last executing test programs: 4m7.898666776s ago: executing program 2 (id=3): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, 0x0}, 0x10) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 4m4.598749235s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/195, 0xc3, 0x591f) prlimit64(r3, 0xb, &(0x7f00000003c0)={0x57f, 0x4}, &(0x7f0000000400)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000880)={0x137, @time={0x65757100, 0x316575}}) 3m48.512622032s ago: executing program 32 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/195, 0xc3, 0x591f) prlimit64(r3, 0xb, &(0x7f00000003c0)={0x57f, 0x4}, &(0x7f0000000400)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000880)={0x137, @time={0x65757100, 0x316575}}) 3m14.906776688s ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x13, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r9 = accept4$alg(r8, 0x0, 0x0, 0x80000) sendmmsg$alg(r9, &(0x7f0000000280), 0x16, 0x4013) io_submit(0x0, 0x0, 0x0) 3m10.650874814s ago: executing program 0 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000367000/0x4000)=nil, 0x4000, 0x1) r1 = gettid() fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x1}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019980)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000019340)={0xa, 0xe22, 0x1, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019480)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x270, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x398, 0x3a8, 0x3a8, 0x398, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, [0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'vlan1\x00', 'pim6reg\x00', {}, {}, 0x0, 0xfd, 0x0, 0x19}, 0x0, 0x248, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x8, 0x103, 0x33, 0x6, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @common=@dst={{0x48}, {0x3, 0x6, 0x0, [0x10, 0x0, 0xac, 0x9, 0x0, 0x8, 0xd6, 0x4, 0x2, 0x212, 0x6, 0x8b, 0x48, 0x8, 0xa, 0x1]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0xf7, 0x1}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x1c, 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') getdents64(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000000fddbdf250a800000010300061100000014000100ff"], 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 2m59.848132753s ago: executing program 0 (id=71): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002d8cecd78d41d306e0f4d70f9d54c0a0bba4acfc7b06a334181e30a41a3980de60c239dac049c6b4b7e955eed22a45b24e4023082951367f4e5948af31e5768e203e18bd2d405ba91017a3976f7698cf467edde3ef70ff6fe218d392c8388b2fc175f5fb76eb10010776b84ee433bbfcbb119c8577eeecc10855fce36545919196746bde69d66c85f67eced7aec0167a242394301d7a4cf9b5b49b874095cb0f01d03687414e3b8d9bf1de934b05a18b5d7c3fcbeef4ac06a33eb008fe0ec90cdbbf98d7b27090c45517574032"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1a7) r4 = open$dir(&(0x7f00000006c0)='./mnt\x00', 0x0, 0x2) renameat2(r4, &(0x7f0000000700)='./dev\x00', r4, &(0x7f0000000740)='./mnt\x00', 0x4) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x80000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 2m55.536043637s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x400200, 0x0) fgetxattr(r4, &(0x7f0000000ac0)=@known='system.sockprotoname\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x0, 0x0, &(0x7f0000000440), 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80042, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000e80)=@newqdisc={0x26c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff1, 0x10}, {0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4a0171a5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xb0, 0x1, 0x7, 0x2, 0x8, 0x9}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0xfd}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0xfff0, 0x200, 0x1, 0x5f, 0x9, 0x8}}, {0x14, 0x2, [0xfffb, 0x5, 0x8, 0x4, 0x7, 0x1879, 0x6, 0x1]}}, {{0x1c, 0x1, {0x2, 0x3, 0xfffc, 0xb5, 0x2, 0x4, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8c, 0x5, 0x6, 0x5, 0x0, 0x9, 0xa3b4, 0x7}}, {0x12, 0x2, [0x4, 0x4, 0x4021, 0x4, 0x9, 0x6, 0x9]}}, {{0x1c, 0x1, {0x4, 0xe3, 0x4, 0x5, 0x0, 0x6, 0x800009, 0x5}}, {0xe, 0x2, [0x4, 0x4, 0x6, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x0, 0xfffe, 0x8000, 0x0, 0x7, 0x5, 0xa}}, {0x18, 0x2, [0x1, 0x7fff, 0x4, 0x9, 0xde8e, 0x0, 0x4, 0x1c00, 0x5, 0x3]}}, {{0x1c, 0x1, {0xf8, 0x9, 0xf98, 0xa, 0x1, 0x2, 0x8546, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xe, 0x4, 0x6, 0xfff, 0x2, 0x6, 0x4, 0x8}}, {0x14, 0x2, [0xd9db, 0x81, 0x5, 0xbd56, 0x70, 0x2, 0x5, 0x80]}}, {{0x1c, 0x1, {0x0, 0xd, 0x3, 0x1ff, 0x2, 0x9, 0x8, 0x8}}, {0x14, 0x2, [0x7d6, 0x1, 0x200, 0x2, 0xc, 0x6, 0xa, 0x5a]}}, {{0x1c, 0x1, {0x4, 0x4, 0xa, 0x2, 0x0, 0x91, 0xffff, 0x6}}, {0x10, 0x2, [0xfffe, 0x6, 0x6a, 0x9, 0x2, 0x1000]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x3, 0x9c, 0xfffffff5, 0x0, 0x5, 0x200, 0x2}}, {0x8, 0x2, [0xcc, 0x2]}}, {{0x1c, 0x1, {0xf, 0x7, 0x8, 0x5, 0x2, 0x8, 0x7f, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x9, 0x4, 0x0, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x14, 0x8, 0xffdf, 0x3]}}]}]}, 0x26c}}, 0x0) 2m51.965628252s ago: executing program 0 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0xfffffffe) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000010280)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000000406010400000000000000000a000009090002006a797a30000000000500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a31000000000900020073797a300000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x501802, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\"lgo=z\"', 0x7) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x1000) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0xa0e, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) bind$packet(r7, &(0x7f0000000440)={0x11, 0x10, 0x0, 0x1, 0x9, 0x6, @random="c36765a70e33"}, 0x14) 2m51.646024038s ago: executing program 0 (id=78): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x100000, 0x800, 0x9}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{0x0, 0x10}], 0x1}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)=0x1) r5 = syz_open_pts(r4, 0x8000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x1) 2m34.423859535s ago: executing program 33 (id=78): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x100000, 0x800, 0x9}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{0x0, 0x10}], 0x1}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)=0x1) r5 = syz_open_pts(r4, 0x8000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x1) 8.307943079s ago: executing program 1 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@random="d2bc9af507df", @local, @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x3, 0x7, 0x24, 0x65, 0x4, 0x33, 0x21, 0x0, @loopback, @private=0xa010102}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x4, "2a768f", 0xb, "f6f716"}}}}}}}, 0x0) 7.302472282s ago: executing program 1 (id=407): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="39b5903e6251964922c666d4692a", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 6.681517569s ago: executing program 1 (id=409): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(0x0, 0x0) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) 6.579175571s ago: executing program 3 (id=410): socket(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000640), 0x1, 0x2) inotify_init1(0x80000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x100000000007f, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0x5, 0x0, 0xfffffffffffff2eb, 0x2000000000003ff, 0x2, 0x0, 0x400000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.007639325s ago: executing program 4 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x400200, 0x0) fgetxattr(r4, &(0x7f0000000ac0)=@known='system.sockprotoname\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x0, 0x0, &(0x7f0000000440), 0x10000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0x10}, {0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x2ff}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x83b}]}}]}, 0x5c}}, 0x0) 5.122486645s ago: executing program 3 (id=413): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) syz_emit_vhci(0x0, 0x0) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) 4.759606177s ago: executing program 4 (id=414): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800001, 0x1010, 0xffffffffffffffff, 0x91416000) setsockopt(0xffffffffffffffff, 0x5, 0x4, &(0x7f0000000500), 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, 0x0) 4.759075558s ago: executing program 1 (id=415): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.436989923s ago: executing program 1 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config/nvmet/ports/1/addr_adrfam\x00', &(0x7f00000001c0)='anon_inodefs\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, 0x0, 0x0) 3.242858334s ago: executing program 1 (id=417): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000e00)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) futex(0x0, 0xd, 0x4, 0x0, 0x0, 0x1) 2.929467986s ago: executing program 4 (id=418): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000110000d2328bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.853889859s ago: executing program 3 (id=419): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0), 0x0}) 2.178172554s ago: executing program 4 (id=420): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r1) 1.375927201s ago: executing program 3 (id=421): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x55d, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000100, 0x0) 1.213983216s ago: executing program 4 (id=422): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000280)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000003c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.198459241s ago: executing program 3 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x400200, 0x0) fgetxattr(r4, &(0x7f0000000ac0)=@known='system.sockprotoname\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x0, 0x0, &(0x7f0000000440), 0x10000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0x10}, {0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x2ff}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x83b}]}}]}, 0x5c}}, 0x0) 71.565027ms ago: executing program 3 (id=424): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ff"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) 0s ago: executing program 4 (id=425): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x1, 0x802) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 97.402127][ T37] cfg80211: failed to load regulatory.db [ 97.425188][ T5572] cgroup: Unknown subsys name 'net' [ 97.673061][ T5572] cgroup: Unknown subsys name 'cpuset' [ 97.716888][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.879113][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.760008][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.791187][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.837810][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.860039][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.872553][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.889060][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.890566][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.914999][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.916394][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.920069][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.921817][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.925761][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.928974][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.938340][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.941376][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.954140][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.959884][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.961554][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.963254][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.000612][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.000765][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.044162][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.056806][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.058475][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.085745][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.587631][ T5585] rdma_rxe: Failed to create IPv4 UDP tunnel [ 104.590615][ T5584] rdma_rxe: Failed to create IPv4 UDP tunnel [ 104.621990][ T5582] rdma_rxe: Failed to create IPv6 UDP tunnel [ 104.679009][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.685975][ T5583] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 104.704348][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.745469][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.080036][ T5588] Bluetooth: hci4: command tx timeout [ 105.236851][ T5588] Bluetooth: hci0: command tx timeout [ 105.319288][ T5597] Bluetooth: hci2: command tx timeout [ 105.323145][ T5588] Bluetooth: hci1: command tx timeout [ 105.398288][ T5588] Bluetooth: hci3: command tx timeout [ 105.586679][ T5586] infiniband rxe0: set active [ 105.586706][ T5586] infiniband rxe0: added rxe_eth0 [ 105.635842][ T5586] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 105.635894][ T5586] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 105.635939][ T5586] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 105.727808][ T198] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.804816][ T5586] RDS/IB: rxe0: added [ 105.805434][ T5586] smc: adding ib device rxe0 with port count 1 [ 105.805569][ T5586] smc: ib device rxe0 port 1 has no pnetid [ 105.902775][ T198] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.965423][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.075819][ T37] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.499247][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.157681][ T5588] Bluetooth: hci4: command tx timeout [ 107.164678][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.316199][ T5588] Bluetooth: hci0: command tx timeout [ 107.396197][ T5588] Bluetooth: hci1: command tx timeout [ 107.396234][ T5597] Bluetooth: hci2: command tx timeout [ 107.476236][ T5597] Bluetooth: hci3: command tx timeout [ 107.597566][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.693347][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.695190][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.712276][ T5585] bridge_slave_0: entered allmulticast mode [ 107.726140][ T5585] bridge_slave_0: entered promiscuous mode [ 107.771625][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.771833][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.771997][ T5582] bridge_slave_0: entered allmulticast mode [ 107.775858][ T5582] bridge_slave_0: entered promiscuous mode [ 107.844676][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.844842][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.845033][ T5585] bridge_slave_1: entered allmulticast mode [ 107.870707][ T5585] bridge_slave_1: entered promiscuous mode [ 107.911710][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.911913][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.912077][ T5582] bridge_slave_1: entered allmulticast mode [ 107.937881][ T5582] bridge_slave_1: entered promiscuous mode [ 107.998933][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.999066][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.002098][ T5584] bridge_slave_0: entered allmulticast mode [ 108.008334][ T5584] bridge_slave_0: entered promiscuous mode [ 108.072573][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.072694][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.072879][ T5583] bridge_slave_0: entered allmulticast mode [ 108.078396][ T5583] bridge_slave_0: entered promiscuous mode [ 108.123906][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.124036][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.124219][ T5584] bridge_slave_1: entered allmulticast mode [ 108.129009][ T5584] bridge_slave_1: entered promiscuous mode [ 108.168783][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.168913][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.169082][ T5583] bridge_slave_1: entered allmulticast mode [ 108.171299][ T5583] bridge_slave_1: entered promiscuous mode [ 108.214803][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.247183][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.271972][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.309549][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.368031][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.403593][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.430877][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.448258][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.493284][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.499851][ T5585] team0: Port device team_slave_0 added [ 108.550095][ T5582] team0: Port device team_slave_0 added [ 108.582647][ T5585] team0: Port device team_slave_1 added [ 108.623444][ T5582] team0: Port device team_slave_1 added [ 108.691875][ T5584] team0: Port device team_slave_0 added [ 108.759505][ T5583] team0: Port device team_slave_0 added [ 108.763818][ T5584] team0: Port device team_slave_1 added [ 109.129059][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.129078][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.129109][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.133391][ T5583] team0: Port device team_slave_1 added [ 109.188496][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.188522][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.188542][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.195559][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.195583][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.195604][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.239415][ T5597] Bluetooth: hci4: command tx timeout [ 109.315816][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.315836][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.315867][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.385316][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.385341][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.385371][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.396896][ T5597] Bluetooth: hci0: command tx timeout [ 109.453742][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.453770][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.453790][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.455120][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.455137][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.455168][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.484130][ T5597] Bluetooth: hci1: command tx timeout [ 109.486185][ T5597] Bluetooth: hci2: command tx timeout [ 109.530136][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.530198][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.530280][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.568366][ T5597] Bluetooth: hci3: command tx timeout [ 109.739318][ T5585] hsr_slave_0: entered promiscuous mode [ 109.740507][ T5585] hsr_slave_1: entered promiscuous mode [ 109.759778][ T5582] hsr_slave_0: entered promiscuous mode [ 109.760931][ T5582] hsr_slave_1: entered promiscuous mode [ 109.762310][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 109.762547][ T5582] Cannot create hsr debugfs directory [ 109.881066][ T5584] hsr_slave_0: entered promiscuous mode [ 109.882123][ T5584] hsr_slave_1: entered promiscuous mode [ 109.882838][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 109.882868][ T5584] Cannot create hsr debugfs directory [ 109.938202][ T5583] hsr_slave_0: entered promiscuous mode [ 109.939228][ T5583] hsr_slave_1: entered promiscuous mode [ 109.940251][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 109.940285][ T5583] Cannot create hsr debugfs directory [ 111.020254][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.020474][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.020650][ T5586] bridge_slave_0: entered allmulticast mode [ 111.023141][ T5586] bridge_slave_0: entered promiscuous mode [ 111.062120][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.062733][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.063332][ T5586] bridge_slave_1: entered allmulticast mode [ 111.065916][ T5586] bridge_slave_1: entered promiscuous mode [ 111.123838][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.175052][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.205992][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.244665][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.256531][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.259004][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.287146][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.290656][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.317064][ T5597] Bluetooth: hci4: command tx timeout [ 111.338653][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.361526][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.448401][ T5586] team0: Port device team_slave_0 added [ 111.459006][ T5586] team0: Port device team_slave_1 added [ 111.476740][ T5597] Bluetooth: hci0: command tx timeout [ 111.557448][ T5597] Bluetooth: hci2: command tx timeout [ 111.557489][ T5597] Bluetooth: hci1: command tx timeout [ 111.587282][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.587309][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.587330][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.592997][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.593014][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.593038][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.638455][ T5588] Bluetooth: hci3: command tx timeout [ 111.739364][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.775841][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.791898][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.832615][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.856302][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.882061][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.932560][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.954380][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.011319][ T5586] hsr_slave_0: entered promiscuous mode [ 112.012368][ T5586] hsr_slave_1: entered promiscuous mode [ 112.013102][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 112.013133][ T5586] Cannot create hsr debugfs directory [ 112.417696][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.461492][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.484414][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.520784][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.555454][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.589858][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.630967][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.663315][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.929091][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.962386][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.973816][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.012403][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.028415][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.051931][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.101246][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.130568][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.310587][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.349280][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.390573][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.410651][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.441765][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.458906][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.502228][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.515472][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.542239][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.623521][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.673560][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.711787][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.711967][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.790990][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.791169][ T3398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.875569][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.949663][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.954608][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.954774][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.041628][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.041752][ T3398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.128486][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.194140][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.194306][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.242006][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.304845][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.305056][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.453502][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.542717][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.542943][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.562955][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.641484][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.641673][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.808363][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.877155][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.877353][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.994160][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.994386][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.541425][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.077900][ T31] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.295280][ T5585] veth0_vlan: entered promiscuous mode [ 116.444540][ T5585] veth1_vlan: entered promiscuous mode [ 116.605532][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.630964][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.020414][ T5585] veth0_macvtap: entered promiscuous mode [ 117.159293][ T5585] veth1_macvtap: entered promiscuous mode [ 117.222042][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.500302][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.554837][ T5584] veth0_vlan: entered promiscuous mode [ 117.630751][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.758098][ T5584] veth1_vlan: entered promiscuous mode [ 117.821801][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.124511][ T5582] veth0_vlan: entered promiscuous mode [ 118.363178][ T5582] veth1_vlan: entered promiscuous mode [ 118.389365][ T5584] veth0_macvtap: entered promiscuous mode [ 118.408661][ T5583] veth0_vlan: entered promiscuous mode [ 118.430281][ T5584] veth1_macvtap: entered promiscuous mode [ 118.496851][ T5583] veth1_vlan: entered promiscuous mode [ 118.581399][ T5586] veth0_vlan: entered promiscuous mode [ 118.640243][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.662047][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.662082][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.722109][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.774261][ T5586] veth1_vlan: entered promiscuous mode [ 118.811625][ T5582] veth0_macvtap: entered promiscuous mode [ 118.862893][ T5582] veth1_macvtap: entered promiscuous mode [ 118.867522][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.867578][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.941966][ T5583] veth0_macvtap: entered promiscuous mode [ 119.034903][ T5583] veth1_macvtap: entered promiscuous mode [ 119.120623][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.370074][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.541608][ T5585] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 119.623582][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.624273][ T5586] veth0_macvtap: entered promiscuous mode [ 119.656504][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.656528][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.729883][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.742589][ T5586] veth1_macvtap: entered promiscuous mode [ 119.802571][ T5811] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 119.979382][ T3398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.979409][ T3398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.312447][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.503440][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.699398][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.699425][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.857434][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.542816][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.542839][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.964435][ T1185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.035002][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.035034][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.100194][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.696140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.716143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.726132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.736135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.746131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.756152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.766134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.776150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.786139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.796134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.130197][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.130223][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.297524][ T1185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.297885][ T1185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.298321][ T1185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.354854][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.354877][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.396319][ T1185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.400973][ T1025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.401231][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.401770][ T1025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.519130][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.519952][ T1025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.520179][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.901322][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.901347][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.026509][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.312591][ T3399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.312896][ T1185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.313094][ T1185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.487804][ T1185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.488486][ T1185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.631043][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.631493][ T1185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.751072][ T5737] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.286219][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 128.290294][ T5737] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.366294][ T5737] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 128.366365][ T5737] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.366393][ T5737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.366421][ T5737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.366449][ T5737] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.366499][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.066811][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.294927][ T5737] usb 1-1: can't set config #16, error -71 [ 130.652392][ T5737] usb 1-1: USB disconnect, device number 2 [ 132.143406][ T5845] genirq: Flags mismatch irq 4. 00202000 (das16m1) vs. 00202080 (ttyS0) [ 141.782380][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.782494][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.608186][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.612852][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.643570][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.664236][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.665127][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.145649][ T5925] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 151.251235][ T5588] Bluetooth: hci4: command tx timeout [ 151.486811][ T1273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.207353][ T5942] cgroup2: Unknown parameter 'pid' [ 153.316289][ T5588] Bluetooth: hci4: command tx timeout [ 153.427647][ T1273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.248309][ T5953] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 157.220349][ T5588] Bluetooth: hci4: command tx timeout [ 157.445234][ T1273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.236182][ T5588] Bluetooth: hci4: command tx timeout [ 159.426309][ T1273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.200761][ T5597] Bluetooth: hci4: command 0x0405 tx timeout [ 162.420702][ T5913] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.618583][ T38] audit: type=1326 audit(1792156032.878:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.618647][ T38] audit: type=1326 audit(1792156032.888:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.618695][ T38] audit: type=1326 audit(1792156032.898:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.622911][ T38] audit: type=1326 audit(1792156032.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.624528][ T38] audit: type=1326 audit(1792156032.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.757169][ T38] audit: type=1326 audit(1792156032.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.757227][ T38] audit: type=1326 audit(1792156033.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.758604][ T38] audit: type=1326 audit(1792156033.038:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.758658][ T38] audit: type=1326 audit(1792156033.038:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 163.759184][ T38] audit: type=1326 audit(1792156033.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07ce24e559 code=0x7ffc0000 [ 164.947931][ T6002] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 164.947965][ T6002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.968431][ T6004] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 164.968511][ T6004] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.095391][ T6015] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 165.095426][ T6015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.128776][ T6015] vhci_hcd vhci_hcd.0: Device attached [ 165.132761][ T6004] vhci_hcd vhci_hcd.0: Device attached [ 165.446953][ T6020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.144589][ T6002] vhci_hcd vhci_hcd.0: Device attached [ 166.309712][ T6023] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 166.309743][ T6023] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 166.394450][ T6023] vhci_hcd vhci_hcd.0: Device attached [ 166.596335][ T6017] vhci_hcd: connection closed [ 166.603754][ T6010] vhci_hcd: connection closed [ 166.604530][ T6025] vhci_hcd: connection closed [ 166.605264][ T6009] vhci_hcd: connection closed [ 166.655474][ T12] vhci_hcd vhci_hcd.1: stop threads [ 166.693496][ T12] vhci_hcd vhci_hcd.1: release socket [ 166.757680][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 166.824504][ T12] vhci_hcd vhci_hcd.1: stop threads [ 166.824555][ T12] vhci_hcd vhci_hcd.1: release socket [ 166.877503][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 166.971557][ T12] vhci_hcd vhci_hcd.1: stop threads [ 166.971718][ T12] vhci_hcd vhci_hcd.1: release socket [ 167.099416][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 167.101448][ T12] vhci_hcd vhci_hcd.1: stop threads [ 167.101478][ T12] vhci_hcd vhci_hcd.1: release socket [ 167.101518][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 167.182725][ T5854] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 167.300488][ T5854] usb 35-1: enqueue for inactive port 0 [ 167.609239][ T5854] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 177.335890][ T1273] bridge_slave_1: left allmulticast mode [ 177.358320][ T1273] bridge_slave_1: left promiscuous mode [ 177.397180][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.791733][ T1273] bridge_slave_0: left allmulticast mode [ 177.791782][ T1273] bridge_slave_0: left promiscuous mode [ 177.880055][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.906205][ T999] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.167361][ T999] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 178.169708][ T999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.169867][ T999] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.169893][ T999] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.169918][ T999] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.169963][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.792224][ T6104] autofs: Unknown parameter './file0' [ 178.919707][ T57] IPVS: starting estimator thread 0... [ 179.005595][ T6104] 9pnet_virtio: no channels available for device ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.077844][ T6105] IPVS: using max 10 ests per chain, 24000 per kthread [ 179.264451][ T6106] Zero length message leads to an empty skb [ 179.310495][ T5708] usb 4-1: USB disconnect, device number 2 [ 180.551193][ T6121] process 'syz.3.61' launched './file2' with NULL argv: empty string added [ 180.744887][ T6121] 9p: Bad value for 'rfdno' [ 182.189079][ T6123] binder: 6116:6123 unknown command 0 [ 182.189116][ T6123] binder: 6116:6123 ioctl c0306201 200000000c00 returned -22 [ 182.215168][ T6123] trusted_key: syz.0.60 sent an empty control message without MSG_MORE. [ 183.880422][ T6120] kAFS: No cell specified [ 193.776641][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 193.776817][ T6158] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.786438][ T6158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.787669][ T6158] IPv6: NLM_F_CREATE should be set when creating new route [ 193.795875][ T6158] IPv6: NLM_F_CREATE should be set when creating new route [ 199.217832][ T5961] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 201.454328][ T5961] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 201.485749][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.485823][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 201.485858][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.494892][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.495027][ T5961] usb 5-1: Product: syz [ 201.495074][ T5961] usb 5-1: Manufacturer: syz [ 201.495144][ T5961] usb 5-1: SerialNumber: syz [ 201.546643][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.582131][ T5961] usb 5-1: config 0 descriptor?? [ 201.583110][ T6171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.687012][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.855298][ T5961] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 201.869811][ T1273] bond0 (unregistering): Released all slaves [ 201.981644][ T6181] ======================================================= [ 201.981644][ T6181] WARNING: The mand mount option has been deprecated and [ 201.981644][ T6181] and is ignored by this kernel. Remove the mand [ 201.981644][ T6181] option from the mount to silence this warning. [ 201.981644][ T6181] ======================================================= [ 202.673457][ T6175] syz.3.73 (6175) used greatest stack depth: 19320 bytes left [ 202.836298][ T5737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.028679][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 204.092823][ T5961] usb 5-1: USB disconnect, device number 2 [ 205.143146][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.143220][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.227088][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 208.855734][ T88] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.782703][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.821495][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.844989][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.868407][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.891857][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.963221][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.402418][ T5588] Bluetooth: hci5: command tx timeout [ 214.822179][ T88] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.986641][ T6245] FAULT_INJECTION: forcing a failure. [ 214.986641][ T6245] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 214.986693][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.3.86 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 214.986724][ T6245] Tainted: [L]=SOFTLOCKUP [ 214.986731][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.986743][ T6245] Call Trace: [ 214.986750][ T6245] [ 214.986759][ T6245] dump_stack_lvl+0xe8/0x150 [ 214.986793][ T6245] should_fail_ex+0x46b/0x600 [ 214.986850][ T6245] _copy_from_user+0x2d/0xb0 [ 214.986883][ T6245] __sys_bpf+0x2e7/0xd90 [ 214.986916][ T6245] ? __pfx___sys_bpf+0x10/0x10 [ 214.986945][ T6245] ? do_futex+0x3e7/0x4e0 [ 214.986985][ T6245] ? rcu_is_watching+0x16/0xb0 [ 214.987009][ T6245] __x64_sys_bpf+0xba/0xd0 [ 214.987035][ T6245] do_syscall_64+0x166/0x520 [ 214.987067][ T6245] ? trace_irq_disable+0x3b/0x140 [ 214.987091][ T6245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.987108][ T6245] ? clear_bhb_loop+0x70/0xc0 [ 214.987128][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.987145][ T6245] RIP: 0033:0x7f99c464e559 [ 214.987166][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.987180][ T6245] RSP: 002b:00007f99c28a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.987198][ T6245] RAX: ffffffffffffffda RBX: 00007f99c48d5fa0 RCX: 00007f99c464e559 [ 214.987210][ T6245] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 214.987221][ T6245] RBP: 00007f99c46e58b0 R08: 0000000000000000 R09: 0000000000000000 [ 214.987231][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.987241][ T6245] R13: 00007f99c48d6038 R14: 00007f99c48d5fa0 R15: 00007fffb03ae9c8 [ 214.987267][ T6245] [ 215.476916][ T5588] Bluetooth: hci5: command tx timeout [ 216.327696][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 216.328332][ T6255] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 217.556315][ T5588] Bluetooth: hci5: command tx timeout [ 218.159843][ T6260] Bluetooth: MGMT ver 1.23 [ 219.636776][ T5588] Bluetooth: hci5: command tx timeout [ 220.302245][ T1274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.471299][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.804272][ T198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.627549][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.672664][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.682735][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.689358][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.691002][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.269523][ T6296] jffs2: notice: (6296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.224529][ T6221] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.595343][ T5597] Bluetooth: hci1: command tx timeout [ 226.821233][ T1038] IPVS: starting estimator thread 0... [ 226.982408][ T1402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.996249][ T6318] IPVS: using max 9 ests per chain, 21600 per kthread [ 228.332971][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 228.333139][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 228.333173][ T5592] Bluetooth: hci0: command 0x0406 tx timeout [ 228.348187][ T4903] Bluetooth: hci1: command tx timeout [ 229.641676][ T6328] comedi comedi1: pcl730: I/O base address not correctly aligned [ 230.356159][ T5596] Bluetooth: hci1: command tx timeout [ 230.978344][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 231.164762][ T5854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.741478][ T1273] hsr_slave_0: left promiscuous mode [ 231.785612][ T1273] hsr_slave_1: left promiscuous mode [ 231.795626][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.795761][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.904980][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.905005][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.044099][ T1273] veth1_macvtap: left promiscuous mode [ 232.044413][ T1273] veth0_macvtap: left promiscuous mode [ 232.064555][ T1273] veth1_vlan: left promiscuous mode [ 232.076766][ T1273] veth0_vlan: left promiscuous mode [ 232.216240][ T5722] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 232.442470][ T5596] Bluetooth: hci1: command tx timeout [ 232.455920][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.567009][ T5722] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 232.572096][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 232.572130][ T5722] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 232.572158][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 232.572182][ T5722] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 232.572226][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.694730][ T5722] usb 4-1: config 0 descriptor?? [ 232.974046][ T5722] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 232.974076][ T5722] hdpvr 4-1:0.0: device init failed [ 232.974172][ T5722] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 233.066299][ T5722] usb 4-1: USB disconnect, device number 3 [ 234.306998][ T198] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 234.543847][ T198] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 234.750899][ T198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.750931][ T198] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.751014][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.964484][ T198] usb 5-1: interface 2 not found [ 235.497481][ T6368] syz.1.98 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 236.676240][ T198] usb 5-1: USB disconnect, device number 3 [ 238.203044][ T5722] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 238.655631][ T38] kauditd_printk_skb: 58 callbacks suppressed [ 238.655680][ T38] audit: type=1800 audit(1792156107.818:70): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.105" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 239.802524][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.836175][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 239.837026][ T5722] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.840348][ T5722] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 239.840381][ T5722] usb 4-1: config 0 has no interface number 0 [ 239.840430][ T5722] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.840456][ T5722] usb 4-1: config 0 interface 184 has no altsetting 0 [ 240.007501][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.007536][ T5722] usb 4-1: Product: syz [ 240.007553][ T5722] usb 4-1: Manufacturer: syz [ 240.007577][ T5722] usb 4-1: SerialNumber: syz [ 240.068283][ T5722] usb 4-1: config 0 descriptor?? [ 240.089921][ T5722] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 240.094501][ T5722] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 240.314392][ T5722] usb 4-1: USB disconnect, device number 4 [ 241.566421][ T198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.006972][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 243.123926][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 243.333029][ T6400] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 243.333108][ T6400] CIFS mount error: No usable UNC path provided in device string! [ 243.333108][ T6400] [ 243.333404][ T6400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.371130][ T6400] sg_write: data in/out 163806/20 bytes for SCSI command 0x0-- guessing data in; [ 243.371130][ T6400] program syz.3.108 not setting count and/or reply_len properly [ 246.050559][ T6402] 9pnet_fd: p9_fd_create_tcp (6402): problem connecting socket to 127.0.0.1 [ 246.675009][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.056722][ T5735] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 247.207044][ T5735] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 247.208892][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.208929][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 247.208959][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.374436][ T5735] usb 4-1: config 0 descriptor?? [ 247.502681][ T6285] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.515965][ T6415] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 247.691708][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 247.772849][ T5735] usb 4-1: string descriptor 0 read error: -71 [ 247.850699][ T5735] rndis_host 4-1:0.0: rndis: master #0/ffff888064934000 slave #1/0000000000000000 [ 247.999430][ T5735] usb 4-1: USB disconnect, device number 5 [ 248.636268][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.909876][ T6422] fuse: blksize only supported for fuseblk [ 248.923393][ T6422] evm: overlay not supported [ 249.131566][ T5854] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 249.196849][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.196885][ T5854] usb 5-1: Product: syz [ 249.196903][ T5854] usb 5-1: Manufacturer: syz [ 249.196919][ T5854] usb 5-1: SerialNumber: syz [ 249.879560][ T5854] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 251.186622][ T5737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.187081][ T5737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.969588][ T88] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.003623][ T5588] Bluetooth: hci1: command 0x0405 tx timeout [ 255.981174][ T5854] usb 5-1: USB disconnect, device number 4 [ 258.146813][ T1274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.162993][ T6407] udevd[6407]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.546411][ T5722] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 259.698880][ T1273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.706417][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.706472][ T5722] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 259.717375][ T5722] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 259.717422][ T5722] usb 4-1: config 142 descriptor has 1 excess byte, ignoring [ 259.717491][ T5722] usb 4-1: config 142 has no interface number 0 [ 259.717603][ T5722] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 259.717656][ T5722] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 259.717730][ T5722] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 259.717783][ T5722] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.717850][ T5722] usb 4-1: config 142 interface 251 has no altsetting 0 [ 259.818495][ T5722] usb 4-1: string descriptor 0 read error: -22 [ 259.818652][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.938078][ T6483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.973750][ T5722] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 260.068214][ T5722] cyphidcom ttyUSB0: probe with driver cyphidcom failed with error -22 [ 260.271381][ T5722] usb 4-1: USB disconnect, device number 6 [ 260.395615][ T5722] cypress_m8 4-1:142.251: device disconnected [ 260.611489][ T5737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.960186][ T1273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.033795][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.038226][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.038597][ T6221] bridge_slave_0: entered allmulticast mode [ 261.041587][ T6221] bridge_slave_0: entered promiscuous mode [ 261.103101][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.103235][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.103438][ T6221] bridge_slave_1: entered allmulticast mode [ 261.227668][ T6221] bridge_slave_1: entered promiscuous mode [ 261.248349][ T198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.822336][ T3399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.991033][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.263971][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.546160][ T198] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 265.631536][ T1273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.700343][ T198] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.720839][ T198] usb 2-1: not running at top speed; connect to a high speed hub [ 265.720885][ T198] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=7f.5c [ 265.745458][ T198] usb 2-1: config 8 has an invalid interface number: 218 but max is 1 [ 265.745491][ T198] usb 2-1: config 8 has an invalid interface number: 50 but max is 1 [ 265.745515][ T198] usb 2-1: config 8 has no interface number 0 [ 265.745534][ T198] usb 2-1: config 8 has no interface number 1 [ 265.745602][ T198] usb 2-1: config 8 interface 50 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 265.745636][ T198] usb 2-1: config 8 interface 50 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 265.745666][ T198] usb 2-1: config 8 interface 50 altsetting 1 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 265.745696][ T198] usb 2-1: config 8 interface 50 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 265.745722][ T198] usb 2-1: config 8 interface 50 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 265.745751][ T198] usb 2-1: config 8 interface 218 has no altsetting 0 [ 265.745772][ T198] usb 2-1: config 8 interface 50 has no altsetting 0 [ 266.028365][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.028412][ T198] usb 2-1: Product: syz [ 266.028471][ T198] usb 2-1: Manufacturer: syz [ 266.028489][ T198] usb 2-1: SerialNumber: syz [ 266.437249][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.437411][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.313175][ T1185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.487496][ T198] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 267.488552][ T5961] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 267.566458][ T198] usb 2-1: selecting invalid altsetting 0 [ 267.733135][ T198] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 267.733566][ T198] usb 2-1: selecting invalid altsetting 0 [ 267.747717][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 267.753478][ T5961] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 267.783928][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.783960][ T5961] usb 5-1: Product: syz [ 267.783977][ T5961] usb 5-1: Manufacturer: syz [ 267.783994][ T5961] usb 5-1: SerialNumber: syz [ 267.823527][ T5961] usb 5-1: config 0 descriptor?? [ 267.852023][ T5961] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 267.852520][ T198] usb 2-1: USB disconnect, device number 2 [ 267.902218][ T2385] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 267.902248][ T2385] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 267.906999][ T5961] usb 5-1: Detected FT2233HP [ 268.081992][ T5961] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 268.194531][ T5961] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 268.516143][ T5722] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.632866][ T5961] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.702453][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.703261][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.703317][ T5722] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 268.720477][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.762813][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.782821][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.797510][ T5588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.808705][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.879174][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 268.879206][ T5722] usb 4-1: Product: syz [ 268.879221][ T5722] usb 4-1: Manufacturer: syz [ 269.007769][ T5961] usb 5-1: USB disconnect, device number 5 [ 269.090363][ T5722] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 269.090465][ T5722] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 269.132746][ T1273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.562956][ T1185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.646186][ T5722] usb 4-1: USB disconnect, device number 7 [ 269.745501][ T5961] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.777650][ T5961] ftdi_sio 5-1:0.0: device disconnected [ 270.083188][ T6583] comedi comedi0: Cannot bond this driver to itself! [ 270.559689][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.559826][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.560058][ T6285] bridge_slave_0: entered allmulticast mode [ 270.696639][ T6285] bridge_slave_0: entered promiscuous mode [ 271.400171][ T5596] Bluetooth: hci4: command tx timeout [ 271.529892][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.531660][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.531846][ T6285] bridge_slave_1: entered allmulticast mode [ 271.560164][ T6285] bridge_slave_1: entered promiscuous mode [ 272.022350][ T6285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.086468][ T6285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.091729][ T6616] sock: sock_timestamping_bind_phc: sock not bind to device [ 272.293194][ T6620] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 272.842065][ T6285] team0: Port device team_slave_0 added [ 272.886766][ T6285] team0: Port device team_slave_1 added [ 272.932952][ T3399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.996143][ T5596] Bluetooth: hci4: command tx timeout [ 274.330144][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.330164][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.330207][ T6285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.389930][ T6285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.389948][ T6285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.389972][ T6285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.752615][ T1273] bridge_slave_1: left allmulticast mode [ 274.752655][ T1273] bridge_slave_1: left promiscuous mode [ 274.752939][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.215437][ T1273] bridge_slave_0: left allmulticast mode [ 275.215478][ T1273] bridge_slave_0: left promiscuous mode [ 275.215746][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.037178][ T5596] Bluetooth: hci4: command tx timeout [ 278.116757][ T5596] Bluetooth: hci4: command tx timeout [ 278.461496][ T6660] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 280.896864][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.983422][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.019335][ T1273] bond0 (unregistering): Released all slaves [ 281.371067][ T6677] comedi comedi0: 8255: I/O base address not correctly aligned [ 281.445288][ T1273] bond0 (unregistering): Released all slaves [ 281.651408][ T5588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.707932][ T5588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.734254][ T5588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.777115][ T5588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.802754][ T5588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.224529][ T6688] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 283.697702][ T6549] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.956277][ T5596] Bluetooth: hci5: command tx timeout [ 284.095047][ T38] audit: type=1800 audit(1792156153.288:71): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.176" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 284.319940][ T38] audit: type=1800 audit(1792156153.518:72): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.176" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 286.036209][ T5596] Bluetooth: hci5: command tx timeout [ 287.456545][ T6678] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.116386][ T5596] Bluetooth: hci5: command tx timeout [ 288.658588][ T6761] 9p: Bad value for 'rfdno' [ 290.197663][ T5596] Bluetooth: hci5: command tx timeout [ 292.586197][ T6793] comedi comedi0: 8255: I/O port conflict (0x100,4) [ 293.191266][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 295.869538][ T6812] comedi comedi0: mpc624: I/O base address not correctly aligned [ 295.921146][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.921243][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.921395][ T6549] bridge_slave_0: entered allmulticast mode [ 295.962261][ T6549] bridge_slave_0: entered promiscuous mode [ 296.040390][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.040488][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.040649][ T6549] bridge_slave_1: entered allmulticast mode [ 296.047965][ T6549] bridge_slave_1: entered promiscuous mode [ 296.468746][ T1273] hsr_slave_0: left promiscuous mode [ 296.495642][ T6821] usb usb8: usbfs: process 6821 (syz.4.210) did not claim interface 0 before use [ 296.513474][ T1273] hsr_slave_1: left promiscuous mode [ 296.514831][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.514859][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.590053][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.590085][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.760595][ T6825] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 298.461534][ T1273] veth1_macvtap: left promiscuous mode [ 298.461652][ T1273] veth0_macvtap: left promiscuous mode [ 298.461937][ T1273] veth1_vlan: left promiscuous mode [ 298.462136][ T1273] veth0_vlan: left promiscuous mode [ 302.806978][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 302.878181][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 303.470445][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.543390][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.731630][ T6549] team0: Port device team_slave_0 added [ 303.785713][ T6549] team0: Port device team_slave_1 added [ 303.966585][ T6871] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 303.966734][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.966749][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.966788][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.009660][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.009680][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.009712][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.448733][ T6549] hsr_slave_0: entered promiscuous mode [ 304.451379][ T6549] hsr_slave_1: entered promiscuous mode [ 304.452257][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 304.452285][ T6549] Cannot create hsr debugfs directory [ 307.338007][ T6900] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 309.102017][ T1273] IPVS: stop unused estimator thread 0... [ 309.112037][ T6916] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 309.298890][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 309.426976][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.427127][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.427334][ T6678] bridge_slave_0: entered allmulticast mode [ 310.163213][ T6678] bridge_slave_0: entered promiscuous mode [ 311.897109][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.897250][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.897457][ T6678] bridge_slave_1: entered allmulticast mode [ 311.934742][ T6678] bridge_slave_1: entered promiscuous mode [ 312.066221][ T1273] bridge_slave_1: left allmulticast mode [ 312.066260][ T1273] bridge_slave_1: left promiscuous mode [ 312.066547][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.240914][ T1273] bridge_slave_0: left allmulticast mode [ 312.240955][ T1273] bridge_slave_0: left promiscuous mode [ 312.241218][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.455636][ T6945] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 312.537895][ T1273] bridge_slave_1: left allmulticast mode [ 312.537927][ T1273] bridge_slave_1: left promiscuous mode [ 312.538114][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.779368][ T1273] bridge_slave_0: left allmulticast mode [ 313.779739][ T1273] bridge_slave_0: left promiscuous mode [ 313.866072][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.515519][ T6955] [U] %2 [ 314.536218][ T5738] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 314.696149][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 314.699289][ T5738] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.700541][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.700581][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.700611][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.752050][ T5738] usb 4-1: config 0 descriptor?? [ 314.778906][ T5738] hub 4-1:0.0: USB hub found [ 314.966479][ T5738] hub 4-1:0.0: 1 port detected [ 314.969993][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.127158][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.169702][ T5738] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 315.191169][ T5738] usbhid 4-1:0.0: can't add hid device: -71 [ 315.191297][ T5738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 315.211745][ T1273] bond0 (unregistering): Released all slaves [ 315.289493][ T5738] usb 4-1: USB disconnect, device number 8 [ 315.547073][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.627055][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.700532][ T1273] bond0 (unregistering): Released all slaves [ 315.764414][ T6964] syz.3.257 (6964) used greatest stack depth: 19264 bytes left [ 315.873055][ T6931] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 315.981816][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.071063][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.209313][ T5735] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 316.215489][ T6678] team0: Port device team_slave_0 added [ 316.231698][ T6678] team0: Port device team_slave_1 added [ 316.403482][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 316.404415][ T5735] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.442934][ T5735] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 316.471909][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.471942][ T5735] usb 4-1: Product: syz [ 316.471959][ T5735] usb 4-1: Manufacturer: syz [ 316.471976][ T5735] usb 4-1: SerialNumber: syz [ 316.583990][ T5735] r8152-cfgselector 4-1: Unknown version 0x0000 [ 316.584021][ T5735] r8152-cfgselector 4-1: config 0 descriptor?? [ 316.817780][ T5735] r8152-cfgselector 4-1: Needed 1 retries to read version [ 316.882455][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.882483][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.882503][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.029013][ T1240] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 317.102486][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.102508][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.102539][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.991806][ T7006] mmap: syz.4.265 (7006) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 321.755275][ T6678] hsr_slave_0: entered promiscuous mode [ 321.808397][ T6678] hsr_slave_1: entered promiscuous mode [ 321.812981][ T6678] debugfs: 'hsr0' already exists in 'hsr' [ 321.813014][ T6678] Cannot create hsr debugfs directory [ 321.906552][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.244168][ T7018] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 323.065245][ T6549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.356094][ T5738] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 323.507290][ T5738] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 323.513985][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.514017][ T5738] usb 4-1: Product: syz [ 323.514034][ T5738] usb 4-1: Manufacturer: syz [ 323.514051][ T5738] usb 4-1: SerialNumber: syz [ 323.564332][ T5738] usb 4-1: config 0 descriptor?? [ 323.583026][ T5738] hub 4-1:0.0: bad descriptor, ignoring hub [ 323.583071][ T5738] hub 4-1:0.0: probe with driver hub failed with error -5 [ 323.876292][ T5735] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 324.027074][ T5735] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 324.030597][ T5735] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 324.030668][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.033726][ T5735] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 324.033756][ T5735] usb 5-1: Manufacturer: syz [ 324.085740][ T5735] usb 5-1: config 0 descriptor?? [ 324.186102][ T5735] rc_core: IR keymap rc-hauppauge not found [ 324.186128][ T5735] Registered IR keymap rc-empty [ 324.222491][ T5735] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 324.239136][ T5735] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 324.356213][ T5738] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 324.483915][ T6549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.656352][ T6549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.687145][ C1] igorplugusb 5-1:0.0: receive overflow, at least 12 lost [ 324.687350][ T7028] rc rc0: two consecutive events of type space [ 324.687845][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.698532][ T5738] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 324.706828][ T5738] usb 4-1: media controller created [ 324.794026][ T6549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.894040][ T5735] usb 5-1: USB disconnect, device number 6 [ 324.985240][ T6549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.003761][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.272143][ T6549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.273461][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.328048][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.335631][ T7033] sctp: [Deprecated]: syz.3.274 (pid 7033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.335631][ T7033] Use struct sctp_sack_info instead [ 325.760309][ T5738] DVB: Unable to find symbol dib7000p_attach() [ 325.760344][ T5738] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 325.922442][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 325.986176][ T5738] rc_core: IR keymap rc-dib0700-rc5 not found [ 325.986202][ T5738] Registered IR keymap rc-empty [ 325.986910][ T5738] dvb-usb: could not initialize remote control. [ 325.986924][ T5738] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 326.102638][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 326.163570][ T5738] usb 4-1: USB disconnect, device number 10 [ 326.754041][ T5738] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 327.805336][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.805423][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.917047][ T6549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.971467][ T6549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.118586][ T6549] kthread_run failed with err -4 [ 329.075484][ T5588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.165116][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.182603][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.253494][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.362198][ T5588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.329818][ T7096] syz.4.292 (7096) used greatest stack depth: 18368 bytes left [ 330.849414][ T7118] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 330.864012][ T7115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 331.551201][ T1185] IPVS: starting estimator thread 0... [ 331.656368][ T5596] Bluetooth: hci1: command tx timeout [ 331.662767][ T7130] IPVS: using max 10 ests per chain, 24000 per kthread [ 331.930053][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6 [ 332.212927][ T6678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.405893][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.449498][ T6678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.568115][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.600211][ T6678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.716916][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.738792][ T5737] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 332.749224][ T6678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 332.890125][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.890177][ T5737] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 332.913252][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.913279][ T5737] usb 5-1: Product: syz [ 332.913294][ T5737] usb 5-1: Manufacturer: syz [ 332.913309][ T5737] usb 5-1: SerialNumber: syz [ 332.964376][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.989483][ T7085] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.382414][ T2385] pvrusb2: request_firmware fatal error with code=-110 [ 333.382868][ T2385] pvrusb2: Failure uploading firmware1 [ 333.382883][ T2385] pvrusb2: Device initialization was not successful. [ 333.382894][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 333.382905][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 333.426324][ T2385] pvrusb2: Invalid write control endpoint [ 333.465042][ T2385] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 333.465074][ T2385] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 333.496624][ T198] pvrusb2: Device being rendered inoperable [ 333.549251][ T5737] option 5-1:4.0: GSM modem (1-port) converter detected [ 333.726497][ T5596] Bluetooth: hci1: command tx timeout [ 333.780380][ T5737] usb 5-1: USB disconnect, device number 7 [ 333.852987][ T5737] option 5-1:4.0: device disconnected [ 335.797473][ T5596] Bluetooth: hci1: command tx timeout [ 335.878640][ T7167] vivid-001: kernel_thread() failed [ 336.987136][ T4953] udevd[4953]: worker [6526] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 337.207915][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 337.441420][ T1240] hid-generic 0005:0018:63AA.0001: item fetching failed at offset 3/4 [ 337.538612][ T1240] hid-generic 0005:0018:63AA.0001: probe with driver hid-generic failed with error -22 [ 337.877832][ T5596] Bluetooth: hci1: command tx timeout [ 341.326967][ T38] audit: type=1400 audit(1792156210.568:73): lsm=SMACK fn=smack_inode_setxattr action=denied subject="_" object="lowerdir" requested=w pid=7219 comm="syz.3.324" name="file0" dev="tmpfs" ino=667 [ 341.536641][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.573362][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.599405][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.615516][ T5588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.620142][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.985008][ T7238] jffs2: notice: (7238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.796939][ T5596] Bluetooth: hci4: command tx timeout [ 345.910319][ T7301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.345'. [ 346.058208][ T5588] Bluetooth: hci4: command tx timeout [ 346.570163][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.570425][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.570639][ T7085] bridge_slave_0: entered allmulticast mode [ 346.604268][ T7085] bridge_slave_0: entered promiscuous mode [ 346.794588][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.850348][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.995622][ T7085] bridge_slave_1: entered allmulticast mode [ 347.204078][ T7085] bridge_slave_1: entered promiscuous mode [ 348.126398][ T5588] Bluetooth: hci4: command tx timeout [ 348.810119][ T7223] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.252947][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.427242][ T1273] bridge_slave_1: left allmulticast mode [ 349.427285][ T1273] bridge_slave_1: left promiscuous mode [ 349.427603][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.861699][ T7351] FAULT_INJECTION: forcing a failure. [ 349.861699][ T7351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.861745][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.3.355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.861780][ T7351] Tainted: [L]=SOFTLOCKUP [ 349.861789][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.861811][ T7351] Call Trace: [ 349.861821][ T7351] [ 349.861832][ T7351] dump_stack_lvl+0xe8/0x150 [ 349.861877][ T7351] should_fail_ex+0x46b/0x600 [ 349.861923][ T7351] _copy_from_user+0x2d/0xb0 [ 349.861951][ T7351] __se_sys_move_pages+0x14e6/0x1d90 [ 349.862009][ T7351] ? __pfx___se_sys_move_pages+0x10/0x10 [ 349.862037][ T7351] ? futex_wait+0x2a2/0x390 [ 349.862073][ T7351] ? __pfx_futex_wait+0x10/0x10 [ 349.862138][ T7351] ? __pfx_do_futex+0x10/0x10 [ 349.862164][ T7351] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 349.862202][ T7351] ? __se_sys_futex+0x3a8/0x450 [ 349.862238][ T7351] ? rcu_is_watching+0x16/0xb0 [ 349.862270][ T7351] ? __x64_sys_move_pages+0x21/0xf0 [ 349.862305][ T7351] do_syscall_64+0x166/0x520 [ 349.862339][ T7351] ? trace_irq_disable+0x3b/0x140 [ 349.862372][ T7351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.862396][ T7351] ? clear_bhb_loop+0x70/0xc0 [ 349.862426][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.862451][ T7351] RIP: 0033:0x7f99c464e559 [ 349.862474][ T7351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.862494][ T7351] RSP: 002b:00007f99c28a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 349.862521][ T7351] RAX: ffffffffffffffda RBX: 00007f99c48d5fa0 RCX: 00007f99c464e559 [ 349.862539][ T7351] RDX: 00002000000000c0 RSI: 0000000000001efe RDI: 0000000000000000 [ 349.862561][ T7351] RBP: 00007f99c46e58b0 R08: 0000200000000100 R09: 0000000000000000 [ 349.862578][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.862593][ T7351] R13: 00007f99c48d6038 R14: 00007f99c48d5fa0 R15: 00007fffb03ae9c8 [ 349.862631][ T7351] [ 350.196638][ T5588] Bluetooth: hci4: command tx timeout [ 350.451968][ T1273] bridge_slave_0: left allmulticast mode [ 350.452011][ T1273] bridge_slave_0: left promiscuous mode [ 350.452315][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.293664][ T7368] capability: warning: `syz.1.361' uses deprecated v2 capabilities in a way that may be insecure [ 351.467135][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.587023][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.748049][ T7374] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 352.648932][ T1273] bond0 (unregistering): Released all slaves [ 352.690332][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.797457][ T7359] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 353.428936][ T7085] team0: Port device team_slave_0 added [ 353.450285][ T7085] team0: Port device team_slave_1 added [ 354.038120][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.038150][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.038181][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.103663][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.103684][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.103716][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.833324][ T7397] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 355.067882][ T7402] Invalid argument reading file caps for ./file0 [ 355.083616][ T1273] hsr_slave_0: left promiscuous mode [ 355.126143][ T1273] hsr_slave_1: left promiscuous mode [ 355.127553][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.178335][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.201709][ T7405] FAULT_INJECTION: forcing a failure. [ 355.201709][ T7405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.201754][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.371 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.201787][ T7405] Tainted: [L]=SOFTLOCKUP [ 355.201796][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.201811][ T7405] Call Trace: [ 355.201820][ T7405] [ 355.201830][ T7405] dump_stack_lvl+0xe8/0x150 [ 355.201872][ T7405] should_fail_ex+0x46b/0x600 [ 355.201916][ T7405] prepare_alloc_pages+0x223/0x650 [ 355.201948][ T7405] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 355.201978][ T7405] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.202001][ T7405] ? __alloc_frozen_pages_noprof+0x2b7/0x5c0 [ 355.202030][ T7405] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.202061][ T7405] ? __pfx_policy_nodemask+0x10/0x10 [ 355.202095][ T7405] __alloc_pages_noprof+0x10/0x100 [ 355.202131][ T7405] alloc_pages_bulk_noprof+0x683/0x890 [ 355.202171][ T7405] ? alloc_pages_mpol+0x11b/0x280 [ 355.202205][ T7405] ? alloc_pages_noprof+0x161/0x2f0 [ 355.202240][ T7405] __kasan_populate_vmalloc+0xb7/0x1c0 [ 355.202277][ T7405] ? rt_spin_unlock+0x165/0x200 [ 355.202309][ T7405] alloc_vmap_area+0xd1a/0x1420 [ 355.202361][ T7405] ? __pfx_alloc_vmap_area+0x10/0x10 [ 355.202397][ T7405] ? __get_vm_area_node+0x155/0x2f0 [ 355.202436][ T7405] __get_vm_area_node+0x200/0x2f0 [ 355.202478][ T7405] __vmalloc_node_range_noprof+0x343/0x1540 [ 355.202515][ T7405] ? dvb_dvr_open+0x1d2/0x5c0 [ 355.202572][ T7405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.202617][ T7405] ? dvb_dvr_open+0x1d2/0x5c0 [ 355.202642][ T7405] vmalloc_noprof+0xb2/0xe0 [ 355.202675][ T7405] ? dvb_dvr_open+0x1d2/0x5c0 [ 355.202701][ T7405] dvb_dvr_open+0x1d2/0x5c0 [ 355.202727][ T7405] ? __pfx_dvb_dvr_open+0x10/0x10 [ 355.202753][ T7405] dvb_device_open+0x258/0x350 [ 355.202796][ T7405] chrdev_open+0x4dc/0x600 [ 355.202824][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 355.202848][ T7405] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 355.202895][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 355.202918][ T7405] do_dentry_open+0x849/0x1420 [ 355.202957][ T7405] vfs_open+0x3b/0x350 [ 355.202979][ T7405] ? path_openat+0x142d/0x1d60 [ 355.203017][ T7405] path_openat+0x1448/0x1d60 [ 355.203078][ T7405] do_file_open+0x23e/0x4a0 [ 355.203128][ T7405] ? __pfx_do_file_open+0x10/0x10 [ 355.203196][ T7405] ? alloc_fd+0x654/0x6d0 [ 355.203238][ T7405] do_sys_openat2+0x115/0x200 [ 355.203269][ T7405] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.203297][ T7405] ? exc_page_fault+0x6a/0xc0 [ 355.203336][ T7405] ? do_user_addr_fault+0xc4c/0x1340 [ 355.203367][ T7405] __x64_sys_openat+0x138/0x170 [ 355.203401][ T7405] do_syscall_64+0x166/0x520 [ 355.203433][ T7405] ? trace_irq_disable+0x3b/0x140 [ 355.203467][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.203492][ T7405] ? clear_bhb_loop+0x70/0xc0 [ 355.203521][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.203545][ T7405] RIP: 0033:0x7f2c8252ed8e [ 355.203569][ T7405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.203590][ T7405] RSP: 002b:00007f2c807c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.203618][ T7405] RAX: ffffffffffffffda RBX: 00007f2c807c66c0 RCX: 00007f2c8252ed8e [ 355.203635][ T7405] RDX: 0000000000020000 RSI: 00007f2c807c5c00 RDI: ffffffffffffff9c [ 355.203651][ T7405] RBP: 00007f2c807c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 355.203666][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 355.203682][ T7405] R13: 00007f2c827f6038 R14: 00007f2c827f5fa0 R15: 00007ffc4c237968 [ 355.203723][ T7405] [ 355.592169][ T7405] syz.4.371: vmalloc error: size 1925120, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.592562][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.371 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.592595][ T7405] Tainted: [L]=SOFTLOCKUP [ 355.592604][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.592618][ T7405] Call Trace: [ 355.592627][ T7405] [ 355.592638][ T7405] dump_stack_lvl+0xe8/0x150 [ 355.592681][ T7405] warn_alloc+0x24d/0x270 [ 355.592722][ T7405] ? lockdep_hardirqs_on+0x7b/0x110 [ 355.592773][ T7405] ? __pfx_warn_alloc+0x10/0x10 [ 355.592810][ T7405] ? kfree+0x1c5/0x6d0 [ 355.592852][ T7405] ? __get_vm_area_node+0x219/0x2f0 [ 355.592896][ T7405] __vmalloc_node_range_noprof+0x36b/0x1540 [ 355.592967][ T7405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.593011][ T7405] ? dvb_dvr_open+0x1d2/0x5c0 [ 355.593035][ T7405] vmalloc_noprof+0xb2/0xe0 [ 355.593070][ T7405] ? dvb_dvr_open+0x1d2/0x5c0 [ 355.593096][ T7405] dvb_dvr_open+0x1d2/0x5c0 [ 355.593122][ T7405] ? __pfx_dvb_dvr_open+0x10/0x10 [ 355.593147][ T7405] dvb_device_open+0x258/0x350 [ 355.593190][ T7405] chrdev_open+0x4dc/0x600 [ 355.593217][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 355.593242][ T7405] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 355.593288][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 355.593310][ T7405] do_dentry_open+0x849/0x1420 [ 355.593351][ T7405] vfs_open+0x3b/0x350 [ 355.593373][ T7405] ? path_openat+0x142d/0x1d60 [ 355.593411][ T7405] path_openat+0x1448/0x1d60 [ 355.593472][ T7405] do_file_open+0x23e/0x4a0 [ 355.593514][ T7405] ? __pfx_do_file_open+0x10/0x10 [ 355.593588][ T7405] ? alloc_fd+0x654/0x6d0 [ 355.593630][ T7405] do_sys_openat2+0x115/0x200 [ 355.593661][ T7405] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.593689][ T7405] ? exc_page_fault+0x6a/0xc0 [ 355.593728][ T7405] ? do_user_addr_fault+0xc4c/0x1340 [ 355.593759][ T7405] __x64_sys_openat+0x138/0x170 [ 355.593793][ T7405] do_syscall_64+0x166/0x520 [ 355.593827][ T7405] ? trace_irq_disable+0x3b/0x140 [ 355.593861][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.593887][ T7405] ? clear_bhb_loop+0x70/0xc0 [ 355.593918][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.593942][ T7405] RIP: 0033:0x7f2c8252ed8e [ 355.593965][ T7405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.593985][ T7405] RSP: 002b:00007f2c807c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.594010][ T7405] RAX: ffffffffffffffda RBX: 00007f2c807c66c0 RCX: 00007f2c8252ed8e [ 355.594027][ T7405] RDX: 0000000000020000 RSI: 00007f2c807c5c00 RDI: ffffffffffffff9c [ 355.594044][ T7405] RBP: 00007f2c807c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 355.594060][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 355.594076][ T7405] R13: 00007f2c827f6038 R14: 00007f2c827f5fa0 R15: 00007ffc4c237968 [ 355.594116][ T7405] [ 355.594137][ T7405] Mem-Info: [ 355.594154][ T7405] active_anon:198 inactive_anon:6672 isolated_anon:0 [ 355.594154][ T7405] active_file:23467 inactive_file:38137 isolated_file:0 [ 355.594154][ T7405] unevictable:0 dirty:182 writeback:0 [ 355.594154][ T7405] slab_reclaimable:12256 slab_unreclaimable:104179 [ 355.594154][ T7405] mapped:30103 shmem:535 pagetables:1567 [ 355.594154][ T7405] sec_pagetables:0 bounce:0 [ 355.594154][ T7405] kernel_misc_reclaimable:0 [ 355.594154][ T7405] free:1279520 free_pcp:19223 free_cma:0 [ 355.594217][ T7405] Node 0 active_anon:792kB inactive_anon:26688kB active_file:93668kB inactive_file:152548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120412kB dirty:724kB writeback:0kB shmem:2140kB kernel_stack:13832kB pagetables:6092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.594277][ T7405] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.594333][ T7405] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.594403][ T7405] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 355.594449][ T7405] Node 0 DMA32 free:1169256kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:792kB inactive_anon:26688kB active_file:93668kB inactive_file:152548kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2540292kB mlocked:0kB bounce:0kB free_pcp:76872kB local_pcp:44548kB free_cma:0kB [ 355.594520][ T7405] lowmem_reserve[]: 0 0 1 1 1 [ 355.594571][ T7405] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:4kB free_cma:0kB [ 355.594638][ T7405] lowmem_reserve[]: 0 0 0 0 0 [ 355.594682][ T7405] Node 1 Normal free:3933464kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.594752][ T7405] lowmem_reserve[]: 0 0 0 0 0 [ 355.594802][ T7405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.595232][ T7405] Node 0 DMA32: 768*4kB (UME) 969*8kB (UME) 335*16kB (UM) 74*32kB (UME) 202*64kB (ME) 6*128kB (E) 87*256kB (UM) 37*512kB (UM) 20*1024kB (ME) 11*2048kB (UM) 257*4096kB (UM) = 1169144kB [ 355.595425][ T7405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.595543][ T7405] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 7*16kB (UM) 12*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3933464kB [ 355.595744][ T7405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.595763][ T7405] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 355.595782][ T7405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.595801][ T7405] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 355.595820][ T7405] 62135 total pagecache pages [ 355.595839][ T7405] 0 pages in swap cache [ 355.595848][ T7405] Free swap = 124996kB [ 355.595858][ T7405] Total swap = 124996kB [ 355.595868][ T7405] 2097051 pages RAM [ 355.595876][ T7405] 0 pages HighMem/MovableOnly [ 355.595884][ T7405] 429911 pages reserved [ 355.595893][ T7405] 0 pages cma reserved [ 356.621674][ T7422] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 358.700390][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 358.747571][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 358.987975][ T7085] hsr_slave_0: entered promiscuous mode [ 358.989446][ T7085] hsr_slave_1: entered promiscuous mode [ 358.990273][ T7085] debugfs: 'hsr0' already exists in 'hsr' [ 358.990298][ T7085] Cannot create hsr debugfs directory [ 360.930400][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.932195][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.932452][ T7223] bridge_slave_0: entered allmulticast mode [ 360.957638][ T7223] bridge_slave_0: entered promiscuous mode [ 361.000118][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.000357][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.000573][ T7223] bridge_slave_1: entered allmulticast mode [ 361.035276][ T7223] bridge_slave_1: entered promiscuous mode [ 361.388028][ T7471] FAULT_INJECTION: forcing a failure. [ 361.388028][ T7471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.388094][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.4.384 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.388134][ T7471] Tainted: [L]=SOFTLOCKUP [ 361.388141][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.388156][ T7471] Call Trace: [ 361.388164][ T7471] [ 361.388173][ T7471] dump_stack_lvl+0xe8/0x150 [ 361.388211][ T7471] should_fail_ex+0x46b/0x600 [ 361.388252][ T7471] _copy_from_user+0x2d/0xb0 [ 361.388276][ T7471] keyctl_dh_compute+0xd4/0x180 [ 361.388309][ T7471] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 361.388355][ T7471] __se_sys_keyctl+0x44c/0x9d0 [ 361.388379][ T7471] ? __pfx___se_sys_keyctl+0x10/0x10 [ 361.388403][ T7471] ? __pfx_do_futex+0x10/0x10 [ 361.388428][ T7471] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 361.388462][ T7471] ? __se_sys_futex+0x3a8/0x450 [ 361.388496][ T7471] ? rcu_is_watching+0x16/0xb0 [ 361.388526][ T7471] ? __x64_sys_keyctl+0x20/0xc0 [ 361.388549][ T7471] do_syscall_64+0x166/0x520 [ 361.388580][ T7471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.388602][ T7471] ? clear_bhb_loop+0x70/0xc0 [ 361.388631][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.388661][ T7471] RIP: 0033:0x7f2c8256e559 [ 361.388683][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.388704][ T7471] RSP: 002b:00007f2c807c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 361.388726][ T7471] RAX: ffffffffffffffda RBX: 00007f2c827f5fa0 RCX: 00007f2c8256e559 [ 361.388747][ T7471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000017 [ 361.388760][ T7471] RBP: 00007f2c826058b0 R08: 00002000000016c0 R09: 0000000000000000 [ 361.388776][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.388789][ T7471] R13: 00007f2c827f6038 R14: 00007f2c827f5fa0 R15: 00007ffc4c237968 [ 361.388821][ T7471] [ 361.970672][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.973326][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 361.974006][ T7473] »»»»»»: renamed from vlan0 (while UP) [ 362.125492][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.611227][ T5721] kernel write not supported for file /input/mice (pid: 5721 comm: kworker/0:4) [ 362.828673][ T7223] team0: Port device team_slave_0 added [ 363.884950][ T7519] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 364.283204][ T7223] team0: Port device team_slave_1 added [ 364.889961][ T7526] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 364.940161][ T7521] kvm: pic: non byte read [ 364.957326][ T7521] kvm: pic: level sensitive irq not supported [ 364.957565][ T7521] kvm: pic: non byte read [ 364.957894][ T7521] kvm: pic: level sensitive irq not supported [ 364.957959][ T7521] kvm: pic: non byte read [ 364.958324][ T7521] kvm: pic: level sensitive irq not supported [ 364.958474][ T7521] kvm: pic: non byte read [ 364.958730][ T7521] kvm: pic: level sensitive irq not supported [ 364.958889][ T7521] kvm: pic: non byte read [ 365.357862][ T7535] Invalid argument reading file caps for ./file0 [ 366.226815][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.226834][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.226855][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.240672][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.240726][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.240804][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.140366][ T7223] hsr_slave_0: entered promiscuous mode [ 368.160660][ T7223] hsr_slave_1: entered promiscuous mode [ 368.161709][ T7223] debugfs: 'hsr0' already exists in 'hsr' [ 368.161737][ T7223] Cannot create hsr debugfs directory [ 368.494681][ T7570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.633098][ T7566] kvm: pic: non byte read [ 371.571360][ T1038] IPVS: starting estimator thread 0... [ 371.671685][ T7605] IPVS: using max 10 ests per chain, 24000 per kthread [ 371.735170][ T7085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 371.771770][ T7085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.887311][ T7085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 371.911176][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 371.911215][ T7610] netlink: 'syz.4.418': attribute type 18 has an invalid length. [ 371.911232][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 372.040371][ T7085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.121414][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 372.121458][ T7610] netlink: 'syz.4.418': attribute type 18 has an invalid length. [ 372.121475][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 372.341372][ T5737] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 372.477519][ T7085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.517108][ T7085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.519602][ T7085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.522613][ T5737] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 372.535425][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.603658][ T5737] usb 4-1: config 0 descriptor?? [ 372.830043][ T5737] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.832431][ T5737] [drm:udl_init] *ERROR* Selecting channel failed [ 372.933914][ T7085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.195863][ T1274] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.201023][ T33] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.205700][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.210633][ T3329] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.422497][ T5737] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 374.422529][ T5737] [drm] Initialized udl on minor 1 [ 374.477367][ T1273] bridge_slave_1: left allmulticast mode [ 374.477400][ T1273] bridge_slave_1: left promiscuous mode [ 374.477720][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.769806][ T5737] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.887199][ T1273] bridge_slave_0: left allmulticast mode [ 374.887238][ T1273] bridge_slave_0: left promiscuous mode [ 374.896058][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.964959][ T5737] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 375.085531][ T5737] usb 4-1: USB disconnect, device number 11 [ 375.239899][ T5721] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 375.429518][ T5721] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 375.434484][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.434548][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.324759][ T5721] as10x_usb: device has been detected [ 376.332135][ T5721] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 376.488591][ T5721] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 376.539103][ T7665] INFO: trying to register non-static key. [ 376.545218][ T7665] The code is fine but needs lockdep annotation, or maybe [ 376.552378][ T7665] you didn't initialize this object before use? [ 376.558866][ T7665] turning off the locking correctness validator. [ 376.565281][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.4.425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.576626][ T7665] Tainted: [L]=SOFTLOCKUP [ 376.580982][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.591085][ T7665] Call Trace: [ 376.594429][ T7665] [ 376.597417][ T7665] dump_stack_lvl+0xe8/0x150 [ 376.602050][ T7665] assign_lock_key+0x133/0x150 [ 376.606853][ T7665] register_lock_class+0xcc/0x2e0 [ 376.612107][ T7665] ? __lock_acquire+0x747/0x2de0 [ 376.617107][ T7665] __lock_acquire+0x10c/0x2de0 [ 376.621930][ T7665] ? __lock_acquire+0x747/0x2de0 [ 376.627004][ T7665] ? __lock_acquire+0x747/0x2de0 [ 376.632011][ T7665] lock_acquire+0x115/0x350 [ 376.636663][ T7665] ? as102_stream_ctrl+0x27/0xc0 [ 376.641669][ T7665] ? as102_stream_ctrl+0x27/0xc0 [ 376.646694][ T7665] ? as102_stream_ctrl+0x27/0xc0 [ 376.651687][ T7665] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 376.658007][ T7665] ? as102_stream_ctrl+0x27/0xc0 [ 376.663118][ T7665] as102_stream_ctrl+0x27/0xc0 [ 376.667952][ T7665] __dvb_frontend_open+0x2ef/0xc40 [ 376.673101][ T7665] ? mutex_lock_nested+0x152/0x1d0 [ 376.678352][ T7665] ? __pfx_dvb_frontend_open+0x10/0x10 [ 376.684029][ T7665] dvb_device_open+0x258/0x350 [ 376.689029][ T7665] chrdev_open+0x4dc/0x600 [ 376.693502][ T7665] ? __pfx_chrdev_open+0x10/0x10 [ 376.698467][ T7665] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 376.704835][ T7665] ? __pfx_chrdev_open+0x10/0x10 [ 376.709801][ T7665] do_dentry_open+0x849/0x1420 [ 376.714596][ T7665] vfs_open+0x3b/0x350 [ 376.718994][ T7665] ? path_openat+0x142d/0x1d60 [ 376.723976][ T7665] path_openat+0x1448/0x1d60 [ 376.728628][ T7665] do_file_open+0x23e/0x4a0 [ 376.733258][ T7665] ? __pfx_do_file_open+0x10/0x10 [ 376.739027][ T7665] ? alloc_fd+0x654/0x6d0 [ 376.743410][ T7665] do_sys_openat2+0x115/0x200 [ 376.748152][ T7665] ? __se_sys_futex+0x3a8/0x450 [ 376.753242][ T7665] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.758585][ T7665] ? rcu_is_watching+0x16/0xb0 [ 376.763667][ T7665] __x64_sys_openat+0x138/0x170 [ 376.768567][ T7665] do_syscall_64+0x166/0x520 [ 376.773195][ T7665] ? trace_irq_disable+0x3b/0x140 [ 376.778246][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.784363][ T7665] ? clear_bhb_loop+0x70/0xc0 [ 376.789280][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.795307][ T7665] RIP: 0033:0x7f2c8252ed8e [ 376.799847][ T7665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.819741][ T7665] RSP: 002b:00007f2c807a4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.828288][ T7665] RAX: ffffffffffffffda RBX: 00007f2c807a56c0 RCX: 00007f2c8252ed8e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.836295][ T7665] RDX: 0000000000000802 RSI: 00007f2c807a4c00 RDI: ffffffffffffff9c [ 376.844393][ T7665] RBP: 00007f2c807a4c00 R08: 0000000000000000 R09: 0000000000000000 [ 376.852389][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 376.860562][ T7665] R13: 00007f2c827f6128 R14: 00007f2c827f6090 R15: 00007ffc4c237968 [ 376.868571][ T7665] [ 376.880019][ T5721] as10x_usb: error during firmware upload part1 [ 376.880447][ T5721] Registered device Abilis Systems DVB-Titan [ 377.052314][ T5721] usb 5-1: USB disconnect, device number 8 [ 377.087642][ T5721] Unregistered device Abilis Systems DVB-Titan [ 377.092035][ T5721] as10x_usb: device has been disconnected [ 377.136663][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.357291][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.417268][ T1273] bond0 (unregistering): Released all slaves [ 377.707089][ T7649] warning: `syz.3.424' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.807657][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 378.956268][ T1273] hsr_slave_0: left promiscuous mode [ 378.976265][ T1273] hsr_slave_1: left promiscuous mode [ 378.977098][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.018214][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.336756][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 379.356662][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 381.908951][ T1273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.028226][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 382.179798][ T1273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.458719][ T1273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.497308][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 382.739255][ T1273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.824334][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 383.247623][ T1273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.297347][ T5248] 8021q: adding VLAN 0 to HW filter on device eth12 [ 383.518005][ T1273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.787673][ T1273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.811205][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 384.047734][ T1273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.130561][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14 [ 384.526880][ T1273] bridge_slave_1: left allmulticast mode [ 384.526907][ T1273] bridge_slave_1: left promiscuous mode [ 384.527068][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.676834][ T1273] bridge_slave_0: left allmulticast mode [ 384.676861][ T1273] bridge_slave_0: left promiscuous mode [ 384.677017][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.877023][ T1273] bridge_slave_1: left allmulticast mode [ 384.877048][ T1273] bridge_slave_1: left promiscuous mode [ 384.877170][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.977032][ T1273] bridge_slave_0: left allmulticast mode [ 384.977067][ T1273] bridge_slave_0: left promiscuous mode [ 384.977227][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.196461][ T1273] bridge_slave_1: left allmulticast mode [ 385.196494][ T1273] bridge_slave_1: left promiscuous mode [ 385.196663][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.296651][ T1273] bridge_slave_0: left allmulticast mode [ 385.296676][ T1273] bridge_slave_0: left promiscuous mode [ 385.296807][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.836667][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.916620][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.977480][ T1273] bond0 (unregistering): Released all slaves [ 386.316578][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.396624][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.417882][ T1273] bond0 (unregistering): Released all slaves