last executing test programs: 2m15.637372184s ago: executing program 2 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_clone3(&(0x7f0000000e00)={0x200100000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m14.063036984s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) 2m12.812994805s ago: executing program 2 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "03959b17f12b6cf64ce960ac4ede93a57d97e7f536ad07bc885d2784d2c85542", "4b1c5c7cf04f0109d9f536bf8d8a0fc95f214789f04dd8cca0be88cc5330aea7", "edf14c84669b98502ae37450796edad250f67c7ee8476226d9abdf19b21f0e46", "19834f5535d336d07503af2840e186de1c9fe9e02372d9256df78ae056bf5139", "4e39dba515e48aa3b8b4487bf3541dc8312a38b37304fb52381235e4964d0d5b", "8b9e69978d000100", 0x59dd, 0x40, 0x9, 0x4c9}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m11.45116664s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m11.212111546s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2202, 0x9a) 2m9.10798303s ago: executing program 2 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0xe, 0x6, 0x0, 0x80, 0x9, 0xfd, 0x0, 0x0, 0x3, 0x3, 0xff, 0xff, 0x1, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m7.481672581s ago: executing program 32 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0xe, 0x6, 0x0, 0x80, 0x9, 0xfd, 0x0, 0x0, 0x3, 0x3, 0xff, 0xff, 0x1, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.012172111s ago: executing program 1 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x8, 0xfffff58c, 0xffffffff, 0x1, 0xcc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0xdd86, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)='\'', 0x1}], 0x1}, 0x4005) 21.744485058s ago: executing program 3 (id=185): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2000000015, 0x80005, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 21.354216367s ago: executing program 1 (id=186): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe000202b}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 19.531464514s ago: executing program 3 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) socket$inet(0x2, 0x3, 0x5) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x61, 0xe, 0x80000001}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x31) 19.192260332s ago: executing program 1 (id=188): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3, 0x2, 0x2, '\x00', 0x38bd2394}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.845510241s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}}, 0x0) 18.700466975s ago: executing program 0 (id=191): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x16810, 0x0, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='PNP0C0A:0', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='LNXCP', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='auto', 0x4) 16.615494398s ago: executing program 3 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r7, 0xc) 16.465192611s ago: executing program 0 (id=194): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x6336}], 0x1, 0x0, 0x0, 0x0) io_setup(0x81, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15.122011776s ago: executing program 4 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(r2, 0xf, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 15.011827598s ago: executing program 1 (id=196): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0x0, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0) 14.865001752s ago: executing program 0 (id=197): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xfffffffe, 0x80, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13.77997116s ago: executing program 4 (id=198): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x183, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, 0x0, 0x0, 0x2000001000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0040}]}) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x8000, 0xfffffffffffff000}) fsmount(0xffffffffffffffff, 0x0, 0x1) setpgid(0x0, 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 13.409500249s ago: executing program 4 (id=199): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 13.027104529s ago: executing program 0 (id=200): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 12.759493596s ago: executing program 4 (id=201): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) unshare(0x20000400) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f0000000200)={0x1e, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0x8841) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 12.228926419s ago: executing program 1 (id=202): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) openat$dlm_plock(0xffffff9c, 0x0, 0x442802, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 12.092022893s ago: executing program 0 (id=203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0x200, 0x3, 0x95, 0x8, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x4, 0x8}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 11.688032113s ago: executing program 3 (id=204): bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x5608, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) 11.43341255s ago: executing program 4 (id=205): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x500) r3 = dup3(r2, r0, 0x80000) read$FUSE(r3, &(0x7f0000004040)={0x2020}, 0x2020) 98.996048ms ago: executing program 1 (id=206): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) 42.838809ms ago: executing program 4 (id=207): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) syz_emit_vhci(&(0x7f0000001340)=ANY=[@ANYBLOB="040e0c000310"], 0xf) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x2) close(0x3) 812.64µs ago: executing program 0 (id=208): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000081) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20c080, 0x0) memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=209): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ac, &(0x7f0000000140)={0x0, 0xd1cd, 0x1000, 0x1, 0x359}, &(0x7f0000000240), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r1, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 77.071755][ T5765] cgroup: Unknown subsys name 'net' [ 77.235897][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.018474][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.201016][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.205211][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.210706][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.216693][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.233449][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.242186][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.251335][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.260052][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.266111][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.267555][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.275674][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.282654][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.290658][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.297005][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.304493][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.312541][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.317947][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.325322][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.346233][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.356347][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.373814][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.386692][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.396674][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.405170][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.808546][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.875729][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.959592][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.102109][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.110268][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.117690][ T5776] bridge_slave_0: entered allmulticast mode [ 82.125040][ T5776] bridge_slave_0: entered promiscuous mode [ 82.133694][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.141545][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.149303][ T5777] bridge_slave_0: entered allmulticast mode [ 82.156280][ T5777] bridge_slave_0: entered promiscuous mode [ 82.164269][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.171471][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.178882][ T5777] bridge_slave_1: entered allmulticast mode [ 82.185913][ T5777] bridge_slave_1: entered promiscuous mode [ 82.200215][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.211804][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.219258][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.226519][ T5776] bridge_slave_1: entered allmulticast mode [ 82.233705][ T5776] bridge_slave_1: entered promiscuous mode [ 82.297237][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.304669][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.311938][ T5778] bridge_slave_0: entered allmulticast mode [ 82.319880][ T5778] bridge_slave_0: entered promiscuous mode [ 82.343295][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.351325][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.359250][ T5778] bridge_slave_1: entered allmulticast mode [ 82.367188][ T5778] bridge_slave_1: entered promiscuous mode [ 82.389422][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.402517][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.442120][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.456964][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.476318][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.523721][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.547607][ T5776] team0: Port device team_slave_0 added [ 82.591151][ T5777] team0: Port device team_slave_0 added [ 82.599406][ T5776] team0: Port device team_slave_1 added [ 82.610242][ T5777] team0: Port device team_slave_1 added [ 82.624054][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.631637][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.639238][ T5779] bridge_slave_0: entered allmulticast mode [ 82.646183][ T5779] bridge_slave_0: entered promiscuous mode [ 82.677676][ T5778] team0: Port device team_slave_0 added [ 82.685076][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.695600][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.703141][ T5779] bridge_slave_1: entered allmulticast mode [ 82.711141][ T5779] bridge_slave_1: entered promiscuous mode [ 82.738954][ T5778] team0: Port device team_slave_1 added [ 82.764925][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.772482][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.798843][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.820067][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.827268][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.853806][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.866699][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.874030][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.901431][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.935431][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.942809][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.974559][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.003092][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.012833][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.041612][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.055615][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.086081][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.093248][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.122812][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.136739][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.175240][ T5777] hsr_slave_0: entered promiscuous mode [ 83.184810][ T5777] hsr_slave_1: entered promiscuous mode [ 83.215357][ T5779] team0: Port device team_slave_0 added [ 83.227042][ T5779] team0: Port device team_slave_1 added [ 83.301808][ T5776] hsr_slave_0: entered promiscuous mode [ 83.310210][ T5776] hsr_slave_1: entered promiscuous mode [ 83.316985][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.325307][ T5776] Cannot create hsr debugfs directory [ 83.367896][ T5778] hsr_slave_0: entered promiscuous mode [ 83.374259][ T5789] Bluetooth: hci0: command tx timeout [ 83.379951][ T5792] Bluetooth: hci1: command tx timeout [ 83.387086][ T5778] hsr_slave_1: entered promiscuous mode [ 83.393511][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.401546][ T5778] Cannot create hsr debugfs directory [ 83.407815][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.418437][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.444807][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.455548][ T5789] Bluetooth: hci2: command tx timeout [ 83.455718][ T5792] Bluetooth: hci3: command tx timeout [ 83.463682][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.473765][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.500063][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.713415][ T5779] hsr_slave_0: entered promiscuous mode [ 83.720693][ T5779] hsr_slave_1: entered promiscuous mode [ 83.727044][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.735251][ T5779] Cannot create hsr debugfs directory [ 83.957941][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.985418][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.995004][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.027469][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.121905][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.135121][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.151289][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.163368][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.257864][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.269758][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.294934][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.314195][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.398772][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.410598][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.421215][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.435267][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.472112][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.526014][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.561840][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569352][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.580417][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.587651][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.683724][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.732677][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.760512][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.807032][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.822787][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.829970][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.850408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.857611][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.904418][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.911724][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.984487][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.991684][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.036064][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.084425][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.120465][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.141944][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.149220][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.172660][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.179923][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.351487][ T5776] veth0_vlan: entered promiscuous mode [ 85.395061][ T5776] veth1_vlan: entered promiscuous mode [ 85.450128][ T5792] Bluetooth: hci0: command tx timeout [ 85.450552][ T5789] Bluetooth: hci1: command tx timeout [ 85.530635][ T5789] Bluetooth: hci2: command tx timeout [ 85.530896][ T5792] Bluetooth: hci3: command tx timeout [ 85.543052][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.552661][ T5776] veth0_macvtap: entered promiscuous mode [ 85.570704][ T5776] veth1_macvtap: entered promiscuous mode [ 85.624270][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.646044][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.677977][ T5777] veth0_vlan: entered promiscuous mode [ 85.696185][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.707038][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722852][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.735638][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810844][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.845586][ T5777] veth1_vlan: entered promiscuous mode [ 85.936406][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.997496][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.000015][ T5778] veth0_vlan: entered promiscuous mode [ 86.017493][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065837][ T5778] veth1_vlan: entered promiscuous mode [ 86.100188][ T5777] veth0_macvtap: entered promiscuous mode [ 86.110593][ T5777] veth1_macvtap: entered promiscuous mode [ 86.136414][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.147259][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.154450][ T5779] veth0_vlan: entered promiscuous mode [ 86.192090][ T5778] veth0_macvtap: entered promiscuous mode [ 86.210575][ T5778] veth1_macvtap: entered promiscuous mode [ 86.239928][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.253214][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.266100][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.274273][ T5779] veth1_vlan: entered promiscuous mode [ 86.309275][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.322441][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.348128][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.375196][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.392647][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.166046][ T5792] Bluetooth: hci1: command tx timeout [ 88.166043][ T5789] Bluetooth: hci0: command tx timeout [ 88.166081][ T5792] Bluetooth: hci3: command tx timeout [ 88.172393][ T5786] Bluetooth: hci2: command tx timeout [ 88.191883][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.267798][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.325473][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.376921][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.409374][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.424232][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.436315][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.455372][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.496897][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.506181][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.516046][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.530959][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.545711][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.568282][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.577170][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.623240][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751325][ T5779] veth0_macvtap: entered promiscuous mode [ 88.814959][ T5779] veth1_macvtap: entered promiscuous mode [ 89.008320][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.016226][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.057421][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.089580][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.108124][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.128161][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.148171][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.168306][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.200586][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.274880][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.278399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.318755][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.322436][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.355198][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.392293][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.408839][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.431962][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.444750][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.456661][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.465376][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.496495][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505429][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.515552][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.525303][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.601746][ T5853] syz.3.6[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.636891][ T5853] loop3: detected capacity change from 0 to 512 [ 89.675486][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.704884][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.716909][ T5853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.832040][ T5853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.879347][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.887271][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.903829][ T5853] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.162384][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.222568][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.271909][ T51] Bluetooth: hci3: command tx timeout [ 90.277526][ T5789] Bluetooth: hci1: command tx timeout [ 90.283295][ T5792] Bluetooth: hci2: command tx timeout [ 90.289592][ T5786] Bluetooth: hci0: command tx timeout [ 90.906869][ T5859] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 90.945702][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.719901][ T971] cfg80211: failed to load regulatory.db [ 93.041237][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.252264][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.276697][ T5820] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.500093][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.514344][ T5820] usb 2-1: config 0 descriptor?? [ 93.529719][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 93.654628][ T5885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.435518][ T5820] pwc: send_video_command error -71 [ 94.440948][ T5820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 94.458936][ T5820] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 94.501259][ T5820] usb 2-1: USB disconnect, device number 2 [ 94.719419][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.814769][ T5900] loop1: detected capacity change from 0 to 512 [ 96.151754][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.373319][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.383649][ T28] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.406984][ T28] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 96.416543][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.425130][ T28] usb 2-1: Product: syz [ 96.430798][ T28] usb 2-1: Manufacturer: syz [ 96.435464][ T28] usb 2-1: SerialNumber: syz [ 96.469471][ T28] usb-storage 2-1:1.0: USB Mass Storage device detected [ 96.496991][ T28] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 96.507827][ T28] scsi host1: usb-storage 2-1:1.0 [ 96.878241][ T5902] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 96.888188][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.897367][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.942429][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.949771][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.958517][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.965740][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.041771][ T5902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 97.087171][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 97.108366][ T5904] bridge_slave_1: left allmulticast mode [ 97.123897][ T5904] bridge_slave_1: left promiscuous mode [ 97.144506][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.181229][ T5904] bridge_slave_0: left allmulticast mode [ 97.190433][ T5904] bridge_slave_0: left promiscuous mode [ 98.330272][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.442274][ T5904] bond0: (slave bridge0): Releasing backup interface [ 98.669189][ T8] usb 2-1: USB disconnect, device number 3 [ 100.451470][ T5936] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.478182][ T5936] CIFS mount error: No usable UNC path provided in device string! [ 100.478182][ T5936] [ 100.488658][ T5936] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.324172][ T5941] ======================================================= [ 101.324172][ T5941] WARNING: The mand mount option has been deprecated and [ 101.324172][ T5941] and is ignored by this kernel. Remove the mand [ 101.324172][ T5941] option from the mount to silence this warning. [ 101.324172][ T5941] ======================================================= [ 101.518520][ T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.976497][ T971] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 102.991070][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.096658][ T971] usb 4-1: Product: syz [ 103.101538][ T971] usb 4-1: Manufacturer: syz [ 103.106237][ T971] usb 4-1: SerialNumber: syz [ 103.283671][ T971] usb 4-1: config 0 descriptor?? [ 103.314376][ T971] hub 4-1:0.0: bad descriptor, ignoring hub [ 103.328623][ T971] hub: probe of 4-1:0.0 failed with error -5 [ 103.762469][ T971] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 103.796587][ T971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.832770][ T2924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.848881][ T971] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 103.868329][ T971] usb 4-1: media controller created [ 104.135278][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.406411][ T2924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.948680][ T971] DVB: Unable to find symbol dib7000p_attach() [ 104.955017][ T971] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 105.120595][ T2924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.220386][ T971] rc_core: IR keymap rc-dib0700-rc5 not found [ 105.226551][ T971] Registered IR keymap rc-empty [ 105.262276][ T971] dvb-usb: could not initialize remote control. [ 105.294007][ T2924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.298333][ T971] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 105.369420][ T971] usb 4-1: USB disconnect, device number 2 [ 105.495979][ T971] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 112.029226][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.038857][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.050053][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.059926][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.072791][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.088661][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.556443][ T5988] process 'syz.1.36' launched './file0' with NULL argv: empty string added [ 114.548283][ T51] Bluetooth: hci2: command tx timeout [ 115.655721][ T6007] loop1: detected capacity change from 0 to 2048 [ 115.779714][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.792608][ T6007] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.112896][ T6021] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.39: bg 0: block 345: padding at end of block bitmap is not set [ 116.177711][ T6021] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 116.412902][ T6021] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.412902][ T6021] [ 116.446436][ T6022] loop3: detected capacity change from 0 to 32768 [ 116.463502][ T6021] EXT4-fs (loop1): Total free blocks count 0 [ 116.470128][ T6021] EXT4-fs (loop1): Free/Dirty block details [ 116.476720][ T6021] EXT4-fs (loop1): free_blocks=0 [ 116.482859][ T6021] EXT4-fs (loop1): dirty_blocks=368 [ 116.491838][ T6021] EXT4-fs (loop1): Block reservation details [ 116.498210][ T6021] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 116.564887][ T6022] JBD2: Ignoring recovery information on journal [ 116.577966][ T51] Bluetooth: hci2: command tx timeout [ 116.617307][ T6022] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.722583][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 342 with error 28 [ 116.970565][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 118.948960][ T51] Bluetooth: hci2: command tx timeout [ 119.092884][ T2924] hsr_slave_0: left promiscuous mode [ 119.101329][ T2924] hsr_slave_1: left promiscuous mode [ 119.121810][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.148290][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.170810][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.198331][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.225256][ T2924] bridge_slave_1: left allmulticast mode [ 119.238909][ T2924] bridge_slave_1: left promiscuous mode [ 119.246839][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.866888][ T2924] bridge_slave_0: left allmulticast mode [ 120.888154][ T2924] bridge_slave_0: left promiscuous mode [ 120.894362][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.968237][ T51] Bluetooth: hci2: command tx timeout [ 120.994576][ T2924] veth1_macvtap: left promiscuous mode [ 121.020190][ T2924] veth0_macvtap: left promiscuous mode [ 121.026076][ T2924] veth1_vlan: left promiscuous mode [ 121.072052][ T2924] veth0_vlan: left promiscuous mode [ 121.612203][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 122.330007][ T6062] loop0: detected capacity change from 0 to 64 [ 122.783810][ T6068] loop1: detected capacity change from 0 to 2048 [ 122.874662][ T6068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.872672][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 127.933359][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 127.993477][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.056216][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.545145][ T2924] bond0 (unregistering): Released all slaves [ 128.668275][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.712901][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 128.724243][ T6069] tipc: Enabling of bearer rejected, failed to enable media [ 128.958187][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 128.976213][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.609961][ T5916] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.621853][ T5916] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.646048][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.646147][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.668776][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 130.696359][ T5980] bridge_slave_0: entered allmulticast mode [ 130.742086][ T5980] bridge_slave_0: entered promiscuous mode [ 130.759492][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.774016][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.788292][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.805155][ T5980] bridge_slave_1: entered allmulticast mode [ 130.816513][ T5916] usb 2-1: config 0 descriptor?? [ 130.824450][ T5980] bridge_slave_1: entered promiscuous mode [ 131.068476][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.107683][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.857443][ T5980] team0: Port device team_slave_0 added [ 131.889129][ T5980] team0: Port device team_slave_1 added [ 131.994654][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 132.003269][ T5916] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.031277][ T5916] usb 2-1: USB disconnect, device number 4 [ 132.131260][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.165683][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.213898][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.232708][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.252243][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.286637][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.471988][ T5980] hsr_slave_0: entered promiscuous mode [ 132.489255][ T5980] hsr_slave_1: entered promiscuous mode [ 132.548741][ T6111] syz.3.55 (6111) used greatest stack depth: 20824 bytes left [ 132.931044][ T6127] capability: warning: `syz.0.54' uses deprecated v2 capabilities in a way that may be insecure [ 132.996341][ T6123] syzkaller0: entered promiscuous mode [ 133.010755][ T6123] syzkaller0: entered allmulticast mode [ 133.054171][ T6123] tipc: Started in network mode [ 133.066035][ T6123] tipc: Node identity d6c2eace011e, cluster identity 4711 [ 133.097034][ T6123] tipc: Enabled bearer , priority 0 [ 133.130122][ T6121] tipc: Resetting bearer [ 133.234097][ T6121] tipc: Disabling bearer [ 133.462743][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.478184][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.790286][ T5980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.885273][ T5980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.910656][ T5980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.961323][ T5980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.158259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 137.568263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 138.090085][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.927939][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.014589][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.021878][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.081366][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.091268][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.231684][ T6153] tipc: Started in network mode [ 139.236860][ T6153] tipc: Node identity b66706d1a4b7, cluster identity 4711 [ 139.255899][ T6153] tipc: Enabled bearer , priority 0 [ 139.293744][ T6153] syzkaller0: entered promiscuous mode [ 139.302897][ T6153] syzkaller0: entered allmulticast mode [ 139.444885][ T6153] tipc: Resetting bearer [ 139.518439][ T6152] tipc: Resetting bearer [ 139.628380][ T6152] tipc: Disabling bearer [ 140.100424][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.125675][ T5917] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 141.692692][ T5917] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 141.710559][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.731070][ T5917] usb 2-1: config 0 descriptor?? [ 141.741480][ T5917] pwc: Samsung MPC-C10 USB webcam detected. [ 142.997471][ T6200] vlan2: entered promiscuous mode [ 143.018881][ T6200] syz_tun: entered promiscuous mode [ 143.111687][ T5980] veth0_vlan: entered promiscuous mode [ 143.155984][ T6197] vlan2: left promiscuous mode [ 143.166490][ T6197] syz_tun: left promiscuous mode [ 143.231304][ T5980] veth1_vlan: entered promiscuous mode [ 143.418419][ T5980] veth0_macvtap: entered promiscuous mode [ 143.474130][ T5980] veth1_macvtap: entered promiscuous mode [ 143.478074][ C0] sched: RT throttling activated [ 143.478246][ T5917] pwc: send_video_command error -71 [ 143.497434][ T5917] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 143.505380][ T5917] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 143.596365][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.657142][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.714355][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.758951][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.823928][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.896514][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.958629][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.976658][ T5917] usb 2-1: USB disconnect, device number 5 [ 144.046947][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.093674][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.251334][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.293914][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.327531][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.342063][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.353916][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.366438][ T5980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.375508][ T5980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.388317][ T5980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.397298][ T5980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.100369][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.301149][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.362564][ T6227] syzkaller0: entered promiscuous mode [ 148.369393][ T6227] syzkaller0: entered allmulticast mode [ 149.509210][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.517361][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.147464][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.157556][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.175763][ T6242] bridge0: entered allmulticast mode [ 154.212971][ T6245] bridge_slave_1: left allmulticast mode [ 154.220067][ T6245] bridge_slave_1: left promiscuous mode [ 154.226831][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.251787][ T6245] bridge_slave_0: left allmulticast mode [ 154.257542][ T6245] bridge_slave_0: left promiscuous mode [ 154.265040][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.396024][ T6265] tipc: Cannot configure node identity twice [ 154.888483][ T6228] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.798854][ T6228] usb 2-1: Using ep0 maxpacket: 16 [ 155.823349][ T6228] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.845860][ T6228] usb 2-1: config 0 has no interface number 0 [ 155.855025][ T6228] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.886251][ T6228] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.895848][ T6228] usb 2-1: string descriptor 0 read error: -71 [ 158.198537][ T6228] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.329955][ T6228] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.373203][ T6228] usb 2-1: config 0 descriptor?? [ 159.436921][ T6228] usb 2-1: can't set config #0, error -71 [ 159.858906][ T6228] usb 2-1: USB disconnect, device number 6 [ 160.151245][ T6309] loop3: detected capacity change from 0 to 512 [ 160.225792][ T6309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.476657][ T6306] loop1: detected capacity change from 0 to 256 [ 161.260504][ T6309] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 161.308253][ T6309] EXT4-fs (loop3): 1 truncate cleaned up [ 161.319616][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.971557][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.124182][ T6330] loop3: detected capacity change from 0 to 256 [ 162.250826][ T6330] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 162.649149][ T6228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.185301][ T6228] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 163.236972][ T6228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 163.330160][ T6228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 163.431730][ T6228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.508344][ T6228] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.567263][ T6228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.318448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 165.582448][ T6228] usb 4-1: config 0 descriptor?? [ 165.727158][ T6354] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 165.939353][ T6228] usb 4-1: can't set config #0, error -71 [ 166.054164][ T6228] usb 4-1: USB disconnect, device number 3 [ 166.155439][ T6357] Zero length message leads to an empty skb [ 167.227329][ T6373] ntfs3: nullb0: Primary boot signature is not NTFS. [ 167.241752][ T6373] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 168.173149][ T6398] Bluetooth: MGMT ver 1.22 [ 176.998904][ T6445] bridge0: entered promiscuous mode [ 177.005443][ T6445] vlan2: entered promiscuous mode [ 177.366020][ T6456] loop3: detected capacity change from 0 to 1024 [ 177.586526][ T6460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 177.748440][ T6456] syz.3.118: attempt to access beyond end of device [ 177.748440][ T6456] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 177.773055][ T6456] Buffer I/O error on dev loop3, logical block 2889, async page read [ 177.858231][ T6455] syz.3.118: attempt to access beyond end of device [ 177.858231][ T6455] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 177.944151][ T6455] Buffer I/O error on dev loop3, logical block 2889, async page read [ 177.981121][ T6456] syz.3.118: attempt to access beyond end of device [ 177.981121][ T6456] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.032228][ T6456] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.064647][ T6456] syz.3.118: attempt to access beyond end of device [ 178.064647][ T6456] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.148550][ T6456] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.157007][ T6455] syz.3.118: attempt to access beyond end of device [ 178.157007][ T6455] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.193154][ T6469] loop1: detected capacity change from 0 to 512 [ 178.202519][ T6455] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.227790][ T6469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 178.249944][ T6461] syz.3.118: attempt to access beyond end of device [ 178.249944][ T6461] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.274405][ T6469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.320251][ T6461] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.361371][ T6469] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.120: bad orphan inode 131083 [ 178.378540][ T6461] syz.3.118: attempt to access beyond end of device [ 178.378540][ T6461] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.421808][ T6469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.468402][ T6461] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.490797][ T6455] syz.3.118: attempt to access beyond end of device [ 178.490797][ T6455] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.513734][ T6477] loop4: detected capacity change from 0 to 512 [ 178.527931][ T6477] ext4: Unknown parameter 'euid<18446744073709551615' [ 178.558008][ T6455] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.587359][ T6455] syz.3.118: attempt to access beyond end of device [ 178.587359][ T6455] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.627760][ T6455] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.688291][ T6456] syz.3.118: attempt to access beyond end of device [ 178.688291][ T6456] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 178.759355][ T6456] Buffer I/O error on dev loop3, logical block 2889, async page read [ 178.885497][ T6461] hfsplus: request for non-existent node 1280 in B*Tree [ 178.900717][ T6485] loop4: detected capacity change from 0 to 128 [ 178.938257][ T6461] hfsplus: request for non-existent node 1280 in B*Tree [ 178.955898][ T6485] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.004020][ T6485] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.038807][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.110129][ T6485] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.338306][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.129991][ T5980] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.218536][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 180.235173][ T5916] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 180.263692][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.337608][ T5916] usb 1-1: config 0 descriptor?? [ 180.361476][ T5916] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 180.838025][ C0] hrtimer: interrupt took 31260 ns [ 181.613312][ T6511] syzkaller0: entered promiscuous mode [ 181.633567][ T6511] syzkaller0: entered allmulticast mode [ 182.671177][ T6527] loop3: detected capacity change from 0 to 1024 [ 182.682653][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.127759][ T5916] gspca_vc032x: reg_w err -71 [ 184.156518][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.188116][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.224476][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.231863][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.272531][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.305441][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.336103][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.356044][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.388695][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.394440][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.416883][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.431439][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.448281][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.454369][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.468120][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.481463][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.508263][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.519161][ T5916] gspca_vc032x: Unknown sensor... [ 184.538879][ T5916] vc032x: probe of 1-1:0.0 failed with error -22 [ 184.589284][ T5916] usb 1-1: USB disconnect, device number 2 [ 184.890183][ T6545] kvm: kvm [6543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x93e8 [ 184.961857][ T6545] kvm: kvm [6543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5b8 [ 185.000978][ T6545] kvm: kvm [6543]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 190.945164][ T6609] bio_check_eod: 1942 callbacks suppressed [ 190.945219][ T6609] syz.3.144: attempt to access beyond end of device [ 190.945219][ T6609] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 190.966238][ T6609] hfsplus: unable to find HFS+ superblock [ 191.936285][ T6616] loop0: detected capacity change from 0 to 2049 [ 191.998293][ T6616] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 192.018328][ T6616] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 192.020785][ T6619] syzkaller0: entered promiscuous mode [ 192.036780][ T6616] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 192.042711][ T6619] syzkaller0: entered allmulticast mode [ 192.049484][ T6616] loop0: [ 192.060863][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc56c00: rx timeout, send abort [ 192.081036][ T5144] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 192.117589][ T5144] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 192.148236][ T5144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 192.158868][ T5144] loop0: [ 192.350117][ T6626] loop0: detected capacity change from 0 to 256 [ 192.561013][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cfd4400: rx timeout, send abort [ 192.570796][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc56c00: abort rx timeout. Force session deactivation [ 193.070061][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cfd4400: abort rx timeout. Force session deactivation [ 195.228770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.235471][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.930448][ T6657] syz.3.155 uses obsolete (PF_INET,SOCK_PACKET) [ 198.783189][ T6661] loop0: detected capacity change from 0 to 512 [ 198.832834][ T6661] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 201.828867][ T6681] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 201.959892][ T6686] binder: 6685:6686 unknown command 0 [ 201.978086][ T6686] binder: 6685:6686 ioctl c0306201 2000000001c0 returned -22 [ 202.848466][ T6701] binder_alloc: 6700: pid 6700 spamming oneway? 2 buffers allocated for a total size of 5120 [ 203.037891][ T6704] binder_alloc: 6700: pid 6700 spamming oneway? 3 buffers allocated for a total size of 5128 [ 203.576365][ T6712] syzkaller0: entered promiscuous mode [ 203.617999][ T6712] syzkaller0: entered allmulticast mode [ 203.675148][ T6708] syzkaller0: entered promiscuous mode [ 203.696244][ T6708] syzkaller0: entered allmulticast mode [ 204.472064][ T6732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.216294][ T6739] loop0: detected capacity change from 0 to 2048 [ 206.342353][ T6739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.370606][ T6739] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.476112][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 207.486502][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 207.486525][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 207.632083][ T6739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.662427][ T6748] loop3: detected capacity change from 0 to 4096 [ 208.206822][ T6769] loop1: detected capacity change from 0 to 512 [ 208.270875][ T6748] EXT4-fs (loop3): Test dummy encryption mode enabled [ 208.506215][ T6748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.475082][ T6786] jffs2: notice: (6786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.592600][ T6786] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 210.693685][ T6781] fscrypt (loop3): Error allocating 'xts(aes)' transform: -4 [ 210.838504][ T6799] syzkaller0: entered promiscuous mode [ 210.852708][ T6799] syzkaller0: entered allmulticast mode [ 210.929873][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.408189][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 211.608145][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 211.630798][ T28] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 211.660383][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 211.671401][ T28] usb 5-1: config 0 has no interface number 0 [ 211.706324][ T28] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 211.735124][ T28] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 211.781448][ T28] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 211.798195][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.816661][ T28] usb 5-1: Product: syz [ 211.821560][ T28] usb 5-1: Manufacturer: syz [ 211.826441][ T28] usb 5-1: SerialNumber: syz [ 211.859376][ T28] usb 5-1: config 0 descriptor?? [ 211.877038][ T6806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.887865][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.900339][ T6806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.908187][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.929596][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.947175][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.956138][ T23] usb 4-1: Product: syz [ 211.964053][ T23] usb 4-1: Manufacturer: syz [ 211.978161][ T23] usb 4-1: SerialNumber: syz [ 212.164928][ T6806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.206304][ T6806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.297613][ T23] usb 4-1: 0:2 : does not exist [ 212.334842][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 212.435038][ T23] usb 4-1: USB disconnect, device number 4 [ 212.445511][ T28] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 212.533827][ T6823] udevd[6823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.326075][ T6836] loop3: detected capacity change from 0 to 1024 [ 213.349653][ T6836] EXT4-fs: Ignoring removed oldalloc option [ 213.396393][ T6836] EXT4-fs: Ignoring removed oldalloc option [ 213.428950][ T6836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.497803][ T6836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.830515][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.380302][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 216.070075][ T28] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.148426][ T28] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 216.196052][ T28] asix: probe of 5-1:0.34 failed with error -71 [ 216.248454][ T28] usb 5-1: USB disconnect, device number 2 [ 217.875943][ T6875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.434179][ T6887] team0: Device ipvlan2 failed to register rx_handler [ 219.908416][ T6873] loop1: detected capacity change from 0 to 32768 [ 237.049761][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 237.059555][ T5789] Bluetooth: hci2: Injecting HCI hardware error event [ 237.118187][ T51] Bluetooth: hci2: hardware error 0x00 [ 256.398777][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.406087][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.248002][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 338.255027][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6771/1:b..l [ 338.263498][ C0] rcu: (detected by 0, t=10502 jiffies, g=21613, q=165 ncpus=2) [ 338.271262][ C0] task:syz.0.176 state:R running task stack:23208 pid:6771 ppid:5778 flags:0x00004002 [ 338.283837][ C0] Call Trace: [ 338.287747][ C0] [ 338.290732][ C0] __schedule+0x15ae/0x4660 [ 338.295636][ C0] ? deref_stack_reg+0x1ab/0x230 [ 338.301017][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 338.306568][ C0] ? mark_lock+0x94/0x320 [ 338.311129][ C0] ? asan.module_dtor+0x20/0x20 [ 338.316283][ C0] ? __lock_acquire+0x1336/0x7d80 [ 338.321438][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.327552][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 338.333145][ C0] preempt_schedule_irq+0xbf/0x150 [ 338.338495][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 338.344423][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 338.350912][ C0] irqentry_exit+0x67/0x70 [ 338.355396][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.361874][ C0] RIP: 0010:stack_trace_consume_entry+0x12e/0x270 [ 338.368423][ C0] Code: 69 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 2f 01 00 00 41 3b 1e 0f 92 c0 48 83 c4 18 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 44 89 c1 80 e1 07 80 c1 03 38 c1 0f [ 338.388250][ C0] RSP: 0018:ffffc9000bd06ef8 EFLAGS: 00000296 [ 338.394378][ C0] RAX: 0000000000000001 RBX: ffffc9000bd06fe0 RCX: ffff888027fa5a00 [ 338.402663][ C0] RDX: dffffc0000000000 RSI: ffffffff81524eed RDI: ffffc9000bd06fe0 [ 338.411583][ C0] RBP: 1ffff920017a0dfe R08: ffffc9000bd06ff0 R09: 000000000000000d [ 338.419693][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 338.427710][ C0] R13: 1ffff920017a0dfd R14: ffffc9000bd06fe8 R15: ffffc9000bd07108 [ 338.435728][ C0] ? do_group_exit+0x22d/0x2f0 [ 338.440899][ C0] ? do_group_exit+0x22d/0x2f0 [ 338.445894][ C0] ? stack_trace_save+0x100/0x100 [ 338.451494][ C0] arch_stack_walk+0x138/0x190 [ 338.456342][ C0] ? do_group_exit+0x22d/0x2f0 [ 338.461177][ C0] stack_trace_save+0xaa/0x100 [ 338.466271][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 338.471540][ C0] save_stack+0x125/0x230 [ 338.476355][ C0] ? __reset_page_owner+0x190/0x190 [ 338.481696][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 338.487472][ C0] ? free_unref_page_list+0xbe/0x860 [ 338.492893][ C0] ? release_pages+0x208a/0x2300 [ 338.497893][ C0] ? __folio_batch_release+0x71/0xe0 [ 338.503930][ C0] ? shmem_undo_range+0x5ff/0x1a80 [ 338.509182][ C0] ? shmem_evict_inode+0x285/0xa70 [ 338.514964][ C0] ? evict+0x4b7/0x8a0 [ 338.519118][ C0] ? __dentry_kill+0x412/0x630 [ 338.524082][ C0] ? dentry_kill+0xb8/0x290 [ 338.528628][ C0] ? dput+0xfe/0x1e0 [ 338.532652][ C0] ? __fput+0x5b2/0x940 [ 338.538878][ C0] ? task_work_run+0x1d4/0x260 [ 338.543740][ C0] ? do_exit+0x986/0x2530 [ 338.548223][ C0] ? do_group_exit+0x22d/0x2f0 [ 338.553231][ C0] ? page_ext_get+0x22/0x2b0 [ 338.559301][ C0] ? page_ext_get+0x1e2/0x2b0 [ 338.564227][ C0] __reset_page_owner+0x4e/0x190 [ 338.569592][ C0] ? rcu_is_watching+0x15/0xb0 [ 338.574509][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 338.580299][ C0] free_unref_page_list+0xbe/0x860 [ 338.585479][ C0] ? __folio_memcg+0x63/0x170 [ 338.590384][ C0] ? folio_memcg+0x127/0x4a0 [ 338.595122][ C0] release_pages+0x208a/0x2300 [ 338.599965][ C0] ? lru_cache_disable+0x30/0x30 [ 338.605061][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 338.610314][ C0] __folio_batch_release+0x71/0xe0 [ 338.615570][ C0] shmem_undo_range+0x5ff/0x1a80 [ 338.620757][ C0] ? verify_lock_unused+0x140/0x140 [ 338.626047][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 338.631348][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 338.637226][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 338.642476][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 338.647585][ C0] shmem_evict_inode+0x285/0xa70 [ 338.652849][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 338.658884][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 338.664751][ C0] ? sb_clear_inode_writeback+0x330/0x330 [ 338.670641][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 338.676025][ C0] ? bit_waitqueue+0x30/0x30 [ 338.681037][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 338.686499][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 338.692553][ C0] evict+0x4b7/0x8a0 [ 338.696671][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 338.701952][ C0] ? proc_nr_inodes+0x230/0x230 [ 338.706958][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 338.712863][ C0] ? _raw_spin_unlock+0x28/0x40 [ 338.717764][ C0] __dentry_kill+0x412/0x630 [ 338.722431][ C0] dentry_kill+0xb8/0x290 [ 338.727291][ C0] ? dput+0x3b/0x1e0 [ 338.731263][ C0] dput+0xfe/0x1e0 [ 338.735058][ C0] __fput+0x5b2/0x940 [ 338.739125][ C0] task_work_run+0x1d4/0x260 [ 338.744055][ C0] ? task_work_cancel+0x220/0x220 [ 338.749333][ C0] do_exit+0x986/0x2530 [ 338.753632][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 338.758799][ C0] ? put_task_struct+0xc0/0xc0 [ 338.763635][ C0] ? lock_chain_count+0x20/0x20 [ 338.768562][ C0] do_group_exit+0x22d/0x2f0 [ 338.773393][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 338.778816][ C0] get_signal+0x12a6/0x1390 [ 338.783388][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 338.788981][ C0] ? get_sigframe_size+0x20/0x20 [ 338.793959][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.800177][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 338.805802][ C0] exit_to_user_mode_loop+0x70/0x110 [ 338.811313][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 338.816913][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 338.822771][ C0] exc_page_fault+0x8c/0x100 [ 338.827404][ C0] asm_exc_page_fault+0x26/0x30 [ 338.832286][ C0] RIP: 0033:0x7fcf4af9e161 [ 338.836731][ C0] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 338.842849][ C0] RAX: 0000000000000000 RBX: 00007fcf4b225fa0 RCX: 00007fcf4af9e159 [ 338.850870][ C0] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 338.859174][ C0] RBP: 00007fcf4b035024 R08: 0000000000000000 R09: 0000000000000000 [ 338.867384][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.875493][ C0] R13: 00007fcf4b226038 R14: 00007fcf4b225fa0 R15: 00007fff50f36ea8 [ 338.883541][ C0] [ 338.886604][ C0] rcu: rcu_preempt kthread starved for 10465 jiffies! g21613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 338.897923][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 338.907928][ C0] rcu: RCU grace-period kthread stack dump: [ 338.913970][ C0] task:rcu_preempt state:R running task stack:26504 pid:17 ppid:2 flags:0x00004000 [ 338.924884][ C0] Call Trace: [ 338.928192][ C0] [ 338.931326][ C0] __schedule+0x15ae/0x4660 [ 338.935916][ C0] ? asan.module_dtor+0x20/0x20 [ 338.940889][ C0] ? rcu_is_watching+0x15/0xb0 [ 338.945809][ C0] schedule+0xbd/0x170 [ 338.949915][ C0] schedule_timeout+0x188/0x2d0 [ 338.954829][ C0] ? console_conditional_schedule+0x40/0x40 [ 338.960759][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 338.966712][ C0] ? update_process_times+0x1b0/0x1b0 [ 338.972122][ C0] ? prepare_to_swait_event+0x344/0x360 [ 338.977715][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 338.982683][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 338.988965][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.995170][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 339.000339][ C0] ? rcu_gp_init+0x1530/0x1530 [ 339.005684][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 339.010679][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.016263][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 339.021532][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 339.026281][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 339.031540][ C0] ? __kthread_parkme+0x71/0x1c0 [ 339.036519][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 339.041593][ C0] kthread+0x2fa/0x390 [ 339.046567][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 339.051790][ C0] ? kthread_blkcg+0xd0/0xd0 [ 339.056634][ C0] ret_from_fork+0x48/0x80 [ 339.061108][ C0] ? kthread_blkcg+0xd0/0xd0 [ 339.065767][ C0] ret_from_fork_asm+0x11/0x20 [ 339.070911][ C0] [ 339.074093][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 339.080649][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 339.087892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.098784][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 339.104556][ C0] Code: d9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 a5 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 339.125266][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 339.131377][ C0] RAX: 426cfc400f118b00 RBX: ffffffff81630c41 RCX: 426cfc400f118b00 [ 339.139918][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 339.147945][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b6b R09: 1ffff110171c6d6d [ 339.155971][ C0] R10: dffffc0000000000 R11: ffffed10171c6d6e R12: 1ffffffff19c0fbc [ 339.164097][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 339.172216][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 339.181652][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.188289][ C0] CR2: 000000110c44e517 CR3: 0000000055476000 CR4: 00000000003506f0 [ 339.196410][ C0] Call Trace: [ 339.200352][ C0] [ 339.203511][ C0] default_idle+0x13/0x20 [ 339.207909][ C0] default_idle_call+0x6c/0xa0 [ 339.212724][ C0] do_idle+0x221/0x5c0 [ 339.216936][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 339.222188][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.228410][ C0] cpu_startup_entry+0x43/0x60 [ 339.233221][ C0] rest_init+0x2e2/0x300 [ 339.237549][ C0] ? time_init+0x40/0x40 [ 339.241860][ C0] arch_call_rest_init+0xe/0x10 [ 339.247033][ C0] start_kernel+0x461/0x4e0 [ 339.251606][ C0] x86_64_start_reservations+0x2a/0x30 [ 339.257122][ C0] x86_64_start_kernel+0x60/0x60 [ 339.262300][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 339.268450][ C0] [ 339.830294][ T6935] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 340.391730][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.429094][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=37832 sent=0 n=-1 (errno 32: Broken pipe) [ 341.477866][ T5776] syz-executor (5776) used greatest stack depth: 20552 bytes left [ 341.765193][ T2924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.976850][ T2924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.275830][ T2924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.383582][ T2924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.604035][ T2924] tipc: Left network mode [ 342.808155][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 343.735166][ T2924] hsr_slave_0: left promiscuous mode [ 343.742643][ T2924] hsr_slave_1: left promiscuous mode [ 343.750370][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.757854][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.767580][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.783324][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.824505][ T2924] veth1_macvtap: left promiscuous mode [ 343.830643][ T2924] veth0_macvtap: left promiscuous mode [ 343.836362][ T2924] veth1_vlan: left promiscuous mode [ 343.842578][ T2924] veth0_vlan: left promiscuous mode [ 344.670951][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 344.726899][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 344.776943][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.829919][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.213472][ T2924] bond0 (unregistering): Released all slaves [ 345.675457][ T2924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.801224][ T2924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.875140][ T2924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.941580][ T2924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.190250][ T2924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.292565][ T2924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.382726][ T2924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.463652][ T2924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.701420][ T2924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.785007][ T2924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.864830][ T2924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.948856][ T2924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.160574][ T2924] tipc: Left network mode