636][ T6249] usb 9-1: USB disconnect, device number 9 [ 385.073519][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 385.789105][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.837553][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.902996][T10426] bridge_slave_0: entered allmulticast mode [ 385.940468][T10426] bridge_slave_0: entered promiscuous mode [ 385.954247][ T5138] Bluetooth: hci3: command tx timeout [ 386.033323][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.501684][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.519655][T10426] bridge_slave_1: entered allmulticast mode [ 386.554364][T10426] bridge_slave_1: entered promiscuous mode [ 386.690018][T10513] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 386.989957][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.076321][T10519] autofs4:pid:10519:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 387.999935][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.034123][ T5138] Bluetooth: hci3: command tx timeout [ 388.270636][T10532] IPVS: length: 24 != 3576 [ 388.398562][T10426] team0: Port device team_slave_0 added [ 388.589926][T10426] team0: Port device team_slave_1 added [ 388.654748][ T6241] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 388.782841][ T6800] hsr_slave_0: left promiscuous mode [ 388.817780][ T6800] hsr_slave_1: left promiscuous mode [ 388.914834][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.922322][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.925377][ T6241] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.941778][ T6241] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.961859][ T6241] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.977624][ T6241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.986130][ T6241] usb 8-1: SerialNumber: syz [ 389.033562][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.097705][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.228432][ T6241] usb 8-1: 0:2 : does not exist [ 389.283959][ T6241] usb 8-1: USB disconnect, device number 12 [ 389.384200][ T6800] veth1_macvtap: left promiscuous mode [ 389.392050][ T6800] veth0_macvtap: left promiscuous mode [ 389.409084][ T6800] veth1_vlan: left promiscuous mode [ 389.421772][ T6800] veth0_vlan: left promiscuous mode [ 389.455276][T10320] udevd[10320]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.239986][ T29] audit: type=1326 audit(1740355396.854:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.261616][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.320120][ T29] audit: type=1326 audit(1740355396.854:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.341810][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.445294][ T29] audit: type=1326 audit(1740355396.864:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.456162][T10559] Set syz1 is full, maxelem 65536 reached [ 392.607172][ T29] audit: type=1326 audit(1740355396.864:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.679108][ T29] audit: type=1326 audit(1740355396.864:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.740627][ T29] audit: type=1326 audit(1740355396.864:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.762136][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.820955][ T29] audit: type=1326 audit(1740355396.864:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.842493][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.901231][ T6800] team0 (unregistering): Port device team_slave_1 removed [ 392.909230][ T29] audit: type=1326 audit(1740355396.864:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.947827][ T29] audit: type=1326 audit(1740355396.864:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 392.991001][ T29] audit: type=1326 audit(1740355396.864:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.5.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68118d169 code=0x7ffc0000 [ 393.012492][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.035027][ T6800] team0 (unregistering): Port device team_slave_0 removed [ 394.855355][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.8.982'. [ 395.456379][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.478665][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.551925][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.655883][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.668937][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.695032][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.711242][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.042899][T10426] hsr_slave_0: entered promiscuous mode [ 396.084767][T10426] hsr_slave_1: entered promiscuous mode [ 396.114668][T10426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.128449][T10426] Cannot create hsr debugfs directory [ 400.660785][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.992'. [ 403.511325][T10674] netlink: 'syz.8.1002': attribute type 1 has an invalid length. [ 403.557149][T10674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.161813][T10682] bond1: (slave bridge1): making interface the new active one [ 404.237283][T10682] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 404.572037][T10426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.657995][T10426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.741481][T10426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.805099][T10426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.131930][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.201846][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.251477][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.258683][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.312468][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.319678][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.456791][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.730046][ T5138] Bluetooth: hci2: Malformed LE Event: 0x0d [ 407.731831][T10426] veth0_vlan: entered promiscuous mode [ 408.006318][T10426] veth1_vlan: entered promiscuous mode [ 409.123110][T10426] veth0_macvtap: entered promiscuous mode [ 409.171032][T10426] veth1_macvtap: entered promiscuous mode [ 409.279405][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.344329][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.660614][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.125309][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.135736][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.146700][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.158617][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.370299][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.452302][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.493551][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.531406][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.575599][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.607912][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.640843][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.699964][T10426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.765133][T10426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.848393][T10426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.873865][T10426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.152147][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.412978][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.580167][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.614039][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.912454][T10803] warning: `syz.8.1028' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 413.548299][ C1] Unknown status report in ack skb [ 416.036156][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.371912][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.067724][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.167691][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.313036][ T3576] bridge_slave_1: left allmulticast mode [ 417.333781][ T3576] bridge_slave_1: left promiscuous mode [ 417.341588][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.356924][ T3576] bridge_slave_0: left allmulticast mode [ 417.362623][ T3576] bridge_slave_0: left promiscuous mode [ 417.377254][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.928018][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.984035][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.021404][T10865] capability: warning: `syz.9.1038' uses 32-bit capabilities (legacy support in use) [ 418.055161][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 418.055179][ T29] audit: type=1400 audit(1740355422.714:188): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=10864 comm="syz.9.1038" name="/" dev="9p" ino=1694025360095192279 [ 418.241339][ T3576] bond0 (unregistering): Released all slaves [ 419.608987][T10884] xt_socket: unknown flags 0x4 [ 420.147253][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.158683][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.167851][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.176251][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.198774][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 420.206639][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.346245][ T5839] Bluetooth: hci3: command tx timeout [ 422.432203][T10910] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 422.788661][T10921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.846244][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1054'. [ 423.977829][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1053'. [ 424.464195][ T5839] Bluetooth: hci3: command tx timeout [ 424.524299][ T5839] Bluetooth: hci0: command tx timeout [ 425.090418][ T3576] hsr_slave_0: left promiscuous mode [ 425.105221][ T3576] hsr_slave_1: left promiscuous mode [ 425.917775][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.992494][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.040334][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.135139][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.524079][ T5839] Bluetooth: hci3: command tx timeout [ 426.689290][ T3576] veth1_macvtap: left promiscuous mode [ 426.699213][ T3576] veth0_macvtap: left promiscuous mode [ 426.719720][ T3576] veth1_vlan: left promiscuous mode [ 426.729736][ T3576] veth0_vlan: left promiscuous mode [ 427.337035][ T6800] Bluetooth: Error in BCSP hdr checksum [ 428.602564][ T5138] Bluetooth: hci3: command tx timeout [ 428.674018][ T5875] kernel write not supported for file /868/clear_refs (pid: 5875 comm: kworker/0:5) [ 428.960242][T10987] 9pnet_fd: Insufficient options for proto=fd [ 429.079223][ T5138] Bluetooth: hci5: command 0x1003 tx timeout [ 429.134030][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 431.451929][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 431.555644][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 433.836153][T11010] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.115871][T11010] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.265843][T11028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.842307][T11010] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.239037][T11010] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.414044][T10886] chnl_net:caif_netlink_parms(): no params data found [ 435.472774][T11044] netlink: 'syz.8.1080': attribute type 4 has an invalid length. [ 436.538107][T11010] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.649856][T11010] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.669302][T11010] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.692330][T11010] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.770189][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.779830][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.788255][T10886] bridge_slave_0: entered allmulticast mode [ 436.795225][T10886] bridge_slave_0: entered promiscuous mode [ 436.811802][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.840319][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.857916][T10886] bridge_slave_1: entered allmulticast mode [ 436.873166][T10886] bridge_slave_1: entered promiscuous mode [ 437.048149][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.083414][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.620330][T10886] team0: Port device team_slave_0 added [ 437.739572][T10886] team0: Port device team_slave_1 added [ 437.756442][T11074] overlayfs: failed to verify upper (81/file1, ino=461, err=-116) [ 437.814037][T11074] overlayfs: failed to verify index dir 'upper' xattr [ 437.820956][T11074] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 437.866628][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.873635][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.900781][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.964423][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.978706][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.090786][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.456534][T10886] hsr_slave_0: entered promiscuous mode [ 438.585571][T10886] hsr_slave_1: entered promiscuous mode [ 438.612720][T10886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.677091][T10886] Cannot create hsr debugfs directory [ 440.278221][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.294569][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 440.342222][ T2345] pvrusb2: Failure uploading firmware1 [ 440.371111][ T2345] pvrusb2: Device initialization was not successful. [ 440.401786][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 440.415490][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 440.624875][ T6248] pvrusb2: Device being rendered inoperable [ 443.145228][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1102'. [ 446.204626][T10886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.405220][T10886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.095284][T10886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.536976][T10886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.768022][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.792250][T10886] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.045277][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.052402][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.076566][ T6246] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 448.105342][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1112'. [ 448.114968][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1112'. [ 448.362652][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.370180][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.523207][ T6246] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.533851][ T6246] usb 9-1: config 0 has no interfaces? [ 448.584435][ T6246] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.609713][ T6246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.620323][ T6246] usb 9-1: Product: syz [ 448.625693][ T6246] usb 9-1: Manufacturer: syz [ 448.629730][T10886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.656626][ T6246] usb 9-1: SerialNumber: syz [ 448.675042][ T6246] usb 9-1: config 0 descriptor?? [ 448.915268][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.958561][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.128069][ T5875] usb 9-1: USB disconnect, device number 10 [ 449.210687][ T5839] Bluetooth: hci4: unexpected event for opcode 0x200c [ 450.266003][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.469831][T11225] netlink: del zone limit has 8 unknown bytes [ 451.799085][T10886] veth0_vlan: entered promiscuous mode [ 451.979759][T10886] veth1_vlan: entered promiscuous mode [ 452.085627][ T6242] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 452.253913][ T6242] usb 8-1: Using ep0 maxpacket: 32 [ 452.260935][ T6242] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.276947][ T6242] usb 8-1: config 0 has no interface number 0 [ 452.283212][ T6242] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.313882][ T6242] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.330180][ T6242] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 452.345483][ T6242] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.358708][ T6242] usb 8-1: config 0 descriptor?? [ 452.475385][T10886] veth0_macvtap: entered promiscuous mode [ 452.506818][T10886] veth1_macvtap: entered promiscuous mode [ 452.612518][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.653977][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.703908][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.738469][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.750009][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.763935][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.776001][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.791035][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.809921][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.824927][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.836248][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.846630][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.857603][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.873371][ T6242] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 452.882688][ T6242] ft260 0003:0403:6030.0009: failed to parse HID [ 452.890410][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.899574][ T6242] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 452.911954][T10886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.925015][T10886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.934258][T10886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.943065][T10886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.120197][T11238] overlayfs: failed to resolve './file1': -2 [ 453.234045][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 453.243986][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 453.253793][ T5138] Bluetooth: hci4: hardware error 0x00 [ 453.341188][ T3576] bridge_slave_1: left allmulticast mode [ 453.349181][ T3576] bridge_slave_1: left promiscuous mode [ 453.574429][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1131'. [ 453.835081][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.519130][ T6240] usb 8-1: USB disconnect, device number 13 [ 454.604928][ T3576] bridge_slave_0: left allmulticast mode [ 454.610767][ T3576] bridge_slave_0: left promiscuous mode [ 454.655455][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.327553][ T5138] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 457.253853][ T5830] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 457.384637][ T29] audit: type=1326 audit(1740355462.044:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 457.444124][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 457.484492][ T29] audit: type=1326 audit(1740355462.044:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 457.511015][ T5830] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 457.643960][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.652033][ T5830] usb 6-1: Product: syz [ 457.667793][ T5830] usb 6-1: Manufacturer: syz [ 457.672454][ T5830] usb 6-1: SerialNumber: syz [ 457.681388][ T29] audit: type=1326 audit(1740355462.054:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 457.750828][ T5830] usb 6-1: config 0 descriptor?? [ 458.443882][ T5830] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 458.459509][ T29] audit: type=1326 audit(1740355462.124:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6188929359 code=0x7ffc0000 [ 458.558149][ T29] audit: type=1326 audit(1740355462.124:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 458.634363][ T29] audit: type=1326 audit(1740355462.174:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6188929359 code=0x7ffc0000 [ 458.713958][ T29] audit: type=1326 audit(1740355462.174:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 458.774037][ T29] audit: type=1326 audit(1740355462.184:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6188929359 code=0x7ffc0000 [ 458.877394][ T29] audit: type=1326 audit(1740355462.184:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x7ffc0000 [ 459.043343][ T29] audit: type=1326 audit(1740355462.324:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.8.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6188929359 code=0x7ffc0000 [ 459.194059][ T5830] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 459.400495][ T5830] usb 6-1: USB disconnect, device number 10 [ 460.105857][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.122670][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.138883][ T3576] bond0 (unregistering): Released all slaves [ 460.252456][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.313855][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.249677][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.303371][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.900182][T11367] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 462.963662][ T3576] hsr_slave_0: left promiscuous mode [ 462.985214][ T3576] hsr_slave_1: left promiscuous mode [ 462.998163][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.032143][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.123345][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 464.178355][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 464.188668][T11381] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 464.270647][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 464.294026][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 464.312166][ T5830] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 464.320934][ T5830] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 464.350065][ T5830] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 464.384052][ T5830] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 464.412995][ T5830] usb 6-1: config 0 interface 0 has no altsetting 0 [ 464.432836][ T5830] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 464.444501][ T5830] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 464.453106][ T5830] usb 6-1: Product: syz [ 464.461351][ T5830] usb 6-1: Manufacturer: syz [ 464.481917][ T5830] usb 6-1: SerialNumber: syz [ 464.489085][ T5830] usb 6-1: config 0 descriptor?? [ 464.509602][ T5830] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.545882][ T5830] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 464.656049][T11383] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 465.128614][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1149'. [ 465.141898][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1149'. [ 465.169923][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1149'. [ 465.475374][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 465.482170][ T5955] usb 6-1: USB disconnect, device number 11 [ 465.504981][T11390] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 465.540401][ T5955] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 466.057421][ T6786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.151458][ T6786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.249861][ T6786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.322014][ T6786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.494262][ T6786] bridge_slave_1: left allmulticast mode [ 466.500069][ T6786] bridge_slave_1: left promiscuous mode [ 466.513235][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.532890][ T6786] bridge_slave_0: left allmulticast mode [ 466.538775][ T6786] bridge_slave_0: left promiscuous mode [ 466.552428][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.982409][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.993402][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.006972][ T6786] bond0 (unregistering): Released all slaves [ 467.454714][ T6786] hsr_slave_0: left promiscuous mode [ 467.462151][ T6786] hsr_slave_1: left promiscuous mode [ 467.492959][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.523891][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.569966][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.602800][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.685199][T11444] netlink: 'syz.9.1153': attribute type 1 has an invalid length. [ 467.825549][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1153'. [ 467.881260][ T6786] veth1_macvtap: left promiscuous mode [ 467.897147][ T6786] veth0_macvtap: left promiscuous mode [ 467.915731][ T6786] veth1_vlan: left promiscuous mode [ 468.814432][T11441] kvm: MONITOR instruction emulated as NOP! [ 468.837132][ T6786] veth0_vlan: left promiscuous mode [ 469.112833][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.125683][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.142555][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.154702][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.162776][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 469.173385][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.843993][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 469.844023][ T29] audit: type=1800 audit(1740355474.504:215): pid=11456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1155" name="/" dev="fuse" ino=0 res=0 errno=0 [ 470.323995][ T6246] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 470.501163][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 470.529303][ T6246] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 470.542025][ T6246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.560832][ T6246] usb 6-1: config 0 descriptor?? [ 470.569707][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 470.577315][ T6246] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 470.584562][ T6240] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 470.764866][ T6240] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 470.774425][ T6240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.785661][ T6240] usb 8-1: config 0 descriptor?? [ 471.245441][ T5839] Bluetooth: hci3: command tx timeout [ 471.267993][T11444] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 472.962599][ T6246] gspca_stv06xx: HDCS-1020 sensor detected [ 473.245126][T11454] chnl_net:caif_netlink_parms(): no params data found [ 473.314024][ T5839] Bluetooth: hci3: command tx timeout [ 473.832513][ T6240] usb 8-1: Cannot set autoneg [ 473.844033][ T6240] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 473.932003][ T6240] usb 8-1: USB disconnect, device number 14 [ 474.143643][ T6246] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 474.155428][ T6246] usb 6-1: USB disconnect, device number 12 [ 474.641854][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.763614][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.864150][T11454] bridge_slave_0: entered allmulticast mode [ 474.871326][T11454] bridge_slave_0: entered promiscuous mode [ 474.917836][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.961552][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.004020][T11454] bridge_slave_1: entered allmulticast mode [ 475.075396][T11454] bridge_slave_1: entered promiscuous mode [ 475.231020][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.262125][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.394551][ T5839] Bluetooth: hci3: command tx timeout [ 475.551663][T11454] team0: Port device team_slave_0 added [ 475.569603][T11454] team0: Port device team_slave_1 added [ 475.711721][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.736008][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.783827][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.811651][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.854066][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.907568][T11529] block nbd5: shutting down sockets [ 475.993805][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.401353][T11545] kvm: pic: level sensitive irq not supported [ 476.405126][T11545] kvm: pic: level sensitive irq not supported [ 476.418440][T11454] hsr_slave_0: entered promiscuous mode [ 476.431933][T11545] kvm: pic: level sensitive irq not supported [ 476.434729][T11454] hsr_slave_1: entered promiscuous mode [ 477.697895][ T5839] Bluetooth: hci3: command tx timeout [ 479.458717][ T29] audit: type=1326 audit(1740355484.124:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11581 comm="syz.8.1183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f618898d169 code=0x0 [ 480.591553][T11454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.652768][T11454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.694279][T11454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.731900][T11454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.974497][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.037438][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.055799][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.062928][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.128807][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.136031][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.246079][T11626] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 482.272900][T11454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.330017][T11626] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 482.338586][T11454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.403305][T11626] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 482.913455][T11454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.952415][T11454] veth0_vlan: entered promiscuous mode [ 484.171082][T11454] veth1_vlan: entered promiscuous mode [ 485.175659][T11454] veth0_macvtap: entered promiscuous mode [ 485.217743][T11454] veth1_macvtap: entered promiscuous mode [ 485.273395][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.353955][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.384705][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.396808][T11662] netlink: 'syz.9.1198': attribute type 10 has an invalid length. [ 485.405655][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.440843][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.466190][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.526399][T11454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.605321][T11662] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.628939][T11662] bond0: (slave team0): Enslaving as an active interface with an up link [ 485.682562][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.723832][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.768274][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.823927][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.860862][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.875348][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.911368][T11454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.960036][T11454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.997839][T11454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.020482][T11454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.052241][T11454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.196970][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.235411][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.333089][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.375826][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.757027][ T6794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.829496][T11707] netlink: 'syz.7.1211': attribute type 4 has an invalid length. [ 487.996330][ T6794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.387940][ T6794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.574570][ T6794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.774406][ T6794] bridge_slave_1: left allmulticast mode [ 488.784772][ T6794] bridge_slave_1: left promiscuous mode [ 488.790683][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.820555][ T6794] bridge_slave_0: left allmulticast mode [ 488.831206][ T6794] bridge_slave_0: left promiscuous mode [ 488.844976][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.555690][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.567967][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.579687][ T6794] bond0 (unregistering): Released all slaves [ 489.869481][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1214'. [ 492.055711][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1216'. [ 492.073860][ T6794] hsr_slave_0: left promiscuous mode [ 492.120322][ T6794] hsr_slave_1: left promiscuous mode [ 492.149765][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.188789][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.281004][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.311699][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.146398][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.151801][ T6794] veth1_macvtap: left promiscuous mode [ 493.173041][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.193915][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.206866][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.215667][ T6794] veth0_macvtap: left promiscuous mode [ 493.221409][ T5138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 493.229005][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.250346][ T6794] veth1_vlan: left promiscuous mode [ 493.276129][ T6794] veth0_vlan: left promiscuous mode [ 493.810557][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 493.869327][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 495.344809][ T5138] Bluetooth: hci3: command tx timeout [ 495.358252][T11809] chnl_net:caif_netlink_parms(): no params data found [ 495.966172][T11840] netlink: ct family unspecified [ 495.971406][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.405861][ T5138] Bluetooth: hci3: command tx timeout [ 497.635388][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.642598][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.664056][T11809] bridge_slave_0: entered allmulticast mode [ 497.670888][T11809] bridge_slave_0: entered promiscuous mode [ 497.707208][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.729682][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.653951][T11809] bridge_slave_1: entered allmulticast mode [ 498.674345][T11809] bridge_slave_1: entered promiscuous mode [ 498.803066][T11809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.823030][T11809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.017017][T11870] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.209142][T11809] team0: Port device team_slave_0 added [ 499.233262][T11809] team0: Port device team_slave_1 added [ 499.473916][ T5138] Bluetooth: hci3: command tx timeout [ 500.075639][T11809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.082753][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.115625][T11809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.142982][T11882] vlan2: entered promiscuous mode [ 500.149592][T11882] bridge0: entered promiscuous mode [ 500.164164][T11882] bridge0: port 2(vlan2) entered blocking state [ 500.170663][T11882] bridge0: port 2(vlan2) entered disabled state [ 500.186692][T11882] vlan2: entered allmulticast mode [ 500.191868][T11882] bridge0: entered allmulticast mode [ 500.207992][T11882] vlan2: left allmulticast mode [ 500.212911][T11882] bridge0: left allmulticast mode [ 500.235200][T11882] bridge0: left promiscuous mode [ 500.281751][T11809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.290502][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.317163][T11809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.497921][T11809] hsr_slave_0: entered promiscuous mode [ 500.518027][T11809] hsr_slave_1: entered promiscuous mode [ 606.343677][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 606.350698][ C0] rcu: 1-...!: (1 GPs behind) idle=e5f4/1/0x4000000000000000 softirq=64793/64796 fqs=0 [ 606.362035][ C0] rcu: (detected by 0, t=10502 jiffies, g=61989, q=85 ncpus=2) [ 606.369710][ C0] Sending NMI from CPU 0 to CPUs 1: [ 606.369751][ C1] NMI backtrace for cpu 1 [ 606.369774][ C1] CPU: 1 UID: 0 PID: 11903 Comm: syz.7.1244 Not tainted 6.14.0-rc4-syzkaller #0 [ 606.369791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.369805][ C1] RIP: 0010:lock_acquire+0x24b/0x550 [ 606.369837][ C1] Code: 4c 89 f7 e8 87 bf 89 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 42 80 3c 2b 00 74 08 4c 89 f7 e8 7a be 89 00 f6 44 24 61 02 <0f> 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e [ 606.369850][ C1] RSP: 0018:ffffc90000a18b00 EFLAGS: 00000046 [ 606.369866][ C1] RAX: 0000000000000001 RBX: 1ffff9200014316c RCX: ffff8880601e8ae8 [ 606.369878][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab680 RDI: ffffffff8c801a80 [ 606.369890][ C1] RBP: ffffc90000a18c48 R08: ffffffff945119f7 R09: 1ffffffff28a233e [ 606.369902][ C1] R10: dffffc0000000000 R11: fffffbfff28a233f R12: 1ffff92000143168 [ 606.369914][ C1] R13: dffffc0000000000 R14: ffffc90000a18b60 R15: 0000000000000046 [ 606.369926][ C1] FS: 00007f6b42b426c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 606.369940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.369951][ C1] CR2: 00007f6b42b21d58 CR3: 0000000025374000 CR4: 00000000003526f0 [ 606.369966][ C1] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 606.369975][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 606.369985][ C1] Call Trace: [ 606.369991][ C1] [ 606.369999][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 606.370017][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 606.370040][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 606.370056][ C1] ? nmi_handle+0x2a/0x5a0 [ 606.370088][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 606.370107][ C1] ? nmi_handle+0x14f/0x5a0 [ 606.370129][ C1] ? nmi_handle+0x2a/0x5a0 [ 606.370153][ C1] ? lock_acquire+0x24b/0x550 [ 606.370174][ C1] ? default_do_nmi+0x63/0x160 [ 606.370190][ C1] ? exc_nmi+0x123/0x1f0 [ 606.370204][ C1] ? end_repeat_nmi+0xf/0x53 [ 606.370234][ C1] ? lock_acquire+0x24b/0x550 [ 606.370256][ C1] ? lock_acquire+0x24b/0x550 [ 606.370279][ C1] ? lock_acquire+0x24b/0x550 [ 606.370301][ C1] [ 606.370306][ C1] [ 606.370316][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 606.370344][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.370364][ C1] ? __hrtimer_run_queues+0x477/0xd30 [ 606.370400][ C1] ? __pfx_lock_release+0x10/0x10 [ 606.370427][ C1] ? __pfx_advance_sched+0x10/0x10 [ 606.370446][ C1] _raw_spin_lock+0x2e/0x40 [ 606.370463][ C1] ? advance_sched+0xab/0xca0 [ 606.370480][ C1] advance_sched+0xab/0xca0 [ 606.370499][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.370518][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.370541][ C1] ? __pfx_advance_sched+0x10/0x10 [ 606.370559][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 606.370586][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 606.370603][ C1] ? sched_clock+0x4a/0x70 [ 606.370622][ C1] ? rcu_is_watching+0x15/0xb0 [ 606.370642][ C1] hrtimer_interrupt+0x403/0xa40 [ 606.370672][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 606.370700][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 606.370720][ C1] [ 606.370726][ C1] [ 606.370732][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.370757][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 606.370785][ C1] Code: c9 50 e8 29 2d 0c 00 48 83 c4 08 4c 89 f7 e8 fd 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 70 c0 72 0a e8 bb 07 39 00 fb 48 8b 5d c0 <48> 8d bb 08 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 606.370799][ C1] RSP: 0018:ffffc900030772a8 EFLAGS: 00000286 [ 606.370814][ C1] RAX: 1ca9c9afb30b4800 RBX: ffff8880601e8000 RCX: ffffffff819d296a [ 606.370827][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2aa420 RDI: ffffffff8c801a80 [ 606.370840][ C1] RBP: ffffc900030772f0 R08: ffffffff945118ff R09: 1ffffffff28a231f [ 606.370852][ C1] R10: dffffc0000000000 R11: fffffbfff28a2320 R12: 1ffff110170e7ebe [ 606.370866][ C1] R13: dffffc0000000000 R14: ffff8880b873e7c0 R15: ffff8880b873f5f0 [ 606.370883][ C1] ? mark_lock+0x9a/0x360 [ 606.370911][ C1] ? finish_task_switch+0x1e5/0x870 [ 606.370940][ C1] __schedule+0x18c4/0x4c40 [ 606.370972][ C1] ? __pfx___schedule+0x10/0x10 [ 606.370992][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 606.371020][ C1] ? preempt_schedule+0xe1/0xf0 [ 606.371038][ C1] preempt_schedule_common+0x84/0xd0 [ 606.371058][ C1] preempt_schedule+0xe1/0xf0 [ 606.371077][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 606.371097][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 606.371122][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.371147][ C1] preempt_schedule_thunk+0x1a/0x30 [ 606.371174][ C1] _raw_spin_unlock_irqrestore+0x130/0x140 [ 606.371193][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.371215][ C1] ? autoremove_wake_function+0x37/0x110 [ 606.371240][ C1] __wake_up_common_lock+0x18c/0x1e0 [ 606.371268][ C1] __unix_dgram_recvmsg+0x61a/0x1320 [ 606.371298][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 606.371325][ C1] ? iovec_from_user+0x61/0x240 [ 606.371352][ C1] ? __pfx___might_resched+0x10/0x10 [ 606.371373][ C1] ? __import_iovec+0x3bf/0x830 [ 606.371394][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 606.371418][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 606.371445][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 606.371469][ C1] ____sys_recvmsg+0x3cd/0x480 [ 606.371500][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 606.371533][ C1] ? do_recvmmsg+0x44e/0xab0 [ 606.371559][ C1] ? __might_fault+0xaa/0x120 [ 606.371583][ C1] do_recvmmsg+0x426/0xab0 [ 606.371616][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 606.371641][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 606.371676][ C1] ? futex_wait+0x285/0x360 [ 606.371701][ C1] ? __pfx_futex_wait+0x10/0x10 [ 606.371730][ C1] ? fd_install+0x9c/0x5d0 [ 606.371755][ C1] ? __pfx_lock_release+0x10/0x10 [ 606.371785][ C1] ? __pfx_do_futex+0x10/0x10 [ 606.371814][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 606.371842][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 606.371870][ C1] ? do_syscall_64+0x100/0x230 [ 606.371893][ C1] ? do_syscall_64+0xb6/0x230 [ 606.371916][ C1] do_syscall_64+0xf3/0x230 [ 606.371938][ C1] ? clear_bhb_loop+0x35/0x90 [ 606.371963][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.371987][ C1] RIP: 0033:0x7f6b41d8d169 [ 606.372002][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.372016][ C1] RSP: 002b:00007f6b42b42038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 606.372033][ C1] RAX: ffffffffffffffda RBX: 00007f6b41fa6080 RCX: 00007f6b41d8d169 [ 606.372045][ C1] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 606.372056][ C1] RBP: 00007f6b41e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 606.372067][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 606.372077][ C1] R13: 0000000000000000 R14: 00007f6b41fa6080 R15: 00007ffc16de5288 [ 606.372097][ C1] [ 606.372744][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g61989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 607.073379][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 607.083375][ C0] rcu: RCU grace-period kthread stack dump: [ 607.089288][ C0] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 607.102822][ C0] Call Trace: [ 607.106133][ C0] [ 607.109090][ C0] __schedule+0x18bc/0x4c40 [ 607.113627][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 607.119570][ C0] ? __pfx___schedule+0x10/0x10 [ 607.124452][ C0] ? __pfx_lock_release+0x10/0x10 [ 607.129524][ C0] ? __pfx___mod_timer+0x10/0x10 [ 607.134493][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.141123][ C0] ? schedule+0x90/0x320 [ 607.145391][ C0] schedule+0x14b/0x320 [ 607.149579][ C0] schedule_timeout+0x15a/0x290 [ 607.154452][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 607.159848][ C0] ? __pfx_process_timeout+0x10/0x10 [ 607.165167][ C0] ? prepare_to_swait_event+0x330/0x350 [ 607.170743][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.175975][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 607.180857][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 607.186087][ C0] ? rcu_gp_init+0x1256/0x1630 [ 607.190889][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 607.195857][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 607.202044][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 607.207365][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.213296][ C0] ? finish_swait+0xd4/0x1e0 [ 607.217917][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.223151][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 607.227780][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.233009][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.238935][ C0] ? __kthread_parkme+0x169/0x1d0 [ 607.243993][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.249226][ C0] kthread+0x7a9/0x920 [ 607.253336][ C0] ? __pfx_kthread+0x10/0x10 [ 607.257964][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.263198][ C0] ? __pfx_kthread+0x10/0x10 [ 607.267856][ C0] ? __pfx_kthread+0x10/0x10 [ 607.272482][ C0] ? __pfx_kthread+0x10/0x10 [ 607.277112][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.282341][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 607.287572][ C0] ? __pfx_kthread+0x10/0x10 [ 607.292195][ C0] ret_from_fork+0x4b/0x80 [ 607.296640][ C0] ? __pfx_kthread+0x10/0x10 [ 607.301266][ C0] ret_from_fork_asm+0x1a/0x30 [ 607.306083][ C0] [ 607.309120][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 607.315459][ C0] CPU: 0 UID: 0 PID: 6772 Comm: kworker/u8:12 Not tainted 6.14.0-rc4-syzkaller #0 [ 607.324677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.334759][ C0] Workqueue: events_unbound toggle_allocation_gate [ 607.341303][ C0] RIP: 0010:smp_call_function_many_cond+0x1bc0/0x2d30 [ 607.348094][ C0] Code: 64 24 68 75 07 e8 e0 f0 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e bb f0 0b 00 eb db 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 4c 89 [ 607.367724][ C0] RSP: 0018:ffffc90002e77640 EFLAGS: 00000202 [ 607.373815][ C0] RAX: 0000000000000000 RBX: 1ffff110170e88c9 RCX: ffff88802ce73c00 [ 607.381807][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 607.389798][ C0] RBP: ffffc90002e77840 R08: ffffffff81b5ccb0 R09: 1ffffffff28a2308 [ 607.397795][ C0] R10: dffffc0000000000 R11: fffffbfff28a2309 R12: ffff8880b863f9c8 [ 607.405790][ C0] R13: ffff8880b8744648 R14: ffff8880b863f9c0 R15: 0000000000000001 [ 607.413784][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 607.422737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.429339][ C0] CR2: 0000001b30314ff8 CR3: 000000000e938000 CR4: 00000000003526f0 [ 607.437335][ C0] DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 [ 607.445329][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 607.453325][ C0] Call Trace: [ 607.456626][ C0] [ 607.459497][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 607.465874][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 607.471560][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 607.477413][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 607.483684][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 607.489085][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 607.494756][ C0] ? update_process_times+0x242/0x2f0 [ 607.500160][ C0] ? tick_nohz_handler+0x37c/0x500 [ 607.505306][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 607.510793][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 607.516207][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 607.521949][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 607.526914][ C0] ? read_tsc+0x9/0x20 [ 607.531006][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 607.537110][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 607.542280][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 607.548471][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 607.554308][ C0] [ 607.557259][ C0] [ 607.560210][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.566407][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 607.572602][ C0] ? smp_call_function_many_cond+0x1bc0/0x2d30 [ 607.578789][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 607.584888][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 607.590989][ C0] ? __pfx___text_poke+0x10/0x10 [ 607.595956][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 607.602310][ C0] ? __pfx___might_resched+0x10/0x10 [ 607.607628][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 607.613557][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 607.618609][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 607.623747][ C0] text_poke_bp_batch+0x352/0xb30 [ 607.628800][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.634812][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 607.640994][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 607.646575][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 607.652853][ C0] text_poke_finish+0x30/0x50 [ 607.657554][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 607.663563][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 607.669491][ C0] static_key_enable+0x1a/0x20 [ 607.674290][ C0] toggle_allocation_gate+0xbc/0x260 [ 607.679611][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 607.685539][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.691913][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 607.697662][ C0] process_scheduled_works+0xabe/0x18e0 [ 607.703268][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.709285][ C0] ? assign_work+0x364/0x3d0 [ 607.713909][ C0] worker_thread+0x870/0xd30 [ 607.718548][ C0] ? __kthread_parkme+0x169/0x1d0 [ 607.723605][ C0] ? __pfx_worker_thread+0x10/0x10 [ 607.728746][ C0] kthread+0x7a9/0x920 [ 607.732846][ C0] ? __pfx_kthread+0x10/0x10 [ 607.737479][ C0] ? __pfx_worker_thread+0x10/0x10 [ 607.742629][ C0] ? __pfx_kthread+0x10/0x10 [ 607.747248][ C0] ? __pfx_kthread+0x10/0x10 [ 607.751875][ C0] ? __pfx_kthread+0x10/0x10 [ 607.756505][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.761730][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 607.766956][ C0] ? __pfx_kthread+0x10/0x10 [ 607.771582][ C0] ret_from_fork+0x4b/0x80 [ 607.776028][ C0] ? __pfx_kthread+0x10/0x10 [ 607.780655][ C0] ret_from_fork_asm+0x1a/0x30 [ 607.785463][ C0]