last executing test programs: 37.159290662s ago: executing program 0 (id=800): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de054a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000005c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000480)=[@window={0x3, 0x1, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x3, 0x9}, @sack_perm, @timestamp], 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xffe}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d", 0x1c}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d1bdaaf35826dc04373837263fdf17c4b2639c8819e6d203132318162b1501b0ff936", 0x8a}, {&(0x7f0000000200)="57247d533633c256b37c6a4aedc53a12d585f860d01b94eb8637345f22ac54c74196f711", 0x24}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) 30.93468567s ago: executing program 0 (id=823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x1}, 0xffffff88) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) 29.875450932s ago: executing program 0 (id=824): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 29.708269551s ago: executing program 0 (id=826): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e38, 0x8}, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host}, 0x400, "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"}, 0x418}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb70280000080003000300000018000400aaaaaaaaaabb000008000500", @ANYRES32=r5], 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r0, &(0x7f00000000c0)=0x58, 0x5) 28.434746398s ago: executing program 0 (id=832): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x800000, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)="fc3dc377bc9a8af2c677695259b8895bd0e563a01090269cc895104e321b8fe46ed06fc1584b96c9874845cdaf540b670f3c1f19cd8956f4b7216314e6a77eeab40bc66b609bfe2a263b99c5") r0 = gettid() tkill(r0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 27.547503661s ago: executing program 0 (id=833): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de054a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000005c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000480)=[@window={0x3, 0x1, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x3, 0x9}, @sack_perm, @timestamp], 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xffe}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d", 0x1c}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d1bdaaf35826dc04373837263fdf17c4b2639c8819e6d203132318162b1501b0ff936", 0x8a}, {&(0x7f0000000200)="57247d533633c256b37c6a4aedc53a12d585f860d01b94eb8637345f22ac54c74196f711", 0x24}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0) 14.872991283s ago: executing program 4 (id=867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000000)={0x0, r2}) r3 = socket(0x2, 0x3, 0x6) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003a00)) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/56, 0xffffffffffffffcb}], 0x2, 0x0, 0x0, 0xf5ffffff}, 0x40013e20) 10.336441957s ago: executing program 3 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.064322099s ago: executing program 2 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 8.863419277s ago: executing program 2 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xac, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}}, 0x8080) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, 0x0, 0x4000001) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 8.643571093s ago: executing program 3 (id=883): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) mknod(0x0, 0x8001420, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host}, 0x400, "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"}, 0x418}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb70280000080003000300000018000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r0, &(0x7f00000000c0)=0x58, 0x5) 8.640206773s ago: executing program 4 (id=884): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c060000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = msgget$private(0x0, 0x8d) msgsnd(r3, 0x0, 0xc, 0x0) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x4c, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 8.628475034s ago: executing program 1 (id=885): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.548089114s ago: executing program 2 (id=886): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xda, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f00000003c0), 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x11c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x588b}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004}, 0x804) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, 0x0, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff) r12 = add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$setperm(0x5, r12, 0x1c100800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000001d003700000008000300", @ANYRES32=r10, @ANYBLOB="080026008b03000008009f000400000008009f0001000000080057001f"], 0x3c}}, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000700)=0x7) 7.231367615s ago: executing program 4 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.23997222s ago: executing program 2 (id=888): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0xc8e, 0x0) dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 6.122954243s ago: executing program 4 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x1}, 0xffffff88) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) 5.906604428s ago: executing program 3 (id=890): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x4d, "97e459420578769f1cd0ba4758109eca771bbe5646cbbd7cd296ba0869cc8f8b0abfb8da402a2e28e6004e7178bfe6718bff57a73592b755abf37609aa58983445d1437f9ea674708c411ef25c"}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x1e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7f) r2 = socket$inet(0x2, 0x2000080001, 0x84) sendto$inet(r2, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.902355769s ago: executing program 1 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5.004185872s ago: executing program 4 (id=892): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="c8ed6cecf1bd"}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00002cbd7000fcdbdf256500000008000100070000000c1003800810008004100200df87c0b1a1d3cdd4cf397aa35d32fec0a86cca53a9f77e59f498affe7be88edadefcb794f686d4cc514896d4300d58fd0b4bacc823ac0d90784d717cc4f2f9cac739475b5e661d4715edc3463426630d54319cf22a59e55d7d90e700af64bf3ff4a2794132e1b9179ffb79658b949e381d5e929010bee78ef9ebe23605484028bb39aa05d8e7c9a042178cb72b82a8b0aa6d6c16b1b489a06260413fda5009d70127a3ac3384efdcc94dd52a48753ddbf77c1ed81e781fd5ee6990378eaf3cc7e34e7b0996e2e6aa1e7bb201c4e43cf2f55ef3f4f1f78c1307df2f9f894d6cfa1639529e96666a8de908b496c1c294e0c7c260e89e6f9afa2f6aa33a5a7ebc529371c87d3f51037e71ea784d0e646fd132b95c98a785eb243320bf224c529818bf1cb1d283fd79ba9eec72b85def23bad5e0077b175935f4494fb7ddb2eb53df1748be56f5e6d8ea509ddd566306ee5e7aa77669894fc09956d2ec0bd9c5c5a0a6df1f0f168399e48e09f14cfee69fe1a8b33925eb9e8652172c881942b9212f8993350d6d153cbcedac135f3cca89a438c36249d0d2edf5d6afdd73408364570bbceb43a02c885cbbe92ebabe4d4c23059de68a4eaee67c7420e9933a04c26d28f407906957207f6d4800c6c3a45d067c7dc7a56d6a7a93e8794e17049a199fcdf0ca5839ed7cc5162de1ea1425a4e43e1de17c798665987f2bead1accc672c58f154f748a5f52a763b73645fd1c09a265dcf739e72c65caea433840a1d6272d6de9a45c1760823a708be23d7b63fb344502edadf27ec7e74c680a88e0dae6a000d7cb77366a764cf8ac3139bf3e5c5d024aa41c76535f1acc26c660b387b6e51bacac5ea64868bcde5"], 0x1028}}, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, 0x0) 4.895871145s ago: executing program 2 (id=893): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x800000, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)="fc3dc377bc9a8af2c677695259b8895bd0e563a01090269cc895104e321b8fe46ed06fc1584b96c9874845cdaf540b670f3c1f19cd8956f4b7216314e6a77eeab40bc66b609bfe2a263b99c5") gettid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.995918089s ago: executing program 1 (id=894): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.839550377s ago: executing program 2 (id=895): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) r2 = syz_io_uring_setup(0x366b, &(0x7f0000000c80)={0x0, 0x0, 0x13791}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001900)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r5}, 0x10) io_uring_enter(r2, 0x4a76, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 3.779226134s ago: executing program 1 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5], 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r6, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000010401"], 0x24}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff}}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3.628243931s ago: executing program 3 (id=897): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000180)=0x4) 2.902121135s ago: executing program 3 (id=898): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(0xffffffffffffffff, 0x801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c060000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = msgget$private(0x0, 0x8d) msgsnd(r2, 0x0, 0xc, 0x0) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x4c, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.659581938s ago: executing program 1 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 290.891717ms ago: executing program 1 (id=900): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) mknod(0x0, 0x8001420, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host}, 0x400, "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"}, 0x418}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb70280000080003000300000018000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r0, &(0x7f00000000c0)=0x58, 0x5) 272.232708ms ago: executing program 3 (id=901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x1}, 0xffffff88) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) 0s ago: executing program 4 (id=902): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x965176466752e4ce, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x20020}}}}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) r6 = msgget(0x2, 0x24) msgrcv(r6, &(0x7f00000001c0)={0x0, ""/101}, 0x6d, 0x0, 0x2000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r5, @ANYRESOCT], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="0b2a0200000000009c26196c20ffe5"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r9, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): T4523] tipc: Enabling of bearer rejected, already enabled [ 149.464235][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.478766][ T4529] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 149.857321][ T4529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.956230][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 150.245637][ T4537] loop1: detected capacity change from 0 to 8 [ 151.385434][ T4541] netlink: 'syz.4.214': attribute type 2 has an invalid length. [ 151.441553][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 151.451015][ T4542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.215'. [ 151.918410][ T4550] hub 2-0:1.0: USB hub found [ 151.948557][ T4550] hub 2-0:1.0: 1 port detected [ 151.975311][ T4552] netlink: 84 bytes leftover after parsing attributes in process `syz.0.218'. [ 152.118732][ T4557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.219'. [ 152.811211][ T4566] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 153.428071][ T4566] team0: Port device netdevsim0 added [ 154.743878][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 155.159481][ T4584] loop0: detected capacity change from 0 to 8 [ 155.933129][ T4587] netlink: 'syz.3.227': attribute type 2 has an invalid length. [ 156.697854][ T4599] tipc: Started in network mode [ 156.703016][ T4599] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.713800][ T4599] tipc: Enabled bearer , priority 10 [ 157.711642][ T3613] tipc: Node number set to 2886997162 [ 158.885976][ T4615] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 159.621932][ T4614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 159.860776][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 159.869728][ T4623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.234'. [ 161.371327][ T3561] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.641334][ T3561] usb 3-1: Using ep0 maxpacket: 8 [ 161.921525][ T4640] loop4: detected capacity change from 0 to 8 [ 162.543807][ T3561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.555265][ T3561] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.564414][ T3561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.577193][ T3561] usb 3-1: config 0 descriptor?? [ 162.583836][ T4641] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 162.842608][ T3561] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.133709][ T4648] hub 2-0:1.0: USB hub found [ 163.152673][ T4648] hub 2-0:1.0: 1 port detected [ 163.382424][ T4656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.247'. [ 164.706579][ T1075] usb 3-1: USB disconnect, device number 3 [ 164.733993][ T1075] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 165.810760][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 165.997814][ T4672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 166.098425][ T4689] loop1: detected capacity change from 0 to 8 [ 167.067650][ T4694] netlink: 'syz.4.257': attribute type 2 has an invalid length. [ 167.173609][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 169.444901][ T4709] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 170.470762][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.379730][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 171.420829][ T3613] usb 5-1: Using ep0 maxpacket: 8 [ 171.540704][ T3613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.633497][ T3613] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.963876][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.998442][ T3613] usb 5-1: config 0 descriptor?? [ 172.942151][ T3613] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 173.007577][ T4735] loop3: detected capacity change from 0 to 8 [ 173.731675][ T3613] usb 5-1: USB disconnect, device number 4 [ 173.787427][ T3613] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 174.048273][ T4743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.268'. [ 174.057516][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.268'. [ 174.066497][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.268'. [ 174.813764][ T4742] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 175.161245][ T4755] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 176.264247][ T4758] netlink: 'syz.3.271': attribute type 2 has an invalid length. [ 176.474302][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 176.637899][ T4763] hub 2-0:1.0: USB hub found [ 177.378855][ T4763] hub 2-0:1.0: 1 port detected [ 178.637030][ T3578] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 178.648104][ T3578] CPU: 1 PID: 3578 Comm: kworker/u5:4 Not tainted 5.15.169-syzkaller #0 [ 178.656489][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.666546][ T3578] Workqueue: hci3 hci_rx_work [ 178.671232][ T3578] Call Trace: [ 178.674521][ T3578] [ 178.677462][ T3578] dump_stack_lvl+0x1e3/0x2d0 [ 178.682180][ T3578] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 178.687850][ T3578] ? panic+0x860/0x860 [ 178.691949][ T3578] ? sysfs_create_dir_ns+0x282/0x390 [ 178.697272][ T3578] sysfs_create_dir_ns+0x2c6/0x390 [ 178.702417][ T3578] ? sysfs_warn_dup+0xa0/0xa0 [ 178.707124][ T3578] ? do_raw_spin_unlock+0x137/0x8b0 [ 178.712360][ T3578] kobject_add_internal+0x6e0/0xe00 [ 178.717594][ T3578] kobject_add+0x14e/0x210 [ 178.722037][ T3578] ? device_add+0x3c2/0xfd0 [ 178.726574][ T3578] ? kobject_init+0x1d0/0x1d0 [ 178.731268][ T3578] ? __raw_spin_lock_init+0x41/0x100 [ 178.736578][ T3578] ? get_device_parent+0x128/0x400 [ 178.741712][ T3578] device_add+0x476/0xfd0 [ 178.746071][ T3578] hci_conn_add_sysfs+0xe4/0x1f0 [ 178.751027][ T3578] le_conn_complete_evt+0xc15/0x1500 [ 178.756341][ T3578] ? cs_le_create_conn+0x5f0/0x5f0 [ 178.761482][ T3578] hci_le_meta_evt+0x28c/0x3f50 [ 178.766352][ T3578] ? __lock_acquire+0x1ff0/0x1ff0 [ 178.771398][ T3578] ? __mutex_lock_common+0x444/0x25a0 [ 178.776796][ T3578] ? hci_remote_host_features_evt+0x280/0x280 [ 178.782882][ T3578] ? __mutex_unlock_slowpath+0x218/0x750 [ 178.788528][ T3578] ? hci_event_packet+0x3b4/0x1550 [ 178.793685][ T3578] ? mutex_unlock+0x10/0x10 [ 178.798213][ T3578] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 178.804218][ T3578] ? print_irqtrace_events+0x210/0x210 [ 178.809700][ T3578] hci_event_packet+0xc41/0x1550 [ 178.814666][ T3578] ? rcu_lock_release+0x20/0x20 [ 178.819548][ T3578] ? hci_send_to_monitor+0x99/0x4d0 [ 178.824766][ T3578] hci_rx_work+0x232/0x990 [ 178.829213][ T3578] process_one_work+0x8a1/0x10c0 [ 178.834189][ T3578] ? worker_detach_from_pool+0x260/0x260 [ 178.839848][ T3578] ? _raw_spin_lock_irqsave+0x120/0x120 [ 178.845415][ T3578] ? kthread_data+0x4e/0xc0 [ 178.849939][ T3578] ? wq_worker_running+0x97/0x170 [ 178.855039][ T3578] worker_thread+0xaca/0x1280 [ 178.859765][ T3578] kthread+0x3f6/0x4f0 [ 178.863865][ T3578] ? rcu_lock_release+0x20/0x20 [ 178.868734][ T3578] ? kthread_blkcg+0xd0/0xd0 [ 178.873351][ T3578] ret_from_fork+0x1f/0x30 [ 178.877813][ T3578] [ 178.900081][ T3578] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.913460][ T3578] Bluetooth: hci3: failed to register connection device [ 179.050401][ T26] audit: type=1326 audit(1729673404.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.3.278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f400aaa9ff9 code=0x0 [ 179.483602][ T4791] loop0: detected capacity change from 0 to 8 [ 180.530703][ T4793] netlink: 14 bytes leftover after parsing attributes in process `syz.3.282'. [ 180.624683][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 180.896908][ T3613] Bluetooth: hci1: command 0x0406 tx timeout [ 180.907061][ T3613] Bluetooth: hci3: command 0x0406 tx timeout [ 181.109554][ T4793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.130810][ T4793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.144188][ T4793] bond0 (unregistering): Released all slaves [ 181.853251][ T4797] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 182.272688][ T4809] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 183.369892][ T4811] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 184.518764][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 184.708352][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 184.719995][ T3577] CPU: 1 PID: 3577 Comm: kworker/u5:3 Not tainted 5.15.169-syzkaller #0 [ 184.728362][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.738440][ T3577] Workqueue: hci1 hci_rx_work [ 184.743156][ T3577] Call Trace: [ 184.746445][ T3577] [ 184.749383][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 184.754076][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 184.759714][ T3577] ? panic+0x860/0x860 [ 184.763789][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 184.769077][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 184.774193][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 184.778877][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 184.784087][ T3577] kobject_add_internal+0x6e0/0xe00 [ 184.789337][ T3577] kobject_add+0x14e/0x210 [ 184.793759][ T3577] ? device_add+0x3c2/0xfd0 [ 184.798264][ T3577] ? kobject_init+0x1d0/0x1d0 [ 184.802957][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 184.808242][ T3577] ? get_device_parent+0x128/0x400 [ 184.813356][ T3577] device_add+0x476/0xfd0 [ 184.817699][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 184.822637][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 184.827937][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 184.833064][ T3577] hci_le_meta_evt+0x28c/0x3f50 [ 184.837921][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 184.842965][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 184.848352][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 184.854513][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 184.860146][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 184.865262][ T3577] ? mutex_unlock+0x10/0x10 [ 184.869770][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 184.875752][ T3577] ? print_irqtrace_events+0x210/0x210 [ 184.881214][ T3577] hci_event_packet+0xc41/0x1550 [ 184.886181][ T3577] ? rcu_lock_release+0x20/0x20 [ 184.891042][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 184.896248][ T3577] hci_rx_work+0x232/0x990 [ 184.900677][ T3577] process_one_work+0x8a1/0x10c0 [ 184.905630][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 184.911275][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 184.916833][ T3577] ? kthread_data+0x4e/0xc0 [ 184.921337][ T3577] ? wq_worker_running+0x97/0x170 [ 184.926366][ T3577] worker_thread+0xaca/0x1280 [ 184.931048][ T3577] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 184.936963][ T3577] kthread+0x3f6/0x4f0 [ 184.941033][ T3577] ? rcu_lock_release+0x20/0x20 [ 184.945885][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 184.950478][ T3577] ret_from_fork+0x1f/0x30 [ 184.954906][ T3577] [ 185.351376][ T1078] Bluetooth: hci3: command 0x0406 tx timeout [ 185.358656][ T3577] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.373905][ T3577] Bluetooth: hci1: failed to register connection device [ 185.466454][ T26] audit: type=1326 audit(1729673411.281:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.2.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ec45a7ff9 code=0x0 [ 185.856494][ T4845] loop3: detected capacity change from 0 to 8 [ 187.219125][ T4849] netlink: 128 bytes leftover after parsing attributes in process `syz.1.297'. [ 187.228194][ T4849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 187.237169][ T4849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 187.770184][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 188.014435][ T4859] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 188.055428][ T4852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.097306][ T4869] netlink: 'syz.0.303': attribute type 2 has an invalid length. [ 189.464775][ T4871] 9pnet_virtio: no channels available for device syz [ 190.326435][ T4875] overlayfs: overlapping lowerdir path [ 190.392476][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 190.402498][ T3577] CPU: 1 PID: 3577 Comm: kworker/u5:3 Not tainted 5.15.169-syzkaller #0 [ 190.410845][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.420897][ T3577] Workqueue: hci4 hci_rx_work [ 190.425598][ T3577] Call Trace: [ 190.428898][ T3577] [ 190.431818][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 190.436491][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 190.442159][ T3577] ? panic+0x860/0x860 [ 190.446262][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 190.451570][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 190.456692][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 190.461385][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 190.466610][ T3577] kobject_add_internal+0x6e0/0xe00 [ 190.471829][ T3577] kobject_add+0x14e/0x210 [ 190.476284][ T3577] ? device_add+0x3c2/0xfd0 [ 190.480778][ T3577] ? kobject_init+0x1d0/0x1d0 [ 190.485468][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 190.490760][ T3577] ? get_device_parent+0x128/0x400 [ 190.495873][ T3577] device_add+0x476/0xfd0 [ 190.500209][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 190.505146][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 190.510446][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 190.515579][ T3577] hci_le_meta_evt+0x28c/0x3f50 [ 190.520425][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 190.525440][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 190.530808][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 190.536869][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 190.542489][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 190.547595][ T3577] ? mutex_unlock+0x10/0x10 [ 190.552093][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 190.558070][ T3577] ? print_irqtrace_events+0x210/0x210 [ 190.563523][ T3577] hci_event_packet+0xc41/0x1550 [ 190.568472][ T3577] ? rcu_lock_release+0x20/0x20 [ 190.573342][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 190.578543][ T3577] hci_rx_work+0x232/0x990 [ 190.582978][ T3577] process_one_work+0x8a1/0x10c0 [ 190.587924][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 190.593557][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 190.599108][ T3577] ? kthread_data+0x4e/0xc0 [ 190.603641][ T3577] ? wq_worker_running+0x97/0x170 [ 190.608712][ T3577] worker_thread+0xaca/0x1280 [ 190.613385][ T3577] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 190.619294][ T3577] kthread+0x3f6/0x4f0 [ 190.623362][ T3577] ? rcu_lock_release+0x20/0x20 [ 190.628213][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 190.632810][ T3577] ret_from_fork+0x1f/0x30 [ 190.637247][ T3577] [ 190.648483][ T3577] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.661793][ T3577] Bluetooth: hci4: failed to register connection device [ 190.763750][ T26] audit: type=1326 audit(1729673416.581:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.0.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x0 [ 191.892031][ T3644] Bluetooth: hci1: command 0x0406 tx timeout [ 192.047068][ T4920] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 193.801140][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.820032][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.093895][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 194.103550][ T3577] CPU: 0 PID: 3577 Comm: kworker/u5:3 Not tainted 5.15.169-syzkaller #0 [ 194.111879][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.121960][ T3577] Workqueue: hci4 hci_rx_work [ 194.126680][ T3577] Call Trace: [ 194.129994][ T3577] [ 194.132923][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 194.137596][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 194.143222][ T3577] ? panic+0x860/0x860 [ 194.147289][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 194.152579][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 194.157713][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 194.162397][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 194.167626][ T3577] kobject_add_internal+0x6e0/0xe00 [ 194.172844][ T3577] kobject_add+0x14e/0x210 [ 194.177269][ T3577] ? device_add+0x3c2/0xfd0 [ 194.181770][ T3577] ? kobject_init+0x1d0/0x1d0 [ 194.186452][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 194.191739][ T3577] ? get_device_parent+0x128/0x400 [ 194.196848][ T3577] device_add+0x476/0xfd0 [ 194.201182][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 194.206118][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 194.211407][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 194.216530][ T3577] hci_le_meta_evt+0x28c/0x3f50 [ 194.221382][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 194.226409][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 194.231782][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 194.237847][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 194.243476][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 194.248587][ T3577] ? mutex_unlock+0x10/0x10 [ 194.253093][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 194.259071][ T3577] ? print_irqtrace_events+0x210/0x210 [ 194.264535][ T3577] hci_event_packet+0xc41/0x1550 [ 194.269482][ T3577] ? rcu_lock_release+0x20/0x20 [ 194.274352][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 194.279557][ T3577] hci_rx_work+0x232/0x990 [ 194.283991][ T3577] process_one_work+0x8a1/0x10c0 [ 194.288941][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 194.294613][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 194.300158][ T3577] ? kthread_data+0x4e/0xc0 [ 194.304657][ T3577] ? wq_worker_running+0x97/0x170 [ 194.309680][ T3577] worker_thread+0xaca/0x1280 [ 194.314361][ T3577] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 194.320274][ T3577] kthread+0x3f6/0x4f0 [ 194.324342][ T3577] ? rcu_lock_release+0x20/0x20 [ 194.329190][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 194.333782][ T3577] ret_from_fork+0x1f/0x30 [ 194.338207][ T3577] [ 194.343070][ T3577] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.357756][ T3577] Bluetooth: hci4: failed to register connection device [ 194.441788][ T26] audit: type=1326 audit(1729673420.261:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x0 [ 194.562610][ T4950] loop4: detected capacity change from 0 to 512 [ 194.573944][ T4950] EXT4-fs (loop4): Ignoring removed oldalloc option [ 194.650333][ T4950] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.688010][ T4950] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 195.055772][ T4964] loop4: detected capacity change from 0 to 8 [ 197.431153][ T3611] Bluetooth: hci4: command 0x0406 tx timeout [ 197.555315][ T4993] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 198.616881][ T5017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.995915][ T5028] tipc: Started in network mode [ 199.001072][ T5028] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.009936][ T5028] tipc: Enabled bearer , priority 10 [ 200.009952][ T3613] tipc: Node number set to 2886997162 [ 201.030031][ T5040] netlink: 168 bytes leftover after parsing attributes in process `syz.1.336'. [ 201.231832][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 201.816021][ T4354] Bluetooth: hci4: command 0x0406 tx timeout [ 203.259923][ T3611] Bluetooth: hci3: command 0x0409 tx timeout [ 203.568353][ T5077] x_tables: duplicate underflow at hook 2 [ 204.111998][ T5091] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 205.789976][ T3613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.060019][ T3613] usb 3-1: Using ep0 maxpacket: 8 [ 206.399995][ T3613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 206.409906][ T3613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.447531][ T3613] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 206.599990][ T3613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 206.617117][ T3613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.661452][ T3613] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 206.790138][ T3613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 206.803114][ T3613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.865949][ T3613] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 206.948474][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 207.150011][ T3613] usb 3-1: string descriptor 0 read error: -22 [ 207.157635][ T3613] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 207.195390][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.156449][ T3613] adutux 3-1:168.0: interrupt endpoints not found [ 208.191978][ T5108] ======================================================= [ 208.191978][ T5108] WARNING: The mand mount option has been deprecated and [ 208.191978][ T5108] and is ignored by this kernel. Remove the mand [ 208.191978][ T5108] option from the mount to silence this warning. [ 208.191978][ T5108] ======================================================= [ 208.468518][ T5151] Zero length message leads to an empty skb [ 208.496303][ T3613] usb 3-1: USB disconnect, device number 4 [ 208.537826][ T5159] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 209.312428][ T5151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 209.319185][ T5151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.377650][ T5151] vhci_hcd vhci_hcd.0: Device attached [ 209.566125][ T5157] kvm: emulating exchange as write [ 209.660056][ T3644] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 209.689961][ T3561] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.210014][ T3561] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.239475][ T3561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.284739][ T5162] vhci_hcd: connection reset by peer [ 211.301609][ T154] vhci_hcd: stop threads [ 211.313154][ T154] vhci_hcd: release socket [ 211.324663][ T3561] usb 2-1: Product: syz [ 211.338542][ T3561] usb 2-1: Manufacturer: syz [ 211.344051][ T3561] usb 2-1: SerialNumber: syz [ 211.366304][ T154] vhci_hcd: disconnect device [ 211.411771][ T3561] usb 2-1: can't set config #1, error -71 [ 211.455059][ T3561] usb 2-1: USB disconnect, device number 4 [ 211.549940][ T3613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.960046][ T3613] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.984246][ T3613] usb 3-1: config 0 has no interfaces? [ 212.156361][ T26] audit: type=1326 audit(1729673437.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c245e1fa7 code=0x7ffc0000 [ 212.221865][ T26] audit: type=1326 audit(1729673438.001:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c24586959 code=0x7ffc0000 [ 212.293940][ T26] audit: type=1326 audit(1729673438.001:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c245e1fa7 code=0x7ffc0000 [ 212.377463][ T26] audit: type=1326 audit(1729673438.001:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c24586959 code=0x7ffc0000 [ 212.450006][ T3613] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.487655][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.497923][ T26] audit: type=1326 audit(1729673438.001:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c245e1fa7 code=0x7ffc0000 [ 212.546963][ T3613] usb 3-1: Product: syz [ 212.564241][ T3613] usb 3-1: Manufacturer: syz [ 212.606432][ T3613] usb 3-1: SerialNumber: syz [ 212.617155][ T26] audit: type=1326 audit(1729673438.001:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c24586959 code=0x7ffc0000 [ 212.642656][ T3613] usb 3-1: config 0 descriptor?? [ 212.729697][ T26] audit: type=1326 audit(1729673438.001:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c245e1fa7 code=0x7ffc0000 [ 212.789907][ T1078] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.834596][ T26] audit: type=1326 audit(1729673438.001:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c24586959 code=0x7ffc0000 [ 212.863248][ T26] audit: type=1326 audit(1729673438.001:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c245e1fa7 code=0x7ffc0000 [ 213.021340][ T26] audit: type=1326 audit(1729673438.001:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c24586959 code=0x7ffc0000 [ 213.150855][ T1078] usb 1-1: Using ep0 maxpacket: 8 [ 213.930082][ T1078] usb 1-1: config 0 has no interfaces? [ 213.935666][ T1078] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.985993][ T1078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.059615][ T1078] usb 1-1: config 0 descriptor?? [ 214.389118][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 214.461887][ T3561] usb 3-1: USB disconnect, device number 5 [ 214.512217][ T7] usb 1-1: USB disconnect, device number 3 [ 214.570863][ T5230] netlink: 84 bytes leftover after parsing attributes in process `syz.2.390'. [ 214.999945][ T3644] vhci_hcd: vhci_device speed not set [ 215.359494][ T5255] netlink: 48 bytes leftover after parsing attributes in process `syz.1.392'. [ 215.552346][ T5259] loop4: detected capacity change from 0 to 512 [ 215.624138][ T5259] EXT4-fs (loop4): Ignoring removed oldalloc option [ 215.657257][ T5259] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.739972][ T5259] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 216.834438][ T5269] loop4: detected capacity change from 0 to 8 [ 216.949878][ T1078] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.090085][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.339866][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 218.148685][ T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.170200][ T7] usb 2-1: config 179 has no interface number 0 [ 218.176557][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.187741][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 218.199048][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.289652][ T5274] mkiss: ax0: crc mode is auto. [ 218.295124][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 218.327537][ T7] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.369949][ T1078] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.391707][ T1078] usb 3-1: config 0 has no interfaces? [ 218.396671][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 218.447316][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.530669][ T5271] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 218.848596][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 219.016427][ T7] usb 2-1: USB disconnect, device number 5 [ 219.039926][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 219.049302][ T7] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 219.106846][ T3562] udevd[3562]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 221.178206][ T5301] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 221.920049][ T1078] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.936001][ T1078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.950310][ T1078] usb 3-1: Product: syz [ 221.968647][ T1078] usb 3-1: config 0 descriptor?? [ 221.999983][ T1078] usb 3-1: can't set config #0, error -71 [ 222.024062][ T1078] usb 3-1: USB disconnect, device number 6 [ 222.105176][ T5309] chnl_net:caif_netlink_parms(): no params data found [ 223.223618][ T5329] syz.0.414 (5329) used greatest stack depth: 18672 bytes left [ 223.253832][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.261067][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.269250][ T5309] device bridge_slave_0 entered promiscuous mode [ 223.278695][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.300490][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.322161][ T5309] device bridge_slave_1 entered promiscuous mode [ 223.359918][ T1078] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 223.419233][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.433623][ T5333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.447834][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.503292][ T5309] team0: Port device team_slave_0 added [ 223.520986][ T5309] team0: Port device team_slave_1 added [ 223.556257][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.571272][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.605175][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.619968][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.627261][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.660165][ T3561] Bluetooth: hci2: command 0x0409 tx timeout [ 223.669249][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.726418][ T5309] device hsr_slave_0 entered promiscuous mode [ 223.740907][ T1078] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.750433][ T5309] device hsr_slave_1 entered promiscuous mode [ 223.750494][ T1078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.767657][ T5309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.787393][ T5309] Cannot create hsr debugfs directory [ 223.900142][ T1078] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.909343][ T1078] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.968776][ T1078] usb 5-1: Manufacturer: syz [ 223.990007][ T1078] usb 5-1: config 0 descriptor?? [ 224.068709][ T5341] netlink: 'syz.0.418': attribute type 2 has an invalid length. [ 224.117628][ T5309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.138374][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 224.179877][ T1078] rc_core: IR keymap rc-hauppauge not found [ 224.185814][ T1078] Registered IR keymap rc-empty [ 224.234151][ T5330] udc-core: couldn't find an available UDC or it's busy [ 224.269718][ T5309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.284633][ T1078] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 224.305747][ T5330] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.339471][ T1078] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 224.499112][ T5309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.598955][ T5309] team0: Port device netdevsim0 removed [ 224.633404][ T5309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.687513][ T26] kauditd_printk_skb: 720 callbacks suppressed [ 224.687529][ T26] audit: type=1326 audit(1729673450.501:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 224.789910][ T26] audit: type=1326 audit(1729673450.531:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 224.851585][ T3618] usb 5-1: USB disconnect, device number 5 [ 224.866454][ T5309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.880184][ T26] audit: type=1326 audit(1729673450.541:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa93d187990 code=0x7ffc0000 [ 224.935044][ T5309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.953102][ T5309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.969814][ T26] audit: type=1326 audit(1729673450.541:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 224.998914][ T5309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.049887][ T26] audit: type=1326 audit(1729673450.541:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 225.143156][ T26] audit: type=1326 audit(1729673450.541:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 225.227228][ T26] audit: type=1326 audit(1729673450.541:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 225.280010][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.311002][ T26] audit: type=1326 audit(1729673450.541:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93d188ff9 code=0x7ffc0000 [ 225.348312][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.363007][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.433899][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.490311][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.530295][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.539973][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.547077][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.763576][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.958844][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.175152][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.224411][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.231625][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.315207][ T3561] Bluetooth: hci2: command 0x041b tx timeout [ 226.355879][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.390901][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.440260][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.468551][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.521426][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.574859][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.580412][ T5366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.615437][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.646165][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.680695][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.701093][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.720406][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.731928][ T5373] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 226.750795][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.761221][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 227.108570][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.117081][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.145108][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.276027][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.463698][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.016292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.037038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.092847][ T5309] device veth0_vlan entered promiscuous mode [ 228.198870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.216067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.260200][ T5309] device veth1_vlan entered promiscuous mode [ 228.379886][ T3611] Bluetooth: hci2: command 0x040f tx timeout [ 228.440445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.451176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.471335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.481623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.504261][ T5309] device veth0_macvtap entered promiscuous mode [ 228.517967][ T5309] device veth1_macvtap entered promiscuous mode [ 228.575425][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.597448][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.619846][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.659843][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.687002][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.710547][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.726092][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.737081][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.747487][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.760722][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.774857][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.798425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.822700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.858886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.907635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.953561][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.999106][ T5396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.435'. [ 229.008234][ T5396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 229.017593][ T5396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 229.178044][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.359061][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.455460][ T5387] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 229.641223][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.710869][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.789469][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.838055][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.869233][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.883387][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.895057][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.911668][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.603665][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.685190][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.743116][ T3611] Bluetooth: hci2: command 0x0419 tx timeout [ 230.767634][ T5309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.794036][ T5309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.831404][ T5309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.876037][ T5309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.091337][ T5412] netlink: 'syz.4.441': attribute type 2 has an invalid length. [ 231.650828][ T1313] Bluetooth: hci4: command 0x0406 tx timeout [ 231.909020][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 232.228872][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.310286][ T5429] netlink: 128 bytes leftover after parsing attributes in process `syz.1.446'. [ 232.319313][ T5429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 232.328288][ T5429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 233.018543][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.081980][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.099584][ T3975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.127494][ T3975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.176589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.277582][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.315615][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.346964][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.364890][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.384875][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.401998][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.409474][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.417907][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.425368][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.433230][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.616892][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.624808][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.633622][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.667697][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.659900][ T1313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 234.872952][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.880630][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.888565][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.896056][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.903508][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.911339][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.918753][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.926197][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.934241][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.941883][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.949614][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.958122][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.978800][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.999939][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.007773][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.016443][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.032628][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 235.061384][ T5464] loop2: detected capacity change from 0 to 512 [ 235.067835][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.093421][ T4354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 235.104659][ T5462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.457'. [ 235.114146][ T5464] EXT4-fs (loop2): Ignoring removed oldalloc option [ 235.114255][ T5464] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.114653][ T5464] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 235.121217][ T1313] usb 5-1: config 0 has no interfaces? [ 235.148709][ T1313] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 235.158055][ T1313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.177081][ T1313] usb 5-1: config 0 descriptor?? [ 235.275479][ T4354] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 235.586849][ T4354] usb 5-1: USB disconnect, device number 6 [ 235.686775][ T5473] loop2: detected capacity change from 0 to 8 [ 236.803439][ T5479] usb usb9: usbfs: process 5479 (syz.3.463) did not claim interface 9 before use [ 237.499890][ T1313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.870145][ T1313] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 237.893618][ T1313] usb 2-1: config 0 has no interface number 1 [ 237.913459][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 237.933066][ T1313] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 237.994191][ T1313] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 238.070286][ T1313] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.222247][ T1313] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 238.292404][ T1313] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 238.335711][ T1313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.359442][ T1313] usb 2-1: config 0 descriptor?? [ 238.426507][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 238.446931][ T1313] usb 2-1: MIDIStreaming interface descriptor not found [ 238.484575][ T5512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'. [ 238.526382][ T5514] netlink: 'syz.2.475': attribute type 21 has an invalid length. [ 238.573901][ T5514] netlink: 128 bytes leftover after parsing attributes in process `syz.2.475'. [ 238.662388][ T5514] netlink: 'syz.2.475': attribute type 5 has an invalid length. [ 238.682571][ T1313] gspca_main: spca561-2.14.0 probing abcd:cdee [ 238.685780][ T5514] netlink: 3 bytes leftover after parsing attributes in process `syz.2.475'. [ 238.839983][ T1313] spca561: probe of 2-1:0.0 failed with error -22 [ 238.887025][ T1313] usb 2-1: USB disconnect, device number 6 [ 238.919902][ T3613] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 239.044110][ T5524] loop4: detected capacity change from 0 to 512 [ 239.136709][ T5524] EXT4-fs (loop4): Ignoring removed oldalloc option [ 239.187131][ T5524] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.248337][ T5524] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 239.279885][ T3613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.338989][ T3613] usb 4-1: config 0 has no interfaces? [ 239.655990][ T5531] loop4: detected capacity change from 0 to 8 [ 240.070700][ T5530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.379984][ T3613] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 240.442369][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.510784][ T3613] usb 4-1: Product: syz [ 240.532920][ T3613] usb 4-1: Manufacturer: syz [ 240.577185][ T3613] usb 4-1: SerialNumber: syz [ 240.623406][ T3613] usb 4-1: config 0 descriptor?? [ 240.765759][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 241.449972][ T3613] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 241.519685][ T5561] loop2: detected capacity change from 0 to 512 [ 241.607935][ T5561] EXT4-fs (loop2): Ignoring removed oldalloc option [ 241.626470][ T5561] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.673968][ T5561] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 241.809982][ T3613] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.980840][ T3613] usb 2-1: config 0 has no interfaces? [ 242.047273][ T5565] loop2: detected capacity change from 0 to 8 [ 242.757505][ T1313] usb 4-1: USB disconnect, device number 4 [ 242.971406][ T3613] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.980841][ T3613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.988860][ T3613] usb 2-1: Product: syz [ 242.993333][ T3613] usb 2-1: Manufacturer: syz [ 242.998622][ T3613] usb 2-1: SerialNumber: syz [ 243.007703][ T3613] usb 2-1: config 0 descriptor?? [ 243.162080][ T2660] tipc: Disabling bearer [ 243.167656][ T2660] tipc: Left network mode [ 243.440882][ T3611] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.690033][ T3611] usb 3-1: Using ep0 maxpacket: 16 [ 243.815593][ T3611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.707544][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 244.832899][ T2660] device hsr_slave_0 left promiscuous mode [ 244.844948][ T2660] device hsr_slave_1 left promiscuous mode [ 244.866988][ T2660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.874703][ T3611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.907276][ T2660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.928264][ T2660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.951096][ T2660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.971858][ T2660] device bridge_slave_1 left promiscuous mode [ 244.988568][ T3611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.009180][ T3611] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.029764][ T2660] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.038935][ T3611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.039090][ T2660] device bridge_slave_0 left promiscuous mode [ 245.103972][ T3611] usb 3-1: config 0 descriptor?? [ 245.119385][ T2660] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.182050][ T2660] device veth1_macvtap left promiscuous mode [ 245.188523][ T2660] device veth0_macvtap left promiscuous mode [ 245.208567][ T2660] device veth1_vlan left promiscuous mode [ 245.227273][ T2660] device veth0_vlan left promiscuous mode [ 245.647907][ T23] usb 2-1: USB disconnect, device number 7 [ 245.715979][ T5612] capability: warning: `syz.1.509' uses 32-bit capabilities (legacy support in use) [ 245.773931][ T3611] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input8 [ 246.007950][ T3611] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 246.311958][ T23] usb 3-1: USB disconnect, device number 7 [ 247.527936][ T2660] team0 (unregistering): Port device team_slave_1 removed [ 247.576997][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 247.597553][ T2660] team0 (unregistering): Port device team_slave_0 removed [ 249.259884][ T1313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.586977][ T5674] kvm: MONITOR instruction emulated as NOP! [ 249.604885][ T5677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 249.690080][ T1313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.695634][ T5678] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 249.720845][ T1313] usb 1-1: config 0 has no interfaces? [ 249.726394][ T1313] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 249.786876][ T1313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.815341][ T1313] usb 1-1: config 0 descriptor?? [ 249.857956][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.867273][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.041691][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.048884][ T5678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.056399][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.063555][ T5678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.194981][ T5678] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 250.594008][ T5703] futex_wake_op: syz.0.526 tries to shift op by 144; fix this program [ 251.180210][ T1075] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.820033][ T1075] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 251.840570][ T1075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.866432][ T1075] usb 5-1: Product: syz [ 251.875323][ T1075] usb 5-1: Manufacturer: syz [ 251.885915][ T1075] usb 5-1: SerialNumber: syz [ 251.908641][ T1075] usb 5-1: config 0 descriptor?? [ 252.168637][ T1313] usb 1-1: USB disconnect, device number 4 [ 252.419899][ T3613] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 252.420362][ T1075] usb-storage 5-1:0.0: USB Mass Storage device detected [ 252.582940][ T1075] usb 5-1: USB disconnect, device number 7 [ 252.659815][ T3613] usb 4-1: Using ep0 maxpacket: 8 [ 252.782152][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.813162][ T3613] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.854007][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.908865][ T3613] usb 4-1: config 0 descriptor?? [ 253.202756][ T3613] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 253.269963][ T1313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 253.580996][ T1313] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 253.670166][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.689002][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.717327][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.810131][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.829204][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.846582][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.930047][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.956275][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.003924][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.133067][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.156861][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.233539][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.253702][ T5748] syzkaller0: mtu greater than device maximum [ 254.359985][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.387185][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.468233][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.600114][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.626692][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.695529][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.110236][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.116592][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.238509][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.279015][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.320089][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.358826][ T3613] usb 4-1: USB disconnect, device number 5 [ 255.369372][ T3613] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 255.420445][ T1313] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.433163][ T5759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.559'. [ 255.449994][ T1313] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.471568][ T1313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.629922][ T1313] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 255.650624][ T1313] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 255.691352][ T1313] usb 1-1: Product: syz [ 255.696517][ T1313] usb 1-1: Manufacturer: syz [ 255.705301][ T1313] usb 1-1: SerialNumber: syz [ 255.771900][ T1313] usb 1-1: config 0 descriptor?? [ 255.802579][ T5770] netlink: 84 bytes leftover after parsing attributes in process `syz.3.564'. [ 255.828168][ T1313] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 255.938063][ T5776] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.565'. [ 256.019846][ T1313] usb 1-1: USB disconnect, device number 5 [ 256.047065][ T1313] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 257.870648][ T3613] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.900234][ T1313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 258.132104][ T3613] usb 4-1: Using ep0 maxpacket: 8 [ 258.161442][ T1313] usb 2-1: Using ep0 maxpacket: 16 [ 258.252147][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.282375][ T1313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.299396][ T3613] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.327838][ T1313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.348048][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.368777][ T1313] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 258.405587][ T3613] usb 4-1: config 0 descriptor?? [ 258.414491][ T1313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.446719][ T1313] usb 2-1: config 0 descriptor?? [ 258.712071][ T3613] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.839903][ T1313] usbhid 2-1:0.0: can't add hid device: -71 [ 258.846218][ T1313] usbhid: probe of 2-1:0.0 failed with error -71 [ 258.956760][ T1313] usb 2-1: USB disconnect, device number 8 [ 259.000874][ T5811] netlink: 48 bytes leftover after parsing attributes in process `syz.4.575'. [ 259.296538][ T5818] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.578'. [ 259.694060][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.829985][ T1075] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.943408][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.144596][ T3613] usb 4-1: USB disconnect, device number 6 [ 260.160371][ T3613] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 260.229611][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.254752][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.281432][ T1075] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.316006][ T1075] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 260.345952][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.500357][ T1075] usb 5-1: config 0 descriptor?? [ 260.533689][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 261.756384][ T3618] Bluetooth: hci3: command 0x0409 tx timeout [ 262.419827][ T1075] usbhid 5-1:0.0: can't add hid device: -71 [ 262.425854][ T1075] usbhid: probe of 5-1:0.0 failed with error -71 [ 262.474113][ T1075] usb 5-1: USB disconnect, device number 8 [ 262.503755][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.519851][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.531402][ T5825] device bridge_slave_0 entered promiscuous mode [ 262.540967][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.549410][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.558558][ T5825] device bridge_slave_1 entered promiscuous mode [ 262.776356][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.826642][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.004656][ T5825] team0: Port device team_slave_0 added [ 263.084725][ T5825] team0: Port device team_slave_1 added [ 263.159920][ T5864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.589'. [ 263.276044][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.299929][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.529918][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.807453][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.814596][ T1313] Bluetooth: hci3: command 0x041b tx timeout [ 263.833301][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.979803][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.040919][ T5869] tipc: Enabling of bearer rejected, already enabled [ 264.222388][ T5825] device hsr_slave_0 entered promiscuous mode [ 264.271917][ T5825] device hsr_slave_1 entered promiscuous mode [ 264.306849][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.332397][ T5825] Cannot create hsr debugfs directory [ 264.989935][ T3561] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 265.287503][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.890071][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 266.304405][ T3561] usb 4-1: Using ep0 maxpacket: 8 [ 266.537956][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.560623][ T3561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.581387][ T3561] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.597985][ T3561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.617086][ T3561] usb 4-1: config 0 descriptor?? [ 267.388134][ T5902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.599'. [ 267.477976][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.504754][ T3561] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 267.565539][ T3561] usb 4-1: USB disconnect, device number 7 [ 267.594144][ T3561] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 267.704158][ T154] team0: Port device netdevsim0 removed [ 267.752010][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.980042][ T3618] Bluetooth: hci3: command 0x0419 tx timeout [ 269.099982][ T154] tipc: Disabling bearer [ 269.121682][ T154] tipc: Disabling bearer [ 269.132475][ T154] tipc: Left network mode [ 269.248690][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 269.260076][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.609'. [ 269.617759][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.675163][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.738110][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.785013][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.204152][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.337115][ T154] device hsr_slave_0 left promiscuous mode [ 270.367322][ T154] device hsr_slave_1 left promiscuous mode [ 270.392881][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.417434][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.544083][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.573122][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.610496][ T154] device bridge_slave_1 left promiscuous mode [ 270.630212][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.713450][ T154] device bridge_slave_0 left promiscuous mode [ 270.729301][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.749937][ T1075] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.830417][ T154] device veth1_macvtap left promiscuous mode [ 270.858110][ T154] device veth0_macvtap left promiscuous mode [ 270.902599][ T154] device veth1_vlan left promiscuous mode [ 270.908404][ T154] device veth0_vlan left promiscuous mode [ 271.001198][ T1075] usb 5-1: Using ep0 maxpacket: 8 [ 271.311105][ T5968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.614'. [ 271.410671][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.450024][ T1075] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.488752][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.509155][ T1075] usb 5-1: config 0 descriptor?? [ 271.790802][ T1075] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 273.058477][ T5990] netlink: 'syz.1.621': attribute type 11 has an invalid length. [ 273.252209][ T5990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 273.258749][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.281611][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 273.423763][ T154] team0 (unregistering): Port device team_slave_1 removed [ 273.432079][ T3618] usb 5-1: USB disconnect, device number 9 [ 273.533464][ T3618] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 273.549939][ T21] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 273.559568][ T5997] loop4: detected capacity change from 0 to 512 [ 273.565425][ T154] team0 (unregistering): Port device team_slave_0 removed [ 273.599966][ T3644] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 273.655207][ T5997] EXT4-fs (loop4): Ignoring removed oldalloc option [ 273.680039][ T5997] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.693918][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.696802][ T5997] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 273.795682][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.129339][ T5999] loop4: detected capacity change from 0 to 8 [ 274.834556][ T154] bond0 (unregistering): (slave team0): Releasing backup interface [ 274.923969][ T154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 274.940977][ T154] bond0 (unregistering): Released all slaves [ 274.942796][ T3644] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.968047][ T3644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.059866][ T3644] usb 2-1: Product: syz [ 275.064167][ T3644] usb 2-1: Manufacturer: syz [ 275.069068][ T3644] usb 2-1: SerialNumber: syz [ 275.123083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.143241][ T3644] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 275.201173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.254735][ T5979] netlink: 'syz.3.617': attribute type 21 has an invalid length. [ 275.270125][ T5979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 275.339502][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 275.372197][ T5991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.620'. [ 275.395797][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.439107][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.511575][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.547745][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.554921][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.609507][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.650860][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.687160][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.715840][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.627'. [ 275.730499][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.737607][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.818575][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.864263][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.901361][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.930100][ T3644] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 275.939449][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.958705][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.988686][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.040852][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.044813][ T1313] usb 2-1: USB disconnect, device number 9 [ 276.067692][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.086922][ T5994] vhci_hcd: connection reset by peer [ 276.095757][ T437] vhci_hcd: stop threads [ 276.129280][ T437] vhci_hcd: release socket [ 276.148382][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.163712][ T437] vhci_hcd: disconnect device [ 276.187976][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.212668][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.249008][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.388179][ T6039] tipc: Started in network mode [ 276.393165][ T6039] tipc: Node identity ac1414aa, cluster identity 4711 [ 276.401383][ T6039] tipc: Enabled bearer , priority 10 [ 277.010106][ T3644] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 277.026065][ T3644] ath9k_htc: Failed to initialize the device [ 277.046777][ T1313] usb 2-1: ath9k_htc: USB layer deinitialized [ 277.442141][ T5933] tipc: Node number set to 2886997162 [ 277.839894][ T1313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.219210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.237548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.389940][ T1313] usb 2-1: Using ep0 maxpacket: 8 [ 278.402636][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.530169][ T1313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.571911][ T1313] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.628810][ T1313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.690426][ T1313] usb 2-1: config 0 descriptor?? [ 278.711243][ T21] vhci_hcd: vhci_device speed not set [ 278.822502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.852475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.986270][ T1313] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 279.200453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.248134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.310975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.357278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.406547][ T5825] device veth0_vlan entered promiscuous mode [ 279.504557][ T5825] device veth1_vlan entered promiscuous mode [ 279.716098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.740640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.790992][ T5825] device veth0_macvtap entered promiscuous mode [ 279.830620][ T5825] device veth1_macvtap entered promiscuous mode [ 279.975029][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.009650][ T6066] netlink: 48 bytes leftover after parsing attributes in process `syz.4.637'. [ 280.046581][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.149174][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.230842][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.267878][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.297900][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.325060][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.373768][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.422524][ T21] usb 2-1: USB disconnect, device number 10 [ 280.470294][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.496992][ T21] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 280.551336][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.689936][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.724711][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.786251][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.817032][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.868386][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.913354][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.951256][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.959514][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.010257][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.050433][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.100132][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.141690][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.163860][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 281.201750][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 281.398364][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.413279][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.435817][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.461368][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.716318][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.740985][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.833438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.869392][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.898327][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.950390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.306293][ T6106] netlink: 128 bytes leftover after parsing attributes in process `syz.2.579'. [ 282.315378][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 282.324851][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 283.409454][ T6119] syz.1.651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 283.445415][ T6117] netlink: 48 bytes leftover after parsing attributes in process `syz.2.649'. [ 283.589058][ T6121] loop3: detected capacity change from 0 to 512 [ 283.736572][ T6121] EXT4-fs (loop3): Ignoring removed oldalloc option [ 283.759978][ T6121] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.821839][ T6121] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 284.238040][ T6133] loop3: detected capacity change from 0 to 8 [ 285.233985][ T6154] netlink: 128 bytes leftover after parsing attributes in process `syz.2.660'. [ 285.243065][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 285.252046][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 286.002411][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 286.336910][ T6168] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 286.391525][ T6168] __nla_validate_parse: 1 callbacks suppressed [ 286.391541][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 287.309871][ T1075] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 288.339821][ T1075] usb 2-1: Using ep0 maxpacket: 16 [ 288.460091][ T1075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.509841][ T1075] usb 2-1: config 0 has no interfaces? [ 288.674015][ T1075] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=a8.43 [ 288.694048][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.730402][ T1075] usb 2-1: Product: syz [ 288.738238][ T1075] usb 2-1: Manufacturer: syz [ 288.767720][ T1075] usb 2-1: SerialNumber: syz [ 288.830545][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 288.843709][ T1075] usb 2-1: config 0 descriptor?? [ 288.861862][ T6209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.678'. [ 288.888491][ T6211] netlink: 'syz.4.680': attribute type 2 has an invalid length. [ 289.070744][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 289.099330][ T3644] usb 2-1: USB disconnect, device number 11 [ 289.271524][ T6213] syz.3.681 uses obsolete (PF_INET,SOCK_PACKET) [ 289.809154][ T6220] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 290.952044][ T6220] team0: Port device netdevsim0 added [ 290.973140][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.688'. [ 291.697129][ T6251] netlink: 'syz.4.693': attribute type 2 has an invalid length. [ 291.737270][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 292.068175][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 292.404968][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.569808][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 292.578662][ T6262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.694'. [ 292.627334][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.716329][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.733736][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.765169][ T6241] device bridge_slave_0 entered promiscuous mode [ 292.814997][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.941260][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.955409][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.032204][ T6241] device bridge_slave_1 entered promiscuous mode [ 293.109504][ T144] team0: Port device netdevsim0 removed [ 293.158266][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.381597][ T3561] Bluetooth: hci1: command 0x0409 tx timeout [ 293.397226][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.232144][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.406175][ T3561] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 294.443218][ T3561] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.444947][ T6241] team0: Port device team_slave_0 added [ 294.516194][ T6241] team0: Port device team_slave_1 added [ 294.772815][ T3561] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 295.049969][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.057425][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.099002][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.138166][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.145563][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.244169][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.410730][ T4354] Bluetooth: hci1: command 0x041b tx timeout [ 295.465901][ T6241] device hsr_slave_0 entered promiscuous mode [ 295.510606][ T6241] device hsr_slave_1 entered promiscuous mode [ 295.570208][ T3561] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 295.623887][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.646520][ T3561] usb 5-1: Product: syz [ 295.653991][ T3561] usb 5-1: Manufacturer: syz [ 295.658838][ T3561] usb 5-1: SerialNumber: syz [ 295.678826][ T3561] usb 5-1: config 0 descriptor?? [ 295.998173][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 296.064963][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 296.182300][ T5933] usb 5-1: USB disconnect, device number 10 [ 296.276516][ T144] device hsr_slave_0 left promiscuous mode [ 296.304779][ T144] device hsr_slave_1 left promiscuous mode [ 296.340921][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.502707][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.521089][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.542800][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.614860][ T6317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.705'. [ 296.623972][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 296.632949][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 297.271007][ T144] device bridge_slave_1 left promiscuous mode [ 297.309891][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.360971][ T144] device bridge_slave_0 left promiscuous mode [ 297.367251][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.451722][ T144] device veth1_macvtap left promiscuous mode [ 297.487832][ T144] device veth0_macvtap left promiscuous mode [ 297.489877][ T4354] Bluetooth: hci1: command 0x040f tx timeout [ 297.504849][ T144] device veth1_vlan left promiscuous mode [ 297.520598][ T144] device veth0_vlan left promiscuous mode [ 298.713280][ T6345] overlayfs: failed to resolve './file1': -2 [ 299.498503][ T144] team0 (unregistering): Port device team_slave_1 removed [ 299.569808][ T3611] Bluetooth: hci1: command 0x0419 tx timeout [ 299.621924][ T144] team0 (unregistering): Port device team_slave_0 removed [ 299.633727][ T6349] input: syz0 as /devices/virtual/input/input9 [ 299.806789][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.914275][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.261737][ T144] bond0 (unregistering): Released all slaves [ 300.485294][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 300.498096][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 301.405605][ T6375] overlayfs: failed to resolve './file1': -2 [ 302.275830][ T6380] input: syz0 as /devices/virtual/input/input10 [ 302.606711][ T6241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.657648][ T6241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.719656][ T6241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.766200][ T6391] Cannot find set identified by id 0 to match [ 302.803259][ T6241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.323024][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.421002][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.462247][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.511129][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.562513][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.588860][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.648469][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.655589][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.729134][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.815738][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 303.865416][ T6408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.726'. [ 303.880827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.903172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.988793][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.996016][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.078016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.099422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.181707][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.227970][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.301534][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.344361][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.411005][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 304.438678][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.488041][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.503789][ T26] audit: type=1326 audit(1729673530.321:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9d3fdff9 code=0x0 [ 304.545207][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.608528][ T6241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.622632][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.631688][ T3618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 304.641200][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.700638][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 304.845824][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 304.860186][ T21] usb 2-1: config 179 has no interface number 0 [ 304.880130][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 304.906919][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.909775][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 304.917984][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.919562][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 304.943044][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.964659][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.986333][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 305.010518][ T21] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.018769][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.039772][ T4354] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 305.040160][ T3618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.070651][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.079506][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 305.088660][ T3618] usb 3-1: config 0 has no interfaces? [ 305.099830][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.109629][ T6241] device veth0_vlan entered promiscuous mode [ 305.115840][ T3618] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 305.133557][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.141861][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.153102][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.161773][ T6415] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.189707][ T3618] usb 3-1: config 0 descriptor?? [ 305.201705][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.219516][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.244407][ T6241] device veth1_vlan entered promiscuous mode [ 305.334813][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.351211][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.380053][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.388913][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.428453][ T6241] device veth0_macvtap entered promiscuous mode [ 305.440207][ T4354] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 305.448933][ T4354] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 305.464358][ T3644] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 305.475747][ T6241] device veth1_macvtap entered promiscuous mode [ 305.498616][ T4354] usb 5-1: config 1 has no interface number 1 [ 305.525863][ T4354] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 305.544529][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.585732][ T4354] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 38, changing to 7 [ 305.600233][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.627838][ T3611] usb 3-1: USB disconnect, device number 8 [ 305.668165][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.685958][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.719993][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.764931][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.800376][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.840135][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.853352][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.861999][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.992106][ T21] usb 2-1: USB disconnect, device number 12 [ 306.009837][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 306.018260][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 306.148086][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.219358][ T21] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 306.362762][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.585600][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.609973][ T4354] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.619406][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.629729][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.641079][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.651060][ T4354] usb 5-1: Product: syz [ 306.655245][ T4354] usb 5-1: Manufacturer: syz [ 306.659998][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.670522][ T4354] usb 5-1: SerialNumber: syz [ 306.681670][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.692198][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.706704][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.720976][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.728481][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.787052][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.866573][ T6241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.932686][ T6241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.945287][ T6241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.974387][ T6241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.280026][ T4354] usb 5-1: failed to enable PITCH for EP 0x82 [ 307.301606][ T4354] usb 5-1: 2:1: cannot set freq 3960972 to ep 0x82 [ 307.381683][ T3854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.430173][ T4354] usb 5-1: USB disconnect, device number 11 [ 307.449060][ T3854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.530557][ T2660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.549525][ T2660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.577851][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.622645][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.876399][ T26] audit: type=1326 audit(1729673533.691:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.4.744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c245eaff9 code=0x0 [ 310.472892][ T6539] overlayfs: failed to resolve './file0': -2 [ 311.351303][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 311.719979][ T13] usb 5-1: config 0 has no interfaces? [ 311.939959][ T13] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.969857][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.049126][ T13] usb 5-1: Product: syz [ 312.090076][ T13] usb 5-1: Manufacturer: syz [ 312.101591][ T13] usb 5-1: SerialNumber: syz [ 312.146532][ T13] usb 5-1: config 0 descriptor?? [ 312.269532][ T26] audit: type=1326 audit(1729673538.081:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9d3fdff9 code=0x0 [ 312.390000][ T3611] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 312.760089][ T3611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.792690][ T3611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.836097][ T3611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.915999][ T3611] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.941761][ T3611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.971430][ T3611] usb 3-1: config 0 descriptor?? [ 313.456720][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.873761][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.893026][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.910083][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.917751][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.925783][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.935191][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.943058][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.952231][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.962963][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.971387][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.979016][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.987117][ T3611] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 313.997320][ T3611] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 314.085070][ T3611] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 314.130325][ T3611] usb 3-1: USB disconnect, device number 9 [ 315.022950][ T3611] usb 5-1: USB disconnect, device number 12 [ 315.901851][ T6628] loop0: detected capacity change from 0 to 512 [ 316.104307][ T6628] EXT4-fs (loop0): Ignoring removed oldalloc option [ 316.837060][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.839182][ T6628] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.843499][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.950236][ T6628] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 317.927254][ T6642] loop0: detected capacity change from 0 to 8 [ 318.858004][ T6648] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.780'. [ 319.043473][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 319.573092][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.185114][ T6677] loop4: detected capacity change from 0 to 512 [ 320.241920][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.255023][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.269518][ T21] usb 3-1: Product: syz [ 320.271018][ T6677] EXT4-fs (loop4): Ignoring removed oldalloc option [ 320.277838][ T21] usb 3-1: Manufacturer: syz [ 320.286344][ T21] usb 3-1: SerialNumber: syz [ 320.341797][ T6677] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.416403][ T6677] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 320.448061][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 321.495960][ T6688] loop4: detected capacity change from 0 to 8 [ 322.109962][ T21] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 322.117256][ T21] cdc_ncm 3-1:1.0: bind() failure [ 322.245736][ T21] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 322.255619][ T21] cdc_ncm 3-1:1.1: bind() failure [ 322.266998][ T21] usb 3-1: USB disconnect, device number 10 [ 322.636119][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 322.645472][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.796'. [ 322.686412][ T6703] netlink: 'syz.4.798': attribute type 5 has an invalid length. [ 322.930129][ T6706] device syz_tun entered promiscuous mode [ 323.076805][ T6706] device syz_tun left promiscuous mode [ 325.079781][ T3612] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 325.239565][ T6746] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 326.136020][ T6746] team0: Port device netdevsim0 added [ 326.244789][ T3612] usb 5-1: Using ep0 maxpacket: 8 [ 326.251980][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 326.278551][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'. [ 326.392630][ T3612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.429819][ T3612] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.466698][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.525188][ T3612] usb 5-1: config 0 descriptor?? [ 326.811909][ T3612] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 327.673852][ T3612] usb 5-1: USB disconnect, device number 13 [ 327.693842][ T3612] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 328.230600][ T6779] tipc: Started in network mode [ 328.235531][ T6779] tipc: Node identity ac1414aa, cluster identity 4711 [ 328.242968][ T6779] tipc: Enabled bearer , priority 10 [ 329.301876][ T3644] tipc: Node number set to 2886997162 [ 330.568677][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 330.618610][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.826'. [ 330.706421][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 330.734479][ T13] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 331.559777][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 331.860051][ T5933] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 332.270414][ T21] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 332.300284][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.320646][ T21] usb 2-1: Product: syz [ 332.324967][ T21] usb 2-1: Manufacturer: syz [ 332.335564][ T21] usb 2-1: SerialNumber: syz [ 332.374138][ T21] usb 2-1: config 0 descriptor?? [ 332.460929][ T21] ch341 2-1:0.0: ch341-uart converter detected [ 332.649780][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 332.668679][ T6805] udc-core: couldn't find an available UDC or it's busy [ 332.726164][ T6805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 332.800154][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.842404][ T5933] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.993085][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.225777][ T5933] usb 3-1: config 0 descriptor?? [ 333.510277][ T21] usb 2-1: failed to receive control message: -110 [ 333.880520][ T21] ch341-uart: probe of ttyUSB0 failed with error -110 [ 334.314254][ T21] usb 2-1: USB disconnect, device number 13 [ 334.327500][ T21] ch341 2-1:0.0: device disconnected [ 334.414379][ T5933] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.499972][ T5933] usb 3-1: USB disconnect, device number 11 [ 334.564345][ T5933] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 335.119920][ T3612] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 335.221096][ T6839] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 335.519912][ T3612] usb 3-1: Using ep0 maxpacket: 8 [ 335.639984][ T3612] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.659763][ T3612] usb 3-1: config 179 has no interface number 0 [ 335.666086][ T3612] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.740256][ T3612] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.922893][ T3612] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.639760][ T3612] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 336.657745][ T3612] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.674507][ T3612] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.691203][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.760240][ T6836] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 336.893343][ T6851] loop4: detected capacity change from 0 to 512 [ 337.014287][ T6851] EXT4-fs (loop4): Ignoring removed oldalloc option [ 337.042717][ T6851] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.080208][ T4354] usb 3-1: USB disconnect, device number 12 [ 337.089855][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 337.140101][ T6851] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 337.942433][ T6868] loop4: detected capacity change from 0 to 8 [ 339.119804][ T5933] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 340.042916][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 340.981065][ T6880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.851'. [ 344.538390][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 344.900015][ T5933] usb 2-1: device descriptor read/all, error -71 [ 345.251785][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 345.510726][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.605321][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.656420][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.682744][ T6922] device bridge_slave_0 entered promiscuous mode [ 345.719327][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.743881][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.777689][ T6922] device bridge_slave_1 entered promiscuous mode [ 345.823929][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.890080][ T1313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 346.028500][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.080487][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.112569][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.150581][ T144] team0: Port device netdevsim0 removed [ 346.184165][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.352079][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 346.384347][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'. [ 346.400113][ T1313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.423945][ T1313] usb 5-1: config 0 has no interfaces? [ 346.514662][ T6922] team0: Port device team_slave_0 added [ 346.572352][ T6922] team0: Port device team_slave_1 added [ 346.609939][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 346.630217][ T1313] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 346.660799][ T1313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.686232][ T1313] usb 5-1: Product: syz [ 346.698012][ T1313] usb 5-1: Manufacturer: syz [ 346.711129][ T1313] usb 5-1: SerialNumber: syz [ 346.726882][ T1313] usb 5-1: config 0 descriptor?? [ 346.784892][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.828178][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.889972][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.949594][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.958440][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.050188][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.068598][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.321882][ T6966] loop3: detected capacity change from 0 to 512 [ 347.322583][ T6922] device hsr_slave_0 entered promiscuous mode [ 347.360388][ T6922] device hsr_slave_1 entered promiscuous mode [ 347.385450][ T6966] EXT4-fs (loop3): Ignoring removed oldalloc option [ 347.399977][ T6966] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.413490][ T6922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.433333][ T6922] Cannot create hsr debugfs directory [ 347.455159][ T6966] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 347.821522][ T6974] loop3: detected capacity change from 0 to 8 [ 348.742221][ T3644] Bluetooth: hci4: command 0x041b tx timeout [ 349.651879][ T6989] fuse: Bad value for 'fd' [ 350.026655][ T6994] tipc: Enabling of bearer rejected, already enabled [ 350.779894][ T1313] Bluetooth: hci4: command 0x040f tx timeout [ 351.374451][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 351.548093][ T3612] usb 5-1: USB disconnect, device number 14 [ 351.578687][ T144] device hsr_slave_0 left promiscuous mode [ 351.617405][ T144] device hsr_slave_1 left promiscuous mode [ 351.657284][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.685476][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.705094][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.721134][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.762315][ T144] device bridge_slave_1 left promiscuous mode [ 351.768707][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.781617][ T144] device bridge_slave_0 left promiscuous mode [ 351.787949][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.820108][ T144] device veth1_macvtap left promiscuous mode [ 351.833740][ T144] device veth0_macvtap left promiscuous mode [ 351.843943][ T144] device veth1_vlan left promiscuous mode [ 351.855895][ T144] device veth0_vlan left promiscuous mode [ 351.889918][ T1313] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 352.170688][ T1313] usb 2-1: Using ep0 maxpacket: 16 [ 352.310163][ T1313] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 352.510171][ T1313] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.560450][ T1313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.583780][ T1313] usb 2-1: Product: syz [ 352.588054][ T1313] usb 2-1: Manufacturer: syz [ 352.624199][ T1313] usb 2-1: SerialNumber: syz [ 352.625136][ T144] team0 (unregistering): Port device team_slave_1 removed [ 352.631825][ T1313] usb 2-1: config 0 descriptor?? [ 352.673877][ T144] team0 (unregistering): Port device team_slave_0 removed [ 352.699213][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.791881][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.016615][ T144] bond0 (unregistering): Released all slaves [ 353.152464][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 353.162039][ T7023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.883'. [ 353.234495][ T6922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.278443][ T3644] Bluetooth: hci4: command 0x0419 tx timeout [ 353.328562][ T6922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.357992][ T6922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.391467][ T6922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.268138][ T3618] usb 2-1: USB disconnect, device number 16 [ 355.087652][ T6922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.227148][ T6922] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.273932][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.318618][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.343617][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.252043][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.271415][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.319444][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.326627][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.364809][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.464300][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.540358][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.547485][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.572514][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 356.603280][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.726883][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.757013][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.889827][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 356.900914][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.938587][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.970234][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.999267][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.079595][ T6922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.125490][ T6922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.187473][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.219607][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.264511][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.309612][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.347527][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.394720][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.430001][ T13] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 357.469598][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.514590][ T13] usb 2-1: Product: syz [ 357.518774][ T13] usb 2-1: Manufacturer: syz [ 357.546246][ T13] usb 2-1: SerialNumber: syz [ 357.571138][ T13] usb 2-1: config 0 descriptor?? [ 357.630920][ T13] ch341 2-1:0.0: ch341-uart converter detected [ 357.729246][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.750103][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.787165][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.835885][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 357.877373][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.907682][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.990327][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.010528][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.056590][ T6922] device veth0_vlan entered promiscuous mode [ 358.083000][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.120532][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.148343][ T6922] device veth1_vlan entered promiscuous mode [ 358.235319][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.252329][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.278988][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.311566][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.349266][ T6922] device veth0_macvtap entered promiscuous mode [ 358.405728][ T6922] device veth1_macvtap entered promiscuous mode [ 358.480839][ T13] usb 2-1: failed to receive control message: -71 [ 358.490743][ T13] ch341-uart: probe of ttyUSB0 failed with error -71 [ 358.531655][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.549096][ T13] usb 2-1: USB disconnect, device number 17 [ 358.563716][ T13] ch341 2-1:0.0: device disconnected [ 358.571199][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.602395][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.668773][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.830152][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.668088][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.738558][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.790821][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.950975][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.001467][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.021197][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.070515][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.101110][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.111023][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 360.119984][ T7115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.900'. [ 360.139765][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.168674][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.200104][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.244310][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.280372][ T6922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.305997][ T6922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.341514][ T6922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.384234][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.406924][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.423843][ T7121] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 360.433598][ T7121] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 7121, name: syz.4.902 [ 360.434975][ T6922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.442553][ T7121] 2 locks held by syz.4.902/7121: [ 360.442636][ T7121] #0: ffff8880767f9f88 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 360.466865][ T7121] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 360.476623][ T7121] irq event stamp: 580 [ 360.480696][ T7121] hardirqs last enabled at (579): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 360.490763][ T7121] hardirqs last disabled at (580): [] _raw_spin_lock_irq+0xa9/0x110 [ 360.500308][ T7121] softirqs last enabled at (426): [] ip_setsockopt+0x260e/0x3fb0 [ 360.509687][ T7121] softirqs last disabled at (424): [] release_sock+0x2c/0x1c0 [ 360.518716][ T7121] Preemption disabled at: [ 360.518724][ T7121] [<0000000000000000>] 0x0 [ 360.527441][ T7121] CPU: 0 PID: 7121 Comm: syz.4.902 Not tainted 5.15.169-syzkaller #0 [ 360.535495][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.545555][ T7121] Call Trace: [ 360.548840][ T7121] [ 360.551882][ T7121] dump_stack_lvl+0x1e3/0x2d0 [ 360.556565][ T7121] ? ip_setsockopt+0x260e/0x3fb0 [ 360.561512][ T7121] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 360.567143][ T7121] ? panic+0x860/0x860 [ 360.571219][ T7121] ___might_sleep+0x547/0x6a0 [ 360.575894][ T7121] ? __might_sleep+0xc0/0xc0 [ 360.580494][ T7121] down_read+0x21/0x2e0 [ 360.584642][ T7121] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 360.590095][ T7121] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 360.595382][ T7121] ? kernfs_find_ns+0x500/0x500 [ 360.600239][ T7121] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 360.606474][ T7121] cgroup_get_from_path+0x5c/0x2e0 [ 360.611587][ T7121] cgroup_mt_check_v1+0x1a0/0x2b0 [ 360.616632][ T7121] xt_check_match+0x363/0xa30 [ 360.621302][ T7121] ? xt_find_match+0x6d/0x200 [ 360.625974][ T7121] ? mutex_unlock+0x10/0x10 [ 360.630466][ T7121] ? xt_check_proc_name+0x110/0x110 [ 360.635658][ T7121] ? pcpu_alloc+0x10c9/0x17c0 [ 360.640333][ T7121] ? xt_find_match+0x1cf/0x200 [ 360.645090][ T7121] translate_table+0x15bd/0x2250 [ 360.650038][ T7121] ? ipt_register_table+0x7a0/0x7a0 [ 360.655240][ T7121] ? __might_fault+0xb8/0x110 [ 360.659930][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 360.664955][ T7121] ? _copy_from_user+0x10f/0x170 [ 360.669908][ T7121] ? copy_from_sockptr_offset+0x6b/0xa0 [ 360.675467][ T7121] do_ipt_set_ctl+0xdbc/0x1200 [ 360.680239][ T7121] ? rcu_lock_release+0x20/0x20 [ 360.685100][ T7121] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 360.690914][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 360.695963][ T7121] ? __mutex_unlock_slowpath+0x218/0x750 [ 360.701591][ T7121] ? nf_setsockopt+0x38/0x2b0 [ 360.706282][ T7121] ? print_irqtrace_events+0x210/0x210 [ 360.711736][ T7121] ? mutex_unlock+0x10/0x10 [ 360.716231][ T7121] ? lockdep_hardirqs_on+0x94/0x130 [ 360.721426][ T7121] ? __local_bh_enable_ip+0x164/0x1f0 [ 360.726801][ T7121] nf_setsockopt+0x28a/0x2b0 [ 360.731392][ T7121] ip_setsockopt+0x2732/0x3fb0 [ 360.736167][ T7121] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 360.741533][ T7121] ? read_lock_is_recursive+0x10/0x10 [ 360.746898][ T7121] ? __mutex_trylock_common+0x17e/0x2e0 [ 360.752435][ T7121] ? __might_sleep+0xc0/0xc0 [ 360.757033][ T7121] ? rcu_lock_release+0x20/0x20 [ 360.761896][ T7121] tcp_setsockopt+0x23f/0x3680 [ 360.766663][ T7121] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 360.772032][ T7121] ? __might_sleep+0xc0/0xc0 [ 360.776618][ T7121] ? smc_setsockopt+0x130/0xb20 [ 360.781466][ T7121] ? mutex_lock_io_nested+0x60/0x60 [ 360.786660][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 360.791686][ T7121] ? aa_sk_perm+0x8fc/0xa30 [ 360.796181][ T7121] ? sock_common_setsockopt+0x33/0xc0 [ 360.801546][ T7121] ? sock_common_recvmsg+0x240/0x240 [ 360.806827][ T7121] smc_setsockopt+0x1e5/0xb20 [ 360.811506][ T7121] ? smc_shutdown+0x5f0/0x5f0 [ 360.816180][ T7121] ? aa_sock_opt_perm+0x79/0x110 [ 360.821117][ T7121] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 360.826657][ T7121] ? security_socket_setsockopt+0x7d/0xa0 [ 360.832369][ T7121] ? smc_shutdown+0x5f0/0x5f0 [ 360.837041][ T7121] __sys_setsockopt+0x57e/0x990 [ 360.841888][ T7121] ? __ia32_sys_recv+0xb0/0xb0 [ 360.846652][ T7121] ? syscall_enter_from_user_mode+0x2e/0x240 [ 360.852629][ T7121] __x64_sys_setsockopt+0xb1/0xc0 [ 360.857653][ T7121] do_syscall_64+0x3b/0xb0 [ 360.862063][ T7121] ? clear_bhb_loop+0x15/0x70 [ 360.866735][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.872635][ T7121] RIP: 0033:0x7f8c245eaff9 [ 360.877066][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.896676][ T7121] RSP: 002b:00007f8c22a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.905113][ T7121] RAX: ffffffffffffffda RBX: 00007f8c247a2f80 RCX: 00007f8c245eaff9 [ 360.913077][ T7121] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 360.921055][ T7121] RBP: 00007f8c2465d296 R08: 0000000000001378 R09: 0000000000000000 [ 360.929019][ T7121] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 360.936978][ T7121] R13: 0000000000000000 R14: 00007f8c247a2f80 R15: 00007ffc30aabfa8 [ 360.944955][ T7121] [ 360.947969][ T7121] [ 360.950285][ T7121] ============================= [ 360.955119][ T7121] [ BUG: Invalid wait context ] [ 360.959945][ T7121] 5.15.169-syzkaller #0 Tainted: G W [ 360.966532][ T7121] ----------------------------- [ 360.971363][ T7121] syz.4.902/7121 is trying to lock: [ 360.976541][ T7121] ffffffff8ca52270 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 360.986036][ T7121] other info that might help us debug this: [ 360.991910][ T7121] context-{4:4} [ 360.995350][ T7121] 2 locks held by syz.4.902/7121: [ 361.000361][ T7121] #0: ffff8880767f9f88 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 361.010881][ T7121] #1: ffffffff8c945618 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 361.020615][ T7121] stack backtrace: [ 361.024313][ T7121] CPU: 0 PID: 7121 Comm: syz.4.902 Tainted: G W 5.15.169-syzkaller #0 [ 361.033749][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.043813][ T7121] Call Trace: [ 361.047082][ T7121] [ 361.050002][ T7121] dump_stack_lvl+0x1e3/0x2d0 [ 361.054682][ T7121] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 361.060304][ T7121] ? panic+0x860/0x860 [ 361.064376][ T7121] __lock_acquire+0x14f5/0x1ff0 [ 361.069235][ T7121] lock_acquire+0x1db/0x4f0 [ 361.073728][ T7121] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 361.079203][ T7121] ? read_lock_is_recursive+0x10/0x10 [ 361.084581][ T7121] ? __might_sleep+0xc0/0xc0 [ 361.089163][ T7121] down_read+0x45/0x2e0 [ 361.093307][ T7121] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 361.098766][ T7121] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 361.104210][ T7121] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 361.109482][ T7121] ? kernfs_find_ns+0x500/0x500 [ 361.114323][ T7121] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 361.120492][ T7121] cgroup_get_from_path+0x5c/0x2e0 [ 361.125594][ T7121] cgroup_mt_check_v1+0x1a0/0x2b0 [ 361.130633][ T7121] xt_check_match+0x363/0xa30 [ 361.135297][ T7121] ? xt_find_match+0x6d/0x200 [ 361.139960][ T7121] ? mutex_unlock+0x10/0x10 [ 361.144452][ T7121] ? xt_check_proc_name+0x110/0x110 [ 361.149638][ T7121] ? pcpu_alloc+0x10c9/0x17c0 [ 361.154316][ T7121] ? xt_find_match+0x1cf/0x200 [ 361.159071][ T7121] translate_table+0x15bd/0x2250 [ 361.164004][ T7121] ? ipt_register_table+0x7a0/0x7a0 [ 361.169205][ T7121] ? __might_fault+0xb8/0x110 [ 361.173878][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 361.178900][ T7121] ? _copy_from_user+0x10f/0x170 [ 361.183825][ T7121] ? copy_from_sockptr_offset+0x6b/0xa0 [ 361.189362][ T7121] do_ipt_set_ctl+0xdbc/0x1200 [ 361.194125][ T7121] ? rcu_lock_release+0x20/0x20 [ 361.198964][ T7121] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 361.204757][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 361.209779][ T7121] ? __mutex_unlock_slowpath+0x218/0x750 [ 361.215414][ T7121] ? nf_setsockopt+0x38/0x2b0 [ 361.220079][ T7121] ? print_irqtrace_events+0x210/0x210 [ 361.225525][ T7121] ? mutex_unlock+0x10/0x10 [ 361.230016][ T7121] ? lockdep_hardirqs_on+0x94/0x130 [ 361.235203][ T7121] ? __local_bh_enable_ip+0x164/0x1f0 [ 361.240565][ T7121] nf_setsockopt+0x28a/0x2b0 [ 361.245144][ T7121] ip_setsockopt+0x2732/0x3fb0 [ 361.249899][ T7121] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 361.255260][ T7121] ? read_lock_is_recursive+0x10/0x10 [ 361.260619][ T7121] ? __mutex_trylock_common+0x17e/0x2e0 [ 361.266151][ T7121] ? __might_sleep+0xc0/0xc0 [ 361.270729][ T7121] ? rcu_lock_release+0x20/0x20 [ 361.275577][ T7121] tcp_setsockopt+0x23f/0x3680 [ 361.280335][ T7121] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 361.285695][ T7121] ? __might_sleep+0xc0/0xc0 [ 361.290273][ T7121] ? smc_setsockopt+0x130/0xb20 [ 361.295114][ T7121] ? mutex_lock_io_nested+0x60/0x60 [ 361.300302][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 361.305322][ T7121] ? aa_sk_perm+0x8fc/0xa30 [ 361.309811][ T7121] ? sock_common_setsockopt+0x33/0xc0 [ 361.315170][ T7121] ? sock_common_recvmsg+0x240/0x240 [ 361.320442][ T7121] smc_setsockopt+0x1e5/0xb20 [ 361.325114][ T7121] ? smc_shutdown+0x5f0/0x5f0 [ 361.329779][ T7121] ? aa_sock_opt_perm+0x79/0x110 [ 361.334706][ T7121] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 361.340245][ T7121] ? security_socket_setsockopt+0x7d/0xa0 [ 361.345952][ T7121] ? smc_shutdown+0x5f0/0x5f0 [ 361.350620][ T7121] __sys_setsockopt+0x57e/0x990 [ 361.355462][ T7121] ? __ia32_sys_recv+0xb0/0xb0 [ 361.360215][ T7121] ? syscall_enter_from_user_mode+0x2e/0x240 [ 361.366187][ T7121] __x64_sys_setsockopt+0xb1/0xc0 [ 361.371201][ T7121] do_syscall_64+0x3b/0xb0 [ 361.375606][ T7121] ? clear_bhb_loop+0x15/0x70 [ 361.380267][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.386166][ T7121] RIP: 0033:0x7f8c245eaff9 [ 361.390583][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.410185][ T7121] RSP: 002b:00007f8c22a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.418589][ T7121] RAX: ffffffffffffffda RBX: 00007f8c247a2f80 RCX: 00007f8c245eaff9 [ 361.426550][ T7121] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 361.434512][ T7121] RBP: 00007f8c2465d296 R08: 0000000000001378 R09: 0000000000000000 [ 361.442471][ T7121] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 361.450431][ T7121] R13: 0000000000000000 R14: 00007f8c247a2f80 R15: 00007ffc30aabfa8 [ 361.458415][ T7121] [ 361.461547][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.619888][ T6922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.640554][ T6922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.649254][ T6922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.780485][ T7121] xt_cgroup: invalid path, errno=-2 [ 363.026922][ T3975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.093799][ T3975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.163568][ T3975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.204416][ T3975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.286111][ T3975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.316709][ T3975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.384620][ T3975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.444702][ T3975] team0: Port device netdevsim0 removed [ 363.451904][ T3975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.564135][ T3975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.626353][ T3975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.673424][ T3975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.734948][ T3975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.837893][ T3975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.904216][ T3975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.954220][ T3975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.004528][ T3975] team0: Port device netdevsim0 removed [ 364.013311][ T3975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.108694][ T3975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.144224][ T3975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.214420][ T3975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.264331][ T3975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.423618][ T3975] tipc: Disabling bearer [ 364.428849][ T3975] tipc: Left network mode [ 364.435353][ T3975] tipc: Disabling bearer [ 364.443074][ T3975] tipc: Left network mode [ 364.455868][ T3975] tipc: Disabling bearer [ 364.467109][ T3975] tipc: Left network mode [ 364.479482][ T3975] tipc: Disabling bearer [ 364.485407][ T3975] tipc: Left network mode [ 365.359148][ T3975] bond0: (slave wlan1): Releasing backup interface [ 365.688981][ T3975] device hsr_slave_0 left promiscuous mode [ 365.696831][ T3975] device hsr_slave_1 left promiscuous mode [ 365.703982][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.711829][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.719564][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.727366][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.736400][ T3975] device bridge_slave_1 left promiscuous mode [ 365.742961][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.751744][ T3975] device bridge_slave_0 left promiscuous mode [ 365.757965][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.769248][ T3975] device hsr_slave_0 left promiscuous mode [ 365.776297][ T3975] device hsr_slave_1 left promiscuous mode [ 365.782933][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.790735][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.798415][ T3975] device bridge_slave_1 left promiscuous mode [ 365.804945][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.813918][ T3975] device bridge_slave_0 left promiscuous mode [ 365.820498][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.830806][ T3975] device hsr_slave_0 left promiscuous mode [ 365.836963][ T3975] device hsr_slave_1 left promiscuous mode [ 365.843610][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.851294][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.858859][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.866801][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.874437][ T3975] device bridge_slave_1 left promiscuous mode [ 365.880640][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.888584][ T3975] device bridge_slave_0 left promiscuous mode [ 365.894963][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.905095][ T3975] device hsr_slave_0 left promiscuous mode [ 365.911596][ T3975] device hsr_slave_1 left promiscuous mode [ 365.917816][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.925350][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.933069][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.940551][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.948522][ T3975] device bridge_slave_1 left promiscuous mode [ 365.954791][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.962800][ T3975] device bridge_slave_0 left promiscuous mode [ 365.968939][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.979585][ T3975] device hsr_slave_0 left promiscuous mode [ 365.986092][ T3975] device hsr_slave_1 left promiscuous mode [ 365.992489][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.999977][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.007521][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.015101][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.022647][ T3975] device bridge_slave_1 left promiscuous mode [ 366.028779][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.036727][ T3975] device bridge_slave_0 left promiscuous mode [ 366.043101][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.058195][ T3975] device veth1_macvtap left promiscuous mode [ 366.064746][ T3975] device veth0_macvtap left promiscuous mode [ 366.070844][ T3975] device veth1_vlan left promiscuous mode [ 366.076611][ T3975] device veth0_vlan left promiscuous mode [ 366.083203][ T3975] device veth1_macvtap left promiscuous mode [ 366.089204][ T3975] device veth0_macvtap left promiscuous mode [ 366.095684][ T3975] device veth1_vlan left promiscuous mode [ 366.101747][ T3975] device veth0_vlan left promiscuous mode [ 366.107952][ T3975] device veth1_macvtap left promiscuous mode [ 366.114018][ T3975] device veth0_macvtap left promiscuous mode [ 366.120139][ T3975] device veth1_vlan left promiscuous mode [ 366.125905][ T3975] device veth0_vlan left promiscuous mode [ 366.132407][ T3975] device veth1_macvtap left promiscuous mode [ 366.138407][ T3975] device veth0_macvtap left promiscuous mode [ 366.144632][ T3975] device veth1_vlan left promiscuous mode [ 366.150505][ T3975] device veth0_vlan left promiscuous mode [ 366.156807][ T3975] device veth1_macvtap left promiscuous mode [ 366.163049][ T3975] device veth0_macvtap left promiscuous mode [ 366.169077][ T3975] device veth1_vlan left promiscuous mode [ 366.175441][ T3975] device veth0_vlan left promiscuous mode [ 366.466881][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 366.484031][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 366.494290][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.506988][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.551837][ T3975] bond0 (unregistering): Released all slaves [ 366.627091][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 366.637384][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 366.649846][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.664165][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.712716][ T3975] bond0 (unregistering): Released all slaves [ 366.802623][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 366.814017][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 366.827256][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.840718][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.885514][ T3975] bond0 (unregistering): Released all slaves [ 366.964140][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 366.976946][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 366.987883][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.001484][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.049690][ T3975] bond0 (unregistering): Released all slaves [ 367.122649][ T3975] team0 (unregistering): Port device team_slave_1 removed [ 367.133243][ T3975] team0 (unregistering): Port device team_slave_0 removed [ 367.147168][ T3975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.159050][ T3975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.205621][ T3975] bond0 (unregistering): Released all slaves