last executing test programs: 3m3.670445635s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 2m29.844160816s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 2m24.537647791s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 1m53.305538259s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 1m52.322867031s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 1m24.473856461s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 1m23.334037948s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 1m18.624578065s ago: executing program 4 (id=360): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500330000000a00000000000000fe8000000000000000000000000000aa0000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000fe800000000000000000000000000000000000000000000007001900"], 0xd8}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xff8b, 0x3, 0x8}, {0x9, 0x6, 0x1, 0x800}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x0, 0x0, 0xfeffffff, 0x98, 0x1c0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@private=0xa010100, @multicast1, 0xff000000, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x2]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x4]}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@multicast1, @rand_addr, 0xffffff00, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @empty, @local, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@local, @broadcast, 0x0, 0xff000000, 'ipvlan1\x00', 'wlan0\x00', {}, {}, 0x1d}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x2], 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@empty, @gre_key=0x1ff, @port=0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1m18.160360376s ago: executing program 4 (id=363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x258cb4, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000580)={0x0, 0x7079, 0x2000, 0x5, 0x284, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r6, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x14) unshare(0x8000400) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000500)={0x20, 0x6, 0xc5, {0xc5, 0xd, "408ade57aa67e7bc3b4633918bf40723643e0417f87a7e3e783075a8754a6a04e88bb40e2ecdb9f234f637e26631bccaa40a6655c1282b2f03c408ceb5d4e9e629fe8eb2de2160b69e753887d00b99929149f67f3dee3ee3888085e672373006431ccd41b613c7b76e6b477b760081dd92abe45ea18a5b5c4419f0858f3e3c4d06b2170fa36f97a98646305ba5adae051db15a1fe3ffcfdaa022384a7cc548871cff5257f1861671cbf33bf7ad18e40474d751ddfc0074a6cfa81cd5027bd9b13cd85c"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x16, 0xf5, "38acb91a838976ef03065c3b3da99d5d28e5b42f4319497f97f7f975bc16994927c2f1bb3c7f4bff33cd870c78863d06d356a1074da66d955ca8a014486098d987ca1d007f7788e8e42921b7bb7450a406ae30c53ac2dcfdd80be45bb9c846e8d2ae5fcd4a91b027c08bae8825d0ae4950a4ded3922ba4ed24ee0df95e405971c286e8a251c80f8889d610e41e98817cadf47cbce6c32b890beec2619264f06fdcca6714f7d979335a1791fedc82afc04cf44e019daf212397433c81e2c18ed131e478abca53fb85b08b666d3140a1d9b0c1d6a938ff9e546d43617e4f548ac2e5c5cfcd94cf4e55b4686d9d6b64aea654e518dad4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xcd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x9, 0xa, 0x5, 0x1ff, 0x4, 0xa6, 0xccb8, 0x400, 0x0, 0x6}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) 1m14.532557278s ago: executing program 4 (id=369): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca00000000", 0x20}, {&(0x7f0000000780)="e622a80a2b88a2713481f8861e993d9230a9556e", 0x14}, {0x0}, {0x0}], 0x4}, 0x0) lseek(r0, 0x1, 0x4) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1m13.490312641s ago: executing program 4 (id=370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810c21200000000000109022400010000000009040000010300000009210000000122070009058803"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \f\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={r5, 0x8000}, 0x8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) mkdirat(r2, &(0x7f0000000200)='./bus/file0\x00', 0x152) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, @rand_addr=' \x01\x00', @loopback={0x0, 0xffff888101827518}, 0x80, 0x8000}}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$binfmt_misc(r7, &(0x7f0000000300)="a73c737d70073cd106e082e9b58f96272768164f37048b0faa541b2123a9f7047a08c675102dc9a8d0854e16ae85da5f5a9d5616125992649eec8086a0db9ff815caaab0650ef163c3dab7688e65ae70b67ad081ff7ff1320ca2920d37d014ea6ce358d3a108eb6dc174047a583871263233b0d8a65ffc81deed4c930449e13a6d16aaec6f3a94a31463916f0ef3a9e9aa41702f5cbb279401deebf67a", 0x9d) 1m11.24433821s ago: executing program 4 (id=376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x1dba66b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x10002, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x800000, 0x10}, 0xc) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r11, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r12, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000200)='GPL\x00', 0x3, 0xb1, &(0x7f0000000240)=""/177, 0x41000, 0x6a, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x6, 0xe80, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r7, r8, r9, 0x1, r10, r11, r12], &(0x7f00000005c0)=[{0x3, 0x3, 0xa, 0x4}], 0x10, 0xffffff23, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f0000000a40)="e7", 0x1, 0x20004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) 1m9.936606223s ago: executing program 4 (id=381): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca00000000", 0x20}, {&(0x7f0000000780)="e622a80a2b88a2713481f8861e993d9230a9556e", 0x14}, {0x0}, {0x0}], 0x4}, 0x0) lseek(r0, 0x1, 0x4) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1m9.719955438s ago: executing program 32 (id=381): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca00000000", 0x20}, {&(0x7f0000000780)="e622a80a2b88a2713481f8861e993d9230a9556e", 0x14}, {0x0}, {0x0}], 0x4}, 0x0) lseek(r0, 0x1, 0x4) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 48.403006223s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 47.172194223s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 26.886400063s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 24.877937091s ago: executing program 0 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 7.976722749s ago: executing program 1 (id=529): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x54, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.968360943s ago: executing program 1 (id=530): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000000c0)={{0x6, @rose, 0x7}, [@null, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 7.922320973s ago: executing program 5 (id=531): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280), 0x0, 0xfffffff8, 0x496, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$can_bcm(r0, 0x0, 0x0) 7.278813287s ago: executing program 1 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x591081, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1df) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001fff010000000000000006060000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000002c0012800b00010067656e65766500001c000280050009000000000005000a0000000000050004000800000008000a00", @ANYRES32], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x47, 0x6) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}}, 0x1) 7.278127453s ago: executing program 5 (id=534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYBLOB="8650b519fa9375f68883", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r0], 0x48) write$sndseq(r1, &(0x7f0000000240)=[{0xe2, 0x8, 0xff, 0x2, @time={0x24000000, 0x3}, {0x1c, 0x1}, {0x8, 0x1}, @note={0x43, 0x2, 0x4, 0xfa, 0x9}}, {0x9, 0x0, 0x4, 0x7d, @tick, {0x81, 0xac}, {0x81, 0x6}, @queue={0x0, {0x1866440d}}}], 0x38) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES16=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x1, {0x1, 0x5, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) accept4$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff) semget(0x2, 0x7ec2de97fe2621b0, 0x12b) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0) 6.249966048s ago: executing program 1 (id=536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000001c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020000000000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000bab0f4ed44e5743900b700000000000000950000000000ed6e9cdc9a6f3da9350000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x2, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='caif0\x00'}) 6.2042628s ago: executing program 5 (id=537): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x3, 0x4, 0x1}}) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) socket(0x29, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x80000000, 0x2, {0x6, @win={{0x5043, 0x9c, 0x6, 0x1}, 0x2, 0x3, 0x0, 0x6, 0x0, 0x8}}, 0x65c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007aa084084705016891390102030109021200010000000009044c000002000000"], 0x0) 4.821758286s ago: executing program 1 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000ffdbdf250200e70008003b000700100005003700fc00000008003b000500000005002a000000000008002b000400000008003100090000000500370001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840000000206010300000000fffff000000000001c000780080009400000000208000a400000000508000a40000000092c00078005001400000000060005404e240000060004404e2200000600e33f4e23000008000840000000410900020073797a320000000005000400000000000c0007800800120000000000050001000700000000"], 0x84}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x459000, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0xfffffffffffffcb5, 0x0, 0x0, &(0x7f0000000300), 0x58}, 0x0) r10 = syz_io_uring_setup(0x4b01, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x2, 0x13e, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x40, &(0x7f0000000000)=0xe, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000005c0)={0x0, 0x1, @start={0x104}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) 4.628723666s ago: executing program 2 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000580)="b805000000b9040000000f01c10fdad9646564400f01cb410fc73c58b8010000000f01c1260f2220c744240068782a19c74424020e000000c7442406000000000f01142466baf80cb8a01a0c88ef66bafc0c66b8070066ef48b80e800000000000000f23c80f21f835080000000f23f8c4a19015d2", 0x75}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 4.162320804s ago: executing program 2 (id=541): iopl(0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xe8d, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9a}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x6) socketpair(0xb, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x16, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x3, 0x39, &(0x7f0000000880)=""/57, 0x40f00, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0xc, 0x8, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r0, 0x1, r0, r0, r0, r0], &(0x7f00000007c0)=[{0x2, 0x4, 0x2, 0x1}, {0x2, 0x2, 0x7}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0x4, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c00028006000100a800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r4, r7, 0x25, 0xc, @void}, 0x10) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r9, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000402c000480280001800e000100696d3d65646961746500000014000280080002800400010008000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) connect$ax25(r3, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) cachestat(r1, &(0x7f0000000340)={0xa8f, 0x5}, &(0x7f0000000380), 0x0) capset(&(0x7f0000000240)={0x20071026, r11}, &(0x7f0000000280)={0x8, 0x3, 0x2, 0x0, 0x8, 0x7757}) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac001000907800001312623eebe039a18030e76cdbbe73aeebd90000"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r2, 0xffffffffffff0000, 0x100, 0x3}) ioctl$UDMABUF_CREATE(r12, 0x40187542, &(0x7f0000000100)={r10, 0x0, 0xfffff000, 0xf100a000}) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) 3.293248622s ago: executing program 2 (id=542): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x0, 0x1e8}, 0xfffffffffffffec6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x47ab}, {r3, 0x10e}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x6, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x15, 0x3, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) lseek(r0, 0x851, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xb}, {0x10000002, 0x3, 0x3, 0x1}, {0x0, 0x4, 0xe, 0x3}], 0x10, 0x9, @void, @value}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000580)=r8, 0x4) 3.043619572s ago: executing program 5 (id=543): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$fb(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0x8, 0x4010, r2, 0xac000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000200)={0x2, 0xa, 0x1, 0x5, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @dev={0xfe, 0x80, '\x00', 0x44}]}, 0x58) tkill(r6, 0xb) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200, 0x1}, 0xe) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000100)={0x0, 0x7}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) 1.676740846s ago: executing program 2 (id=544): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000280)=0x84ee) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000e9750000000000000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 1.66597005s ago: executing program 5 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 1.568076783s ago: executing program 5 (id=546): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x60043, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x2) r3 = eventfd(0x7ffffffd) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r2}) r4 = eventfd2(0x80000000, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r4, 0x7ff, 0x0, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000006002000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40)="69032231ae7b520378", &(0x7f00000008c0), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1220) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030000000000000905c7"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0062617461647600005c000280210001004241364d414e5f49560000000c0001004241544d414e5f560d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f56"], 0x8c}}, 0x0) r9 = io_uring_setup(0x60d4, &(0x7f0000000300)={0x0, 0x30a8, 0x0, 0x3, 0xf9}) io_uring_enter(r9, 0x22e9, 0x849a, 0x18, &(0x7f00000001c0)={[0x8da]}, 0x8) r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r10, &(0x7f0000000380)=ANY=[], 0xfe3c) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6e655f7072696f726567657a65723e060000"], 0x13) r11 = inotify_init() r12 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r11, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r12, &(0x7f0000000040)=ANY=[], 0x69) 1.436615088s ago: executing program 2 (id=547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) lseek(r4, 0xc, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xdd, &(0x7f00000003c0)=""/221, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0xffffffffffffffc1, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x0, 0x1, 0xebb0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 991.097761ms ago: executing program 1 (id=548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYBLOB="8650b519fa9375f68883", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r0], 0x48) write$sndseq(r1, &(0x7f0000000240)=[{0xe2, 0x8, 0xff, 0x2, @time={0x24000000, 0x3}, {0x1c, 0x1}, {0x8, 0x1}, @note={0x43, 0x2, 0x4, 0xfa, 0x9}}, {0x9, 0x0, 0x4, 0x7d, @tick, {0x81, 0xac}, {0x81, 0x6}, @queue={0x0, {0x1866440d}}}], 0x38) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES16=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x1, {0x1, 0x5, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) accept4$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff) semget(0x2, 0x7ec2de97fe2621b0, 0x12b) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0) 173.110589ms ago: executing program 2 (id=549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000001c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020000000000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000bab0f4ed44e5743900b700000000000000950000000000ed6e9cdc9a6f3da9350000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x2, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='caif0\x00'}) 0s ago: executing program 3 (id=26): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x4000005, 0x1e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x6000, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, &(0x7f00000003c0)=""/85, 0x55}, 0x10001}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/163, 0xa3}, {&(0x7f0000001d40)=""/143, 0x8f}, {&(0x7f0000001e00)=""/8, 0x8}], 0x3, &(0x7f0000001e80)=""/193, 0xc1}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/233, 0xe9}, {&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/226, 0xe2}, {&(0x7f0000002340)=""/34, 0x22}], 0x5, &(0x7f0000002400)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/121, 0x79}, {&(0x7f00000024c0)=""/252, 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/50, 0x32}], 0x2, &(0x7f0000002980)=""/19, 0x13}, 0x2}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/155, 0x9b}], 0x1, &(0x7f0000002b40)=""/82, 0x52}, 0x5}, {{&(0x7f0000002bc0), 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/203, 0xcb}, {&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/100, 0x64}], 0x6, &(0x7f0000003140)=""/133, 0x85}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/98, 0x62}, {&(0x7f0000003280)=""/9, 0x9}], 0x2, &(0x7f0000003300)=""/133, 0x85}, 0xa6}], 0xa, 0x2, &(0x7f00000033c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) dup(r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008cc6312326637ade00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x420, &(0x7f0000003480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}, {@access_any}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.708460][ T5826] Bluetooth: hci0: command tx timeout [ 211.774860][ T7473] FAULT_INJECTION: forcing a failure. [ 211.774860][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 211.875535][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.1.305 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 211.875564][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 211.875577][ T7473] Call Trace: [ 211.875585][ T7473] [ 211.875593][ T7473] dump_stack_lvl+0x241/0x360 [ 211.875634][ T7473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.875666][ T7473] ? __pfx__printk+0x10/0x10 [ 211.875699][ T7473] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 211.875728][ T7473] ? __pfx___might_resched+0x10/0x10 [ 211.875755][ T7473] should_fail_ex+0x40a/0x550 [ 211.875783][ T7473] should_failslab+0xac/0x100 [ 211.875810][ T7473] kmem_cache_alloc_node_noprof+0x77/0x380 [ 211.875836][ T7473] ? __alloc_skb+0x1c3/0x440 [ 211.875869][ T7473] __alloc_skb+0x1c3/0x440 [ 211.875903][ T7473] ? __pfx___alloc_skb+0x10/0x10 [ 211.875935][ T7473] ? netlink_autobind+0xd6/0x2f0 [ 211.875955][ T7473] ? netlink_autobind+0x2b0/0x2f0 [ 211.875980][ T7473] netlink_sendmsg+0x638/0xcb0 [ 211.876012][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.876055][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.876072][ T7473] __sock_sendmsg+0x221/0x270 [ 211.876099][ T7473] ____sys_sendmsg+0x52a/0x7e0 [ 211.876125][ T7473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.876149][ T7473] ? __fget_files+0x2a/0x410 [ 211.876178][ T7473] ? __fget_files+0x2a/0x410 [ 211.876210][ T7473] __sys_sendmsg+0x269/0x350 [ 211.876234][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.876264][ T7473] ? do_sys_openat2+0x17a/0x1d0 [ 211.876313][ T7473] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.876339][ T7473] ? do_syscall_64+0x100/0x230 [ 211.876368][ T7473] ? do_syscall_64+0xb6/0x230 [ 211.876395][ T7473] do_syscall_64+0xf3/0x230 [ 211.876421][ T7473] ? clear_bhb_loop+0x35/0x90 [ 211.876450][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.876475][ T7473] RIP: 0033:0x7f69dd78cde9 [ 211.876492][ T7473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.876508][ T7473] RSP: 002b:00007f69de541038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.876529][ T7473] RAX: ffffffffffffffda RBX: 00007f69dd9a5fa0 RCX: 00007f69dd78cde9 [ 211.876547][ T7473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 211.876560][ T7473] RBP: 00007f69de541090 R08: 0000000000000000 R09: 0000000000000000 [ 211.876572][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.876583][ T7473] R13: 0000000000000000 R14: 00007f69dd9a5fa0 R15: 00007ffc7c80d688 [ 211.876611][ T7473] [ 212.010928][ T5935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.012087][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.153672][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.159694][ C1] hrtimer: interrupt took 274337869 ns [ 212.173358][ T7377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.188975][ T7377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.259728][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.142329][ T5935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.261433][ T7377] team0: Port device team_slave_0 added [ 213.304011][ T7377] team0: Port device team_slave_1 added [ 213.325655][ T5826] Bluetooth: hci4: command tx timeout [ 213.479240][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.515703][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.523009][ T7395] bridge_slave_0: entered allmulticast mode [ 213.540321][ T7395] bridge_slave_0: entered promiscuous mode [ 213.568193][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.584935][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.596556][ T7395] bridge_slave_1: entered allmulticast mode [ 213.603777][ T7395] bridge_slave_1: entered promiscuous mode [ 213.670015][ T5935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.746236][ T7377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.753228][ T7377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.779137][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.808717][ T7377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.822885][ T7377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.830026][ T7377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.855984][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.887013][ T7377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.378676][ T974] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.439895][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.539191][ T7377] hsr_slave_0: entered promiscuous mode [ 214.566402][ T7377] hsr_slave_1: entered promiscuous mode [ 214.572545][ T7377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.651361][ T7377] Cannot create hsr debugfs directory [ 214.702931][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 214.728972][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.763233][ T974] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.791085][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.835767][ T974] usb 3-1: config 0 descriptor?? [ 214.914478][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.036364][ T7521] FAULT_INJECTION: forcing a failure. [ 215.036364][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 215.049187][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.4.319 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 215.049222][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 215.049240][ T7521] Call Trace: [ 215.049250][ T7521] [ 215.049262][ T7521] dump_stack_lvl+0x241/0x360 [ 215.049302][ T7521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.049333][ T7521] ? __pfx__printk+0x10/0x10 [ 215.049368][ T7521] ? __pfx_lock_acquire+0x10/0x10 [ 215.049396][ T7521] should_fail_ex+0x40a/0x550 [ 215.049422][ T7521] should_failslab+0xac/0x100 [ 215.049447][ T7521] ? skb_clone+0x20c/0x390 [ 215.049465][ T7521] kmem_cache_alloc_noprof+0x70/0x380 [ 215.049495][ T7521] skb_clone+0x20c/0x390 [ 215.049518][ T7521] packet_rcv+0x633/0x14b0 [ 215.049543][ T7521] ? __pfx_packet_rcv+0x10/0x10 [ 215.049564][ T7521] dev_queue_xmit_nit+0x6b4/0xca0 [ 215.049593][ T7521] ? dev_queue_xmit_nit+0x2b/0xca0 [ 215.049628][ T7521] dev_hard_start_xmit+0x15f/0x7d0 [ 215.049650][ T7521] ? __pfx_validate_xmit_skb+0x10/0x10 [ 215.049679][ T7521] __dev_queue_xmit+0x1b73/0x3f50 [ 215.049698][ T7521] ? kasan_save_track+0x51/0x80 [ 215.049722][ T7521] ? ____sys_sendmsg+0x52a/0x7e0 [ 215.049758][ T7521] ? __dev_queue_xmit+0x2f4/0x3f50 [ 215.049782][ T7521] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.049818][ T7521] ? __copy_skb_header+0x437/0x5b0 [ 215.049839][ T7521] ? __asan_memcpy+0x40/0x70 [ 215.049868][ T7521] ? __copy_skb_header+0x437/0x5b0 [ 215.049892][ T7521] ? __skb_clone+0x454/0x6c0 [ 215.049918][ T7521] ? skb_clone+0x240/0x390 [ 215.049942][ T7521] __netlink_deliver_tap+0x56b/0x7f0 [ 215.049972][ T7521] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.050001][ T7521] netlink_deliver_tap+0x19d/0x1b0 [ 215.050032][ T7521] netlink_unicast+0x7c4/0x990 [ 215.050068][ T7521] ? __pfx_netlink_unicast+0x10/0x10 [ 215.050092][ T7521] ? __virt_addr_valid+0x45f/0x530 [ 215.050120][ T7521] ? __phys_addr_symbol+0x2f/0x70 [ 215.050145][ T7521] ? __check_object_size+0x47a/0x730 [ 215.050175][ T7521] netlink_sendmsg+0x8e4/0xcb0 [ 215.050205][ T7521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.050238][ T7521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.050255][ T7521] __sock_sendmsg+0x221/0x270 [ 215.050282][ T7521] ____sys_sendmsg+0x52a/0x7e0 [ 215.050309][ T7521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.050326][ T7521] ? __fget_files+0x2a/0x410 [ 215.050354][ T7521] ? __fget_files+0x2a/0x410 [ 215.050389][ T7521] __sys_sendmsg+0x269/0x350 [ 215.050413][ T7521] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.050444][ T7521] ? do_sys_openat2+0x17a/0x1d0 [ 215.050495][ T7521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.050522][ T7521] ? do_syscall_64+0x100/0x230 [ 215.050549][ T7521] ? do_syscall_64+0xb6/0x230 [ 215.050576][ T7521] do_syscall_64+0xf3/0x230 [ 215.050600][ T7521] ? clear_bhb_loop+0x35/0x90 [ 215.050628][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.050652][ T7521] RIP: 0033:0x7f2596b8cde9 [ 215.050669][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.050684][ T7521] RSP: 002b:00007f2597ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.050703][ T7521] RAX: ffffffffffffffda RBX: 00007f2596da5fa0 RCX: 00007f2596b8cde9 [ 215.050717][ T7521] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 215.050734][ T7521] RBP: 00007f2597ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 215.050746][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.050756][ T7521] R13: 0000000000000000 R14: 00007f2596da5fa0 R15: 00007fff84dddb08 [ 215.050785][ T7521] [ 215.430308][ T974] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 215.466802][ T7521] nlmon0: Master is either lo or non-ether device [ 215.489321][ T7395] team0: Port device team_slave_0 added [ 215.650628][ T7395] team0: Port device team_slave_1 added [ 215.876912][ T5935] bridge_slave_1: left allmulticast mode [ 215.882620][ T5935] bridge_slave_1: left promiscuous mode [ 215.893654][ T974] usb 3-1: USB disconnect, device number 14 [ 215.917285][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.950770][ T5935] bridge_slave_0: left allmulticast mode [ 215.960020][ T5935] bridge_slave_0: left promiscuous mode [ 215.972754][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.519345][ T8] libceph: connect (1)[c::]:6789 error -101 [ 217.525559][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 217.585236][ T7545] ceph: No mds server is up or the cluster is laggy [ 218.156817][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.191035][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.201915][ T5935] bond0 (unregistering): Released all slaves [ 218.275873][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.283166][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.324506][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.351088][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.358416][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.411296][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.915081][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 219.692759][ T7395] hsr_slave_0: entered promiscuous mode [ 219.729982][ T7395] hsr_slave_1: entered promiscuous mode [ 219.772754][ T7395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.815563][ T7395] Cannot create hsr debugfs directory [ 219.949507][ T5935] hsr_slave_0: left promiscuous mode [ 219.990040][ T5935] hsr_slave_1: left promiscuous mode [ 220.000941][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.012288][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.045051][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.055595][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.093517][ T5935] veth1_macvtap: left promiscuous mode [ 220.105078][ T5935] veth0_macvtap: left promiscuous mode [ 220.114805][ T5935] veth1_vlan: left promiscuous mode [ 220.129984][ T5935] veth0_vlan: left promiscuous mode [ 220.246486][ T974] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.396968][ T974] usb 3-1: device descriptor read/64, error -71 [ 220.602801][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 220.638819][ T974] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.650499][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 220.781654][ T974] usb 3-1: device descriptor read/64, error -71 [ 220.901763][ T974] usb usb3-port1: attempt power cycle [ 221.265615][ T974] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 221.315998][ T974] usb 3-1: device descriptor read/8, error -71 [ 221.404223][ T7587] 9pnet_fd: Insufficient options for proto=fd [ 221.576457][ T974] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.631491][ T974] usb 3-1: device descriptor read/8, error -71 [ 221.676020][ T7597] FAULT_INJECTION: forcing a failure. [ 221.676020][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 221.703347][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.4.334 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 221.703373][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 221.703385][ T7597] Call Trace: [ 221.703391][ T7597] [ 221.703399][ T7597] dump_stack_lvl+0x241/0x360 [ 221.703436][ T7597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.703466][ T7597] ? __pfx__printk+0x10/0x10 [ 221.703496][ T7597] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 221.703523][ T7597] ? __pfx___might_resched+0x10/0x10 [ 221.703549][ T7597] should_fail_ex+0x40a/0x550 [ 221.703574][ T7597] should_failslab+0xac/0x100 [ 221.703599][ T7597] kmem_cache_alloc_node_noprof+0x77/0x380 [ 221.703631][ T7597] ? __alloc_skb+0x1c3/0x440 [ 221.703663][ T7597] __alloc_skb+0x1c3/0x440 [ 221.703698][ T7597] ? __pfx___alloc_skb+0x10/0x10 [ 221.703729][ T7597] ? netlink_ack_tlv_len+0x6e/0x200 [ 221.703761][ T7597] netlink_ack+0x145/0xa50 [ 221.703804][ T7597] netlink_rcv_skb+0x262/0x430 [ 221.703834][ T7597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.703858][ T7597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.703908][ T7597] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.703940][ T7597] netlink_unicast+0x7f6/0x990 [ 221.703974][ T7597] ? __pfx_netlink_unicast+0x10/0x10 [ 221.703998][ T7597] ? __virt_addr_valid+0x45f/0x530 [ 221.704026][ T7597] ? __phys_addr_symbol+0x2f/0x70 [ 221.704061][ T7597] ? __check_object_size+0x47a/0x730 [ 221.704088][ T7597] netlink_sendmsg+0x8e4/0xcb0 [ 221.704116][ T7597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.704144][ T7597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.704160][ T7597] __sock_sendmsg+0x221/0x270 [ 221.704185][ T7597] ____sys_sendmsg+0x52a/0x7e0 [ 221.704228][ T7597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.704244][ T7597] ? __fget_files+0x2a/0x410 [ 221.704272][ T7597] ? __fget_files+0x2a/0x410 [ 221.704302][ T7597] __sys_sendmsg+0x269/0x350 [ 221.704325][ T7597] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.704365][ T7597] ? do_sys_openat2+0x17a/0x1d0 [ 221.704409][ T7597] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.704434][ T7597] ? do_syscall_64+0x100/0x230 [ 221.704461][ T7597] ? do_syscall_64+0xb6/0x230 [ 221.704486][ T7597] do_syscall_64+0xf3/0x230 [ 221.704510][ T7597] ? clear_bhb_loop+0x35/0x90 [ 221.704538][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.704562][ T7597] RIP: 0033:0x7f2596b8cde9 [ 221.704577][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.704592][ T7597] RSP: 002b:00007f2597ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.704611][ T7597] RAX: ffffffffffffffda RBX: 00007f2596da5fa0 RCX: 00007f2596b8cde9 [ 221.704628][ T7597] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 221.704638][ T7597] RBP: 00007f2597ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 221.704648][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.704658][ T7597] R13: 0000000000000000 R14: 00007f2596da5fa0 R15: 00007fff84dddb08 [ 221.704682][ T7597] [ 222.033891][ T974] usb usb3-port1: unable to enumerate USB device [ 222.272750][ T7377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.283001][ T7377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.349371][ T7377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.379999][ T7377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.637064][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.697961][ T7377] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.784135][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.791269][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.818892][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.826045][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.876753][ T7609] kvm: kvm [7608]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 222.907513][ T7609] kvm: kvm [7608]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 222.981637][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 222.988229][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 223.009788][ T7618] ceph: No mds server is up or the cluster is laggy [ 223.024846][ T7377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.109585][ T7395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.192983][ T7395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.250264][ T7395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.302142][ T7395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.604656][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.688573][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.727814][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.734924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.797435][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.804549][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.941808][ T7377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.316559][ T7641] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 224.736195][ T7377] veth0_vlan: entered promiscuous mode [ 224.761605][ T7377] veth1_vlan: entered promiscuous mode [ 224.883518][ T7377] veth0_macvtap: entered promiscuous mode [ 225.797329][ T7377] veth1_macvtap: entered promiscuous mode [ 225.948606][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.981658][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.014195][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.043252][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.072038][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.109220][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.159105][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.940706][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.956883][ T7377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.987432][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.005406][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.027517][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.039507][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.051562][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.078580][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.152111][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.164812][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.181355][ T7377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.195275][ T7377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.214753][ T7377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.254618][ T7377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.299953][ T7377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.324652][ T7377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.341841][ T7377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.370461][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.689029][ T7395] veth0_vlan: entered promiscuous mode [ 228.333007][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.344107][ T7395] veth1_vlan: entered promiscuous mode [ 228.372214][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.501172][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.539123][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.552890][ T7395] veth0_macvtap: entered promiscuous mode [ 228.625417][ T7395] veth1_macvtap: entered promiscuous mode [ 228.710695][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.749190][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.788346][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.835509][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.882226][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.911583][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.921516][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.932087][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.942054][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.952931][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.987269][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.021508][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.104087][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.123510][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.137957][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.160974][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.200214][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.241320][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.279675][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.331230][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.421758][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.507122][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.570242][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.757701][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.872514][ T7395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.887597][ T7395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.909371][ T7395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.918550][ T7395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.251009][ T7718] evm: overlay not supported [ 230.432530][ T5939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.526678][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.534547][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.678519][ T5939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.765620][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.773499][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.884932][ T5939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.008114][ T5939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.196270][ T5939] bridge_slave_1: left allmulticast mode [ 231.201981][ T5939] bridge_slave_1: left promiscuous mode [ 231.211719][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.318478][ T5939] bridge_slave_0: left allmulticast mode [ 231.384732][ T5939] bridge_slave_0: left promiscuous mode [ 231.776073][ T7749] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.065080][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.665407][ T7763] ceph: No mds server is up or the cluster is laggy [ 234.733734][ T8] libceph: connect (1)[c::]:6789 error -101 [ 234.743382][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 235.007047][ T7754] netlink: 'syz.1.355': attribute type 8 has an invalid length. [ 235.500467][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.519726][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.548537][ T5939] bond0 (unregistering): Released all slaves [ 235.655111][ T7745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.684427][ T7745] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.804660][ T7745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.825866][ T7745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.946906][ T7745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.952981][ T7745] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.131299][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.165551][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.176046][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.215552][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.232114][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.249446][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.257961][ T7807] xt_TCPMSS: Only works on TCP SYN packets [ 236.331652][ T5135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.340896][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.363259][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.380561][ T5135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.395675][ T5135] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.405060][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.642032][ T5939] hsr_slave_0: left promiscuous mode [ 236.664443][ T5939] hsr_slave_1: left promiscuous mode [ 236.675110][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.691597][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.701514][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.718080][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.784840][ T5939] veth1_macvtap: left promiscuous mode [ 236.794488][ T5939] veth0_macvtap: left promiscuous mode [ 236.801842][ T5939] veth1_vlan: left promiscuous mode [ 236.807357][ T5939] veth0_vlan: left promiscuous mode [ 236.845551][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 237.031470][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 237.096067][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.173517][ T25] usb 5-1: config 0 descriptor?? [ 237.706776][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 237.865606][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 237.891075][ T25] ath6kl: Unsupported hardware version: 0xef768983 [ 237.916507][ T25] ath6kl: Failed to init ath6kl core: -22 [ 237.926097][ T25] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 238.025571][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 238.346352][ T5826] Bluetooth: hci0: command tx timeout [ 238.506612][ T5826] Bluetooth: hci4: command tx timeout [ 238.979960][ T7836] FAULT_INJECTION: forcing a failure. [ 238.979960][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 238.994045][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.2.367 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 238.994071][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 238.994082][ T7836] Call Trace: [ 238.994088][ T7836] [ 238.994096][ T7836] dump_stack_lvl+0x241/0x360 [ 238.994134][ T7836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.994171][ T7836] ? __pfx__printk+0x10/0x10 [ 238.994198][ T7836] ? fs_reclaim_acquire+0x93/0x130 [ 238.994216][ T7836] ? __pfx___might_resched+0x10/0x10 [ 238.994238][ T7836] should_fail_ex+0x40a/0x550 [ 238.994262][ T7836] should_failslab+0xac/0x100 [ 238.994286][ T7836] __kmalloc_noprof+0xdd/0x4c0 [ 238.994307][ T7836] ? kstrtouint_from_user+0x128/0x190 [ 238.994328][ T7836] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 238.994350][ T7836] tomoyo_realpath_from_path+0xcf/0x5e0 [ 238.994378][ T7836] tomoyo_path_number_perm+0x236/0x860 [ 238.994400][ T7836] ? __lock_acquire+0x1397/0x2100 [ 238.994421][ T7836] ? tomoyo_path_number_perm+0x206/0x860 [ 238.994443][ T7836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.994496][ T7836] ? __fget_files+0x2a/0x410 [ 238.994519][ T7836] ? __fget_files+0x2a/0x410 [ 238.994544][ T7836] security_file_ioctl+0xc6/0x2a0 [ 238.994568][ T7836] __se_sys_ioctl+0x46/0x170 [ 238.994585][ T7836] do_syscall_64+0xf3/0x230 [ 238.994609][ T7836] ? clear_bhb_loop+0x35/0x90 [ 238.994634][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.994655][ T7836] RIP: 0033:0x7f31a978cde9 [ 238.994671][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.994684][ T7836] RSP: 002b:00007f31aa570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.994702][ T7836] RAX: ffffffffffffffda RBX: 00007f31a99a5fa0 RCX: 00007f31a978cde9 [ 238.994714][ T7836] RDX: 0000200000000100 RSI: 00000000000089f1 RDI: 0000000000000003 [ 238.994724][ T7836] RBP: 00007f31aa570090 R08: 0000000000000000 R09: 0000000000000000 [ 238.994735][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.994744][ T7836] R13: 0000000000000000 R14: 00007f31a99a5fa0 R15: 00007ffda1fcb588 [ 238.994768][ T7836] [ 238.994776][ T7836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.160978][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.391928][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 239.442956][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 239.785525][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 239.947521][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 240.105748][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 240.129978][ T25] usb 5-1: USB disconnect, device number 8 [ 240.435631][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.468847][ T5826] Bluetooth: hci0: command tx timeout [ 240.585688][ T5826] Bluetooth: hci4: command tx timeout [ 240.625739][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 240.661421][ T8] usb 3-1: config index 0 descriptor too short (expected 33572, got 36) [ 240.843570][ T8] usb 3-1: config 0 has too many interfaces: 236, using maximum allowed: 32 [ 240.989209][ T8] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 241.148921][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.225501][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 236 [ 241.271813][ T8] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 241.301740][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.333478][ T8] usb 3-1: Product: syz [ 241.345555][ T8] usb 3-1: Manufacturer: syz [ 241.353528][ T8] usb 3-1: SerialNumber: syz [ 241.364210][ T8] usb 3-1: config 0 descriptor?? [ 241.509680][ T5939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.565555][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 241.574687][ T8] usb 3-1: USB disconnect, device number 19 [ 241.589911][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 241.659466][ T7868] Bluetooth: MGMT ver 1.23 [ 241.672175][ T5939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.759413][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 241.782392][ T5939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.791739][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 241.810903][ T25] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 241.823865][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.854842][ T25] usb 5-1: config 0 descriptor?? [ 241.866453][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 241.959713][ T5939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.009971][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.017576][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.024806][ T7772] bridge_slave_0: entered allmulticast mode [ 242.034054][ T7772] bridge_slave_0: entered promiscuous mode [ 242.088638][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.098510][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.120571][ T7772] bridge_slave_1: entered allmulticast mode [ 242.156296][ T7772] bridge_slave_1: entered promiscuous mode [ 242.261390][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.302420][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.328709][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.337623][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.357483][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.373976][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.386752][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.399831][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.410577][ T25] steelseries 0003:1038:12C2.0002: unknown main item tag 0x0 [ 242.447454][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.483465][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.505533][ T5135] Bluetooth: hci0: command tx timeout [ 242.532384][ T7809] bridge_slave_0: entered allmulticast mode [ 242.539681][ T7809] bridge_slave_0: entered promiscuous mode [ 242.640869][ T5905] usb 5-1: USB disconnect, device number 9 [ 242.641278][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.675539][ T5135] Bluetooth: hci4: command tx timeout [ 242.682304][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.715741][ T7809] bridge_slave_1: entered allmulticast mode [ 242.722939][ T7809] bridge_slave_1: entered promiscuous mode [ 242.903516][ T7772] team0: Port device team_slave_0 added [ 243.030718][ T5939] bridge_slave_1: left allmulticast mode [ 243.041870][ T5939] bridge_slave_1: left promiscuous mode [ 243.052179][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.114719][ T5939] bridge_slave_0: left allmulticast mode [ 243.127262][ T5939] bridge_slave_0: left promiscuous mode [ 243.165768][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.705911][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.368908][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.386920][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.398460][ T5939] bond0 (unregistering): Released all slaves [ 244.442378][ T7772] team0: Port device team_slave_1 added [ 244.476288][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.595915][ T5826] Bluetooth: hci0: command 0x0419 tx timeout [ 244.632633][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.651292][ T7916] bond0: (slave rose0): Enslaving as an active interface with an up link [ 244.678173][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.755876][ T5826] Bluetooth: hci4: command tx timeout [ 244.766257][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.782750][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.818198][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.924489][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.942632][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.981662][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.013653][ T7809] team0: Port device team_slave_0 added [ 245.025006][ T7809] team0: Port device team_slave_1 added [ 245.181060][ T7928] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 245.391333][ T7772] hsr_slave_0: entered promiscuous mode [ 245.423228][ T7772] hsr_slave_1: entered promiscuous mode [ 245.443033][ T7772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.455589][ T7772] Cannot create hsr debugfs directory [ 245.511615][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.523837][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.534232][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.536071][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.566774][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.602848][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.603025][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.621339][ T5135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.635134][ T5939] hsr_slave_0: left promiscuous mode [ 245.641138][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.710338][ T7940] netlink: 14 bytes leftover after parsing attributes in process `syz.2.385'. [ 245.761776][ T5939] hsr_slave_1: left promiscuous mode [ 245.802512][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.833115][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.922657][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.948989][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.160589][ T5939] veth1_macvtap: left promiscuous mode [ 246.220863][ T5939] veth0_macvtap: left promiscuous mode [ 246.251503][ T5939] veth1_vlan: left promiscuous mode [ 246.298794][ T5939] veth0_vlan: left promiscuous mode [ 246.670228][ T5826] Bluetooth: hci0: command 0x0419 tx timeout [ 246.831611][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 246.871073][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 247.254937][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.262295][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.289124][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.632210][ T7809] hsr_slave_0: entered promiscuous mode [ 247.667975][ T7809] hsr_slave_1: entered promiscuous mode [ 247.691542][ T7809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.725630][ T7809] Cannot create hsr debugfs directory [ 248.356403][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 248.388891][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 248.503160][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 248.512277][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 248.521368][ T5826] Bluetooth: hci3: command tx timeout [ 249.001316][ T7969] sp0: Synchronizing with TNC [ 249.036797][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 249.755441][ T7973] program syz.1.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.917088][ T7977] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.960032][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.979159][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.993139][ T7934] bridge_slave_0: entered allmulticast mode [ 250.002569][ T7934] bridge_slave_0: entered promiscuous mode [ 250.036963][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.065741][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.073948][ T7934] bridge_slave_1: entered allmulticast mode [ 250.094655][ T7934] bridge_slave_1: entered promiscuous mode [ 250.524804][ T7986] FAULT_INJECTION: forcing a failure. [ 250.524804][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.545489][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.1.393 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 250.545525][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.545536][ T7986] Call Trace: [ 250.545543][ T7986] [ 250.545551][ T7986] dump_stack_lvl+0x241/0x360 [ 250.545587][ T7986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.545616][ T7986] ? __pfx__printk+0x10/0x10 [ 250.545674][ T7986] ? snprintf+0xda/0x120 [ 250.545697][ T7986] should_fail_ex+0x40a/0x550 [ 250.545723][ T7986] _copy_to_user+0x31/0xb0 [ 250.545746][ T7986] simple_read_from_buffer+0xca/0x150 [ 250.545773][ T7986] proc_fail_nth_read+0x1e9/0x250 [ 250.545800][ T7986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.545826][ T7986] ? rw_verify_area+0x243/0x630 [ 250.545855][ T7986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.545879][ T7986] vfs_read+0x1f8/0xb40 [ 250.545909][ T7986] ? fdget_pos+0x254/0x320 [ 250.545935][ T7986] ? __pfx___mutex_lock+0x10/0x10 [ 250.545962][ T7986] ? __pfx_vfs_read+0x10/0x10 [ 250.545994][ T7986] ? __fget_files+0x2a/0x410 [ 250.546020][ T7986] ? __fget_files+0x395/0x410 [ 250.546043][ T7986] ? __fget_files+0x2a/0x410 [ 250.546077][ T7986] ksys_read+0x18f/0x2b0 [ 250.546098][ T7986] ? __pfx_ksys_read+0x10/0x10 [ 250.546116][ T7986] ? do_syscall_64+0x100/0x230 [ 250.546145][ T7986] ? do_syscall_64+0xb6/0x230 [ 250.546173][ T7986] do_syscall_64+0xf3/0x230 [ 250.546199][ T7986] ? clear_bhb_loop+0x35/0x90 [ 250.546229][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.546255][ T7986] RIP: 0033:0x7f69dd78b7fc [ 250.546271][ T7986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.546287][ T7986] RSP: 002b:00007f69de541030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.546307][ T7986] RAX: ffffffffffffffda RBX: 00007f69dd9a5fa0 RCX: 00007f69dd78b7fc [ 250.546322][ T7986] RDX: 000000000000000f RSI: 00007f69de5410a0 RDI: 0000000000000004 [ 250.546333][ T7986] RBP: 00007f69de541090 R08: 0000000000000000 R09: 00000000cc9bd000 [ 250.546345][ T7986] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 250.546357][ T7986] R13: 0000000000000000 R14: 00007f69dd9a5fa0 R15: 00007ffc7c80d688 [ 250.546386][ T7986] [ 250.832535][ T5826] Bluetooth: hci3: command tx timeout [ 250.869223][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.172628][ T6058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.244274][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.089458][ T7934] team0: Port device team_slave_0 added [ 252.146865][ T6058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.175580][ T7934] team0: Port device team_slave_1 added [ 252.258694][ T6058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.283120][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.297602][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.353795][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.399978][ T6058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.421794][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.422132][ T7997] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 252.431150][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.464407][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.484228][ T7997] netlink: 134708 bytes leftover after parsing attributes in process `syz.2.397'. [ 252.494522][ T7772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.509367][ T7772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.525276][ T7772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.540473][ T7772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.611197][ T7934] hsr_slave_0: entered promiscuous mode [ 252.617545][ T7934] hsr_slave_1: entered promiscuous mode [ 252.623494][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.632855][ T7934] Cannot create hsr debugfs directory [ 252.715698][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 252.738740][ T7809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.764087][ T7809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.800364][ T6058] bridge_slave_1: left allmulticast mode [ 252.811588][ T6058] bridge_slave_1: left promiscuous mode [ 252.819534][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.828821][ T6058] bridge_slave_0: left allmulticast mode [ 252.838240][ T6058] bridge_slave_0: left promiscuous mode [ 252.844051][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.885567][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 252.908975][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.916656][ T5826] Bluetooth: hci3: command tx timeout [ 252.921260][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 252.950164][ T25] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 252.961669][ T25] usb 3-1: Manufacturer: syz [ 252.979613][ T25] usb 3-1: config 0 descriptor?? [ 253.222417][ T25] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 253.232668][ T25] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 253.262828][ T25] usb 3-1: USB disconnect, device number 20 [ 253.269508][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.295308][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.307822][ T6058] bond0 (unregistering): Released all slaves [ 253.322812][ T7809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.369455][ T7809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.592346][ T6058] hsr_slave_0: left promiscuous mode [ 253.603534][ T6058] hsr_slave_1: left promiscuous mode [ 253.609531][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.617062][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.624900][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.633290][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.654425][ T6058] veth1_macvtap: left promiscuous mode [ 253.660175][ T6058] veth0_macvtap: left promiscuous mode [ 253.666001][ T6058] veth1_vlan: left promiscuous mode [ 253.671340][ T6058] veth0_vlan: left promiscuous mode [ 254.995825][ T5826] Bluetooth: hci3: command tx timeout [ 255.441798][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 255.653599][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 255.868375][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.877014][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.273997][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.389663][ T8020] syzkaller0: entered promiscuous mode [ 256.400301][ T8020] syzkaller0: entered allmulticast mode [ 256.408614][ T7934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.420718][ T7934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.430959][ T7934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.440671][ T7934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.967236][ T8044] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 259.437045][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.493009][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.513652][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.557301][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.564420][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.596570][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.609774][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.658789][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.666170][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.781266][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.788536][ T7833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.844745][ T8] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 259.862473][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.061884][ T8] usb 2-1: config 0 descriptor?? [ 260.181318][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.188527][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.210145][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.264280][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.271425][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.289068][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.296209][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.427612][ T8] kaweth 2-1:0.0: Firmware present in device. [ 260.474614][ T7809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.735911][ T8] kaweth 2-1:0.0: Statistics collection: 0 [ 260.762627][ T8] kaweth 2-1:0.0: Multicast filter limit: 0 [ 260.809640][ T8] kaweth 2-1:0.0: MTU: 0 [ 260.853898][ T8] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 261.242176][ T8] kaweth 2-1:0.0: Error setting SOFS wait [ 261.268853][ T8] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 261.324221][ T8] usb 2-1: USB disconnect, device number 17 [ 261.404879][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.436909][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.482223][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.571509][ T7809] veth0_vlan: entered promiscuous mode [ 261.589297][ T7809] veth1_vlan: entered promiscuous mode [ 261.618660][ T8089] netlink: 'syz.2.414': attribute type 27 has an invalid length. [ 261.714253][ T7809] veth0_macvtap: entered promiscuous mode [ 261.764777][ T7772] veth0_vlan: entered promiscuous mode [ 261.788398][ T7809] veth1_macvtap: entered promiscuous mode [ 261.910990][ T7772] veth1_vlan: entered promiscuous mode [ 261.988454][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.016748][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.034386][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.052465][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.079510][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.115423][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.146828][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.170925][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.190756][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.211502][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.228491][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.246411][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.268680][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.292441][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.321709][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.337684][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.390862][ T7809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.421006][ T7809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.430955][ T7809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.445485][ T7809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.676508][ T7772] veth0_macvtap: entered promiscuous mode [ 262.734651][ T7772] veth1_macvtap: entered promiscuous mode [ 262.791045][ T7934] veth0_vlan: entered promiscuous mode [ 262.891222][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.904245][ T7833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.955418][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.975402][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.995651][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.020946][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.067582][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.099385][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.115549][ T7833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.143969][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.163434][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.189325][ T7934] veth1_vlan: entered promiscuous mode [ 263.635798][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.732073][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.832610][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.863537][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.892737][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.915851][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.933162][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.944074][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.965112][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.985474][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.006887][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.107993][ T7772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.164856][ T7772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.186319][ T7772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.195842][ T7772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.317786][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.375725][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.521936][ T7934] veth0_macvtap: entered promiscuous mode [ 264.564809][ T8149] netlink: 'syz.1.420': attribute type 29 has an invalid length. [ 264.615125][ T7934] veth1_macvtap: entered promiscuous mode [ 264.699578][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.735462][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.792870][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.808963][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.820390][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.831714][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.842389][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.866883][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.890989][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.920245][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.941074][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.961556][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.974846][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.030942][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.042496][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.055438][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.081999][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.127070][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.148130][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.163908][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.178574][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.194578][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.207538][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.235900][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.267962][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.296263][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.331723][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.356890][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.463354][ T8177] netlink: 14 bytes leftover after parsing attributes in process `syz.2.426'. [ 265.485739][ T5908] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 265.519553][ T7934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.685923][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 265.744985][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.819647][ T5908] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 265.871061][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.921892][ T5908] usb 2-1: Product: syz [ 265.960426][ T5908] usb 2-1: Manufacturer: syz [ 265.985765][ T5908] usb 2-1: SerialNumber: syz [ 266.128306][ T5908] usb 2-1: config 0 descriptor?? [ 266.203206][ T7934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.204687][ T5908] usb 2-1: bad CDC descriptors [ 266.212026][ T7934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.212063][ T7934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.227804][ T5908] usb 2-1: unsupported MDLM descriptors [ 266.798183][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.097536][ T5825] usb 2-1: USB disconnect, device number 18 [ 267.181028][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.397255][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.461696][ T7833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.491827][ T7833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.567460][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.672279][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.705418][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.874204][ T12] bridge_slave_1: left allmulticast mode [ 267.882677][ T12] bridge_slave_1: left promiscuous mode [ 267.901594][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.914530][ T12] bridge_slave_0: left allmulticast mode [ 267.930908][ T12] bridge_slave_0: left promiscuous mode [ 267.940390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.071026][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.084011][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.095100][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.114099][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.130366][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.143073][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.448202][ T8211] Bluetooth: MGMT ver 1.23 [ 268.745828][ T5908] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 268.946686][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.993607][ T5908] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 269.085614][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.114410][ T5908] usb 2-1: config 0 descriptor?? [ 269.165783][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.189009][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.212710][ T12] bond0 (unregistering): Released all slaves [ 269.293278][ T8209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.429'. [ 269.728027][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.749696][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.762551][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 269.769478][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.802603][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.818442][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.828882][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.838735][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.891104][ T5908] usb 2-1: USB disconnect, device number 19 [ 270.185631][ T5135] Bluetooth: hci0: command tx timeout [ 270.285104][ T12] hsr_slave_0: left promiscuous mode [ 270.298964][ T12] hsr_slave_1: left promiscuous mode [ 270.312233][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.321137][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.336342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.366478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.431866][ T12] veth1_macvtap: left promiscuous mode [ 270.465996][ T12] veth0_macvtap: left promiscuous mode [ 270.496614][ T12] veth1_vlan: left promiscuous mode [ 270.524422][ T12] veth0_vlan: left promiscuous mode [ 270.665012][ T8236] syz.5.433: attempt to access beyond end of device [ 270.665012][ T8236] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 270.681746][ T8236] FAT-fs (nbd5): unable to read boot sector [ 271.423939][ T8247] dccp_close: ABORT with 180 bytes unread [ 271.606055][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.757328][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 271.772085][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.796117][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.807746][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.825683][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.847443][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.873734][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.884398][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.891891][ T25] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.902477][ T25] usb 6-1: Manufacturer: syz [ 271.920505][ T25] usb 6-1: config 0 descriptor?? [ 271.959509][ T5135] Bluetooth: hci4: command tx timeout [ 271.974860][ T12] team0 (unregistering): Port device team_slave_0 removed [ 272.208059][ T25] rc_core: IR keymap rc-hauppauge not found [ 272.214096][ T25] Registered IR keymap rc-empty [ 272.219787][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.256828][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.265526][ T5135] Bluetooth: hci0: command tx timeout [ 272.282300][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 272.300050][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 272.314909][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.335579][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.365641][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.385533][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.406411][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.425868][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.445535][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.465554][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.495987][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.558300][ T25] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.598296][ T25] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 272.645451][ T25] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 272.715776][ T25] usb 6-1: USB disconnect, device number 2 [ 272.830690][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 272.951783][ T8267] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 273.380133][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 273.425887][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.449855][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.464312][ T8203] bridge_slave_0: entered allmulticast mode [ 273.482429][ T8203] bridge_slave_0: entered promiscuous mode [ 273.815461][ T5825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.055501][ T5135] Bluetooth: hci4: command tx timeout [ 274.345515][ T5135] Bluetooth: hci0: command tx timeout [ 274.369491][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.385833][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.393156][ T8203] bridge_slave_1: entered allmulticast mode [ 274.402215][ T8203] bridge_slave_1: entered promiscuous mode [ 274.408235][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 274.425903][ T5825] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 274.443178][ T5825] usb 6-1: config 0 has no interface number 0 [ 274.453206][ T5825] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 274.483156][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.507115][ T5825] usb 6-1: Product: syz [ 274.518993][ T5825] usb 6-1: Manufacturer: syz [ 274.519744][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 274.525583][ T5825] usb 6-1: SerialNumber: syz [ 274.563950][ T5825] usb 6-1: config 0 descriptor?? [ 274.606567][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.616290][ T5825] gspca_main: touptek-2.14.0 probing 0547:6801 [ 274.655186][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.888225][ T8203] team0: Port device team_slave_0 added [ 274.931207][ T8203] team0: Port device team_slave_1 added [ 275.040636][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.309553][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.348290][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.366721][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.448578][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.491206][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.517669][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.545267][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.583011][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.591802][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.600411][ T8223] bridge_slave_0: entered allmulticast mode [ 275.630177][ T8223] bridge_slave_0: entered promiscuous mode [ 275.692969][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.908333][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.944278][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.989818][ T8223] bridge_slave_1: entered allmulticast mode [ 276.050406][ T8223] bridge_slave_1: entered promiscuous mode [ 276.106153][ T5135] Bluetooth: hci4: command tx timeout [ 276.425557][ T5135] Bluetooth: hci0: command tx timeout [ 276.465548][ T25] usb 6-1: USB disconnect, device number 3 [ 276.614561][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.922366][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.056604][ T8203] hsr_slave_0: entered promiscuous mode [ 277.063171][ T8203] hsr_slave_1: entered promiscuous mode [ 277.093474][ T8203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.116539][ T8335] 9pnet_fd: Insufficient options for proto=fd [ 277.122725][ T8203] Cannot create hsr debugfs directory [ 277.139638][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.274348][ T8223] team0: Port device team_slave_0 added [ 277.314468][ T8340] dccp_close: ABORT with 180 bytes unread [ 277.410998][ T8223] team0: Port device team_slave_1 added [ 278.075557][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.082606][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.148690][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.185658][ T5135] Bluetooth: hci4: command tx timeout [ 278.290776][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.308742][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.375425][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.560562][ T12] bridge_slave_1: left allmulticast mode [ 278.578846][ T12] bridge_slave_1: left promiscuous mode [ 278.586501][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.616153][ T12] bridge_slave_0: left allmulticast mode [ 278.621847][ T12] bridge_slave_0: left promiscuous mode [ 278.629889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.062371][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.075121][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.086169][ T12] bond0 (unregistering): Released all slaves [ 279.343778][ T8357] netlink: 'syz.2.454': attribute type 24 has an invalid length. [ 279.871897][ T8223] hsr_slave_0: entered promiscuous mode [ 279.890475][ T8223] hsr_slave_1: entered promiscuous mode [ 279.919524][ T8223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.929753][ T8223] Cannot create hsr debugfs directory [ 280.284511][ T12] hsr_slave_0: left promiscuous mode [ 280.291848][ T12] hsr_slave_1: left promiscuous mode [ 280.298340][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.305938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.314237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.321898][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.352185][ T12] veth1_macvtap: left promiscuous mode [ 280.358323][ T12] veth0_macvtap: left promiscuous mode [ 280.363978][ T12] veth1_vlan: left promiscuous mode [ 280.369442][ T12] veth0_vlan: left promiscuous mode [ 280.397087][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 280.429096][ T8370] 9pnet_fd: Insufficient options for proto=fd [ 280.591249][ T5910] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 7 [ 280.614925][ T5910] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17352, setting to 1024 [ 280.652147][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.667728][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.690602][ T5910] usb 2-1: Product: syz [ 280.700771][ T5910] usb 2-1: Manufacturer: syz [ 280.709084][ T5910] usb 2-1: SerialNumber: syz [ 281.203844][ T12] team0 (unregistering): Port device team_slave_1 removed [ 281.297110][ T12] team0 (unregistering): Port device team_slave_0 removed [ 282.155872][ T5910] cdc_ncm 2-1:1.0: bind() failure [ 282.196170][ T5910] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 282.312631][ T5910] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 282.375804][ T5910] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 282.519732][ T5910] usb 2-1: USB disconnect, device number 20 [ 282.709357][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 282.715511][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 282.819400][ T8388] ceph: No mds server is up or the cluster is laggy [ 283.068501][ T8203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.092898][ T8203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.124530][ T8203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.214660][ T8203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.405668][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 283.531665][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.568054][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.587701][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 283.616068][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.623327][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.631045][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 283.638848][ T5908] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 283.649320][ T5908] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.662079][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.669306][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.677605][ T5908] usb 6-1: config 1 has no interface number 1 [ 283.683723][ T5908] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 283.705711][ T5908] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.715258][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.724257][ T5908] usb 6-1: Product: syz [ 283.729653][ T5908] usb 6-1: Manufacturer: syz [ 283.741111][ T5908] usb 6-1: SerialNumber: syz [ 283.778382][ T8203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.803576][ T8203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.827391][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.845545][ T25] usb 2-1: config 0 has no interfaces? [ 283.862782][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.895423][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.940730][ T25] usb 2-1: config 0 descriptor?? [ 283.967348][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.464'. [ 284.027769][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.046164][ T8223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.067818][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.100910][ T8223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.116691][ T5908] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 284.152405][ T8223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.167952][ T8420] mmap: syz.2.466 (8420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 284.194069][ T8223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.201876][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.212506][ T5908] usb 6-1: USB disconnect, device number 4 [ 284.220613][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.246693][ T8408] FAULT_INJECTION: forcing a failure. [ 284.246693][ T8408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.293111][ T8408] CPU: 1 UID: 0 PID: 8408 Comm: syz.1.465 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 284.293140][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 284.293155][ T8408] Call Trace: [ 284.293160][ T8408] [ 284.293166][ T8408] dump_stack_lvl+0x241/0x360 [ 284.293196][ T8408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.293220][ T8408] ? __pfx__printk+0x10/0x10 [ 284.293265][ T8408] ? __pfx_lock_release+0x10/0x10 [ 284.293290][ T8408] should_fail_ex+0x40a/0x550 [ 284.293310][ T8408] _copy_from_user+0x2d/0xb0 [ 284.293327][ T8408] ucma_migrate_id+0x149/0xb60 [ 284.293352][ T8408] ? __might_fault+0xaa/0x120 [ 284.293376][ T8408] ? __pfx_lock_release+0x10/0x10 [ 284.293394][ T8408] ? __pfx_ucma_migrate_id+0x10/0x10 [ 284.293417][ T8408] ? __might_fault+0xaa/0x120 [ 284.293443][ T8408] ? __pfx_ucma_migrate_id+0x10/0x10 [ 284.293461][ T8408] ucma_write+0x2d9/0x420 [ 284.293481][ T8408] ? __pfx_ucma_write+0x10/0x10 [ 284.293503][ T8408] ? bpf_lsm_file_permission+0x9/0x10 [ 284.293519][ T8408] ? rw_verify_area+0x243/0x630 [ 284.293545][ T8408] vfs_writev+0x5b8/0xbc0 [ 284.293572][ T8408] ? __pfx_ucma_write+0x10/0x10 [ 284.293589][ T8408] ? __pfx_vfs_writev+0x10/0x10 [ 284.293617][ T8408] ? do_sys_openat2+0x17a/0x1d0 [ 284.293637][ T8408] ? __fget_files+0x2a/0x410 [ 284.293657][ T8408] ? __fget_files+0x395/0x410 [ 284.293675][ T8408] ? __fget_files+0x2a/0x410 [ 284.293700][ T8408] do_writev+0x1b6/0x360 [ 284.293723][ T8408] ? __pfx_do_writev+0x10/0x10 [ 284.293741][ T8408] ? __secure_computing+0x125/0x370 [ 284.293770][ T8408] do_syscall_64+0xf3/0x230 [ 284.293790][ T8408] ? clear_bhb_loop+0x35/0x90 [ 284.293813][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.293833][ T8408] RIP: 0033:0x7f69dd78cde9 [ 284.293847][ T8408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.293859][ T8408] RSP: 002b:00007f69de541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 284.293876][ T8408] RAX: ffffffffffffffda RBX: 00007f69dd9a5fa0 RCX: 00007f69dd78cde9 [ 284.293887][ T8408] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012 [ 284.293897][ T8408] RBP: 00007f69de541090 R08: 0000000000000000 R09: 0000000000000000 [ 284.293906][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.293915][ T8408] R13: 0000000000000000 R14: 00007f69dd9a5fa0 R15: 00007ffc7c80d688 [ 284.293935][ T8408] [ 284.296639][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.562848][ T5878] usb 2-1: USB disconnect, device number 21 [ 284.591953][ T6847] udevd[6847]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.789955][ T8203] veth0_vlan: entered promiscuous mode [ 284.809685][ T8203] veth1_vlan: entered promiscuous mode [ 284.836938][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.924273][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.972465][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.979686][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.021413][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.028569][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.092650][ T8203] veth0_macvtap: entered promiscuous mode [ 285.152417][ T8203] veth1_macvtap: entered promiscuous mode [ 285.288156][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.383710][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.585609][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.651018][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.787412][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 285.819051][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.852638][ T9] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 286.035111][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.044212][ T9] usb 3-1: config 0 has no interface number 0 [ 286.056569][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 286.078042][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.083752][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.086242][ T9] usb 3-1: Product: syz [ 286.119348][ T9] usb 3-1: Manufacturer: syz [ 286.123989][ T9] usb 3-1: SerialNumber: syz [ 286.145679][ T9] usb 3-1: config 0 descriptor?? [ 286.147545][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.163593][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 286.191235][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.224209][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.243148][ T8446] kvm: kvm [8445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 286.271209][ T8446] kvm: kvm [8445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 286.284723][ T8446] kvm: kvm [8445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 286.298170][ T8446] kvm: kvm [8445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 286.316249][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.340303][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.361422][ T8446] kvm: kvm [8445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 286.374873][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.448598][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.500272][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.537668][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.570133][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.582830][ T8457] 9pnet_fd: Insufficient options for proto=fd [ 286.591336][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.601417][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.612234][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.624040][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.679628][ T8203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.705863][ T8203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.730892][ T8203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.749740][ T8203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.017064][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.051629][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.154492][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.170297][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.183541][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.301229][ T8223] veth0_vlan: entered promiscuous mode [ 287.351179][ T8223] veth1_vlan: entered promiscuous mode [ 287.429115][ T8223] veth0_macvtap: entered promiscuous mode [ 287.539256][ T8223] veth1_macvtap: entered promiscuous mode [ 287.593304][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.607299][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.617891][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.645422][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.666660][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.685935][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.705156][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.724600][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.734813][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.755945][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.773859][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.799193][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.810662][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.851919][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.866958][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.877810][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.094892][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.106875][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.117914][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.128032][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.140998][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.151446][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.636127][ T5910] usb 3-1: USB disconnect, device number 21 [ 288.705391][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.770243][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.793428][ T8223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.803498][ T8223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.815455][ T8223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.835420][ T8223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.919764][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.047042][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.218826][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.253325][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.312474][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.342940][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.356789][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.465890][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.614799][ T12] bridge_slave_1: left allmulticast mode [ 289.620618][ T12] bridge_slave_1: left promiscuous mode [ 289.630858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.640938][ T12] bridge_slave_0: left allmulticast mode [ 289.649701][ T12] bridge_slave_0: left promiscuous mode [ 289.661960][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.364160][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.378619][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.392465][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.408971][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.427885][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.435199][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.502229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.513148][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.525126][ T12] bond0 (unregistering): Released all slaves [ 290.863959][ T12] hsr_slave_0: left promiscuous mode [ 290.879104][ T12] hsr_slave_1: left promiscuous mode [ 290.885166][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.894528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.903871][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.911997][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.945279][ T12] veth1_macvtap: left promiscuous mode [ 290.951165][ T12] veth0_macvtap: left promiscuous mode [ 290.957110][ T12] veth1_vlan: left promiscuous mode [ 290.962431][ T12] veth0_vlan: left promiscuous mode [ 291.353893][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 291.840811][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 292.166453][ T5878] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 292.215531][ T5878] usb 3-1: config 0 has no interface number 0 [ 292.221881][ T5878] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 292.269427][ T5878] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 292.279593][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.314417][ T5878] usb 3-1: Product: syz [ 292.325503][ T5878] usb 3-1: Manufacturer: syz [ 292.330161][ T5878] usb 3-1: SerialNumber: syz [ 292.396728][ T5878] usb 3-1: config 0 descriptor?? [ 292.514557][ T5135] Bluetooth: hci0: command tx timeout [ 292.712380][ T8566] process 'syz.5.484' launched '/dev/fd/10' with NULL argv: empty string added [ 293.497138][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.507952][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.517856][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.526435][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.536264][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.543830][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.772266][ T5878] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 293.799863][ T5878] usb 3-1: USB disconnect, device number 22 [ 293.896153][ T12] team0 (unregistering): Port device team_slave_1 removed [ 293.931271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 294.144722][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.488'. [ 294.585867][ T5841] Bluetooth: hci0: command tx timeout [ 294.595295][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 294.615555][ T8580] mmap: syz.2.490 (8580): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 295.534217][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.560483][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.575553][ T8532] bridge_slave_0: entered allmulticast mode [ 295.583059][ T8532] bridge_slave_0: entered promiscuous mode [ 295.622576][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.629819][ T5841] Bluetooth: hci4: command tx timeout [ 295.661971][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.677188][ T8532] bridge_slave_1: entered allmulticast mode [ 295.684198][ T8532] bridge_slave_1: entered promiscuous mode [ 296.693415][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 296.858936][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.887155][ T8622] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 296.970903][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.004544][ T8622] netlink: 'syz.2.497': attribute type 21 has an invalid length. [ 297.032322][ T8622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.497'. [ 297.127394][ T8532] team0: Port device team_slave_0 added [ 297.164232][ T8532] team0: Port device team_slave_1 added [ 297.259887][ T8637] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 297.328213][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.339221][ T5825] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 297.397532][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 297.419585][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.437087][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.473185][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.518113][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.529204][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 297.540786][ T8643] netlink: 'syz.2.500': attribute type 49 has an invalid length. [ 297.545811][ T5825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 297.566977][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.585439][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.604702][ T5825] usb 2-1: config 0 descriptor?? [ 297.628078][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.639929][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.666257][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.705609][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 297.710826][ T5841] Bluetooth: hci4: command tx timeout [ 297.719339][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 297.731453][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 297.743277][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.753806][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.764127][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.777554][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.787010][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.819666][ T5825] ath6kl: Failed to submit usb control message: -71 [ 297.835061][ T5825] ath6kl: unable to send the bmi data to the device: -71 [ 297.842832][ T5825] ath6kl: Unable to send get target info: -71 [ 297.866473][ T5825] ath6kl: Failed to init ath6kl core: -71 [ 297.873308][ T5825] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 297.938828][ T5825] usb 2-1: USB disconnect, device number 22 [ 297.976417][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.010236][ T8532] hsr_slave_0: entered promiscuous mode [ 298.015925][ T5878] usb 6-1: GET_CAPABILITIES returned 0 [ 298.023103][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 298.030959][ T8532] hsr_slave_1: entered promiscuous mode [ 298.040337][ T8532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.053661][ T8532] Cannot create hsr debugfs directory [ 298.074065][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.091949][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.101784][ T8572] bridge_slave_0: entered allmulticast mode [ 298.124519][ T8572] bridge_slave_0: entered promiscuous mode [ 298.149756][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.164745][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.167889][ T29] audit: type=1326 audit(1738957176.990:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.2.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a978cde9 code=0x0 [ 298.172576][ T8572] bridge_slave_1: entered allmulticast mode [ 298.203514][ T8572] bridge_slave_1: entered promiscuous mode [ 298.216252][ T5825] usb 6-1: USB disconnect, device number 5 [ 298.644533][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.756734][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 298.848418][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.010519][ T8572] team0: Port device team_slave_0 added [ 299.131780][ T8667] netlink: 'syz.1.503': attribute type 9 has an invalid length. [ 299.151732][ T8572] team0: Port device team_slave_1 added [ 299.161798][ T12] bridge_slave_1: left allmulticast mode [ 299.168503][ T12] bridge_slave_1: left promiscuous mode [ 299.190748][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.213858][ T12] bridge_slave_0: left allmulticast mode [ 299.220744][ T12] bridge_slave_0: left promiscuous mode [ 299.228700][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.249094][ T5841] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 299.572546][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.627243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.646650][ T12] bond0 (unregistering): Released all slaves [ 299.787095][ T5841] Bluetooth: hci4: command tx timeout [ 299.825500][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.838449][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.889118][ T8572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.541428][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.573655][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.624950][ T8572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.825559][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 301.350848][ T8699] VFS: unable to find oldfs superblock on device nullb0 [ 301.519251][ T25] IPVS: starting estimator thread 0... [ 301.526299][ T8704] IPVS: ip_vs_add_dest(): server weight less than zero [ 301.590200][ T8572] hsr_slave_0: entered promiscuous mode [ 301.602346][ T8572] hsr_slave_1: entered promiscuous mode [ 301.616819][ T8706] IPVS: using max 24 ests per chain, 57600 per kthread [ 301.629142][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.677005][ T8572] Cannot create hsr debugfs directory [ 301.705936][ T12] hsr_slave_0: left promiscuous mode [ 301.712225][ T12] hsr_slave_1: left promiscuous mode [ 301.741473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.787420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.814705][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.838672][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.856576][ T8716] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 301.865549][ T5841] Bluetooth: hci4: command tx timeout [ 301.883312][ T12] veth1_macvtap: left promiscuous mode [ 301.925500][ T12] veth0_macvtap: left promiscuous mode [ 301.941535][ T12] veth1_vlan: left promiscuous mode [ 301.955010][ T12] veth0_vlan: left promiscuous mode [ 302.425222][ T8722] ip6t_REJECT: ECHOREPLY is not supported [ 303.014443][ T12] team0 (unregistering): Port device team_slave_1 removed [ 303.103856][ T12] team0 (unregistering): Port device team_slave_0 removed [ 303.475599][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 303.646988][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 303.653949][ T46] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 303.670017][ T46] usb 2-1: config 0 has no interface number 0 [ 303.709341][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 303.745395][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.767175][ T46] usb 2-1: Product: syz [ 303.772079][ T46] usb 2-1: Manufacturer: syz [ 303.778142][ T46] usb 2-1: SerialNumber: syz [ 303.790845][ T46] usb 2-1: config 0 descriptor?? [ 303.808026][ T46] hub 2-1:0.132: bad descriptor, ignoring hub [ 303.826459][ T46] hub 2-1:0.132: probe with driver hub failed with error -5 [ 303.890030][ T46] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input12 [ 304.455500][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.521265][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.587487][ T46] usb 2-1: USB disconnect, device number 23 [ 304.665014][ T8736] vxcan1: tx address claim with different name [ 304.802702][ T8532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.818138][ T8532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.841283][ T8532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.964844][ T8532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.199118][ T8760] ceph: No mds server is up or the cluster is laggy [ 306.206060][ T25] libceph: connect (1)[c::]:6789 error -101 [ 306.230506][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 306.261054][ T8770] FAULT_INJECTION: forcing a failure. [ 306.261054][ T8770] name failslab, interval 1, probability 0, space 0, times 0 [ 306.273554][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.285604][ T8770] CPU: 1 UID: 0 PID: 8770 Comm: syz.5.527 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 306.285633][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 306.285659][ T8770] Call Trace: [ 306.285666][ T8770] [ 306.285675][ T8770] dump_stack_lvl+0x241/0x360 [ 306.285719][ T8770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.285753][ T8770] ? __pfx__printk+0x10/0x10 [ 306.285787][ T8770] ? __kmalloc_cache_noprof+0x48/0x390 [ 306.285816][ T8770] ? __pfx___might_resched+0x10/0x10 [ 306.285852][ T8770] should_fail_ex+0x40a/0x550 [ 306.285883][ T8770] should_failslab+0xac/0x100 [ 306.285911][ T8770] __kmalloc_cache_noprof+0x70/0x390 [ 306.285937][ T8770] ? genl_start+0x1cb/0x6d0 [ 306.285968][ T8770] genl_start+0x1cb/0x6d0 [ 306.286003][ T8770] __netlink_dump_start+0x45c/0x790 [ 306.286046][ T8770] genl_rcv_msg+0x88c/0xec0 [ 306.286080][ T8770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.286114][ T8770] ? __pfx_genl_start+0x10/0x10 [ 306.286138][ T8770] ? __pfx_genl_dumpit+0x10/0x10 [ 306.286162][ T8770] ? __pfx_genl_done+0x10/0x10 [ 306.286207][ T8770] ? __pfx_lock_acquire+0x10/0x10 [ 306.286232][ T8770] ? __pfx_ethnl_default_start+0x10/0x10 [ 306.286264][ T8770] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 306.286283][ T8770] ? __pfx_ethnl_default_done+0x10/0x10 [ 306.286305][ T8770] ? __pfx___might_resched+0x10/0x10 [ 306.286350][ T8770] netlink_rcv_skb+0x1e3/0x430 [ 306.286380][ T8770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.286406][ T8770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.286448][ T8770] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 306.286482][ T8770] genl_rcv+0x28/0x40 [ 306.286503][ T8770] netlink_unicast+0x7f6/0x990 [ 306.286539][ T8770] ? __pfx_netlink_unicast+0x10/0x10 [ 306.286564][ T8770] ? __virt_addr_valid+0x45f/0x530 [ 306.286591][ T8770] ? __phys_addr_symbol+0x2f/0x70 [ 306.286617][ T8770] ? __check_object_size+0x47a/0x730 [ 306.286650][ T8770] netlink_sendmsg+0x8e4/0xcb0 [ 306.286678][ T8770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.286708][ T8770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.286724][ T8770] __sock_sendmsg+0x221/0x270 [ 306.286751][ T8770] ____sys_sendmsg+0x52a/0x7e0 [ 306.286779][ T8770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.286796][ T8770] ? __fget_files+0x2a/0x410 [ 306.286830][ T8770] ? __fget_files+0x2a/0x410 [ 306.286864][ T8770] __sys_sendmsg+0x269/0x350 [ 306.286888][ T8770] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.286921][ T8770] ? do_sys_openat2+0x17a/0x1d0 [ 306.286973][ T8770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.286999][ T8770] ? do_syscall_64+0x100/0x230 [ 306.287028][ T8770] ? do_syscall_64+0xb6/0x230 [ 306.287056][ T8770] do_syscall_64+0xf3/0x230 [ 306.287080][ T8770] ? clear_bhb_loop+0x35/0x90 [ 306.287111][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.287136][ T8770] RIP: 0033:0x7fb41218cde9 [ 306.287153][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.287169][ T8770] RSP: 002b:00007fb412f45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.287189][ T8770] RAX: ffffffffffffffda RBX: 00007fb4123a5fa0 RCX: 00007fb41218cde9 [ 306.287202][ T8770] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 306.287213][ T8770] RBP: 00007fb412f45090 R08: 0000000000000000 R09: 0000000000000000 [ 306.287224][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.287235][ T8770] R13: 0000000000000000 R14: 00007fb4123a5fa0 R15: 00007ffc0b6b32b8 [ 306.287263][ T8770] [ 306.638705][ T25] libceph: connect (1)[c::]:6789 error -101 [ 306.644786][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 306.851420][ T8572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.346568][ T8572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.374052][ T8532] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.397869][ T8572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.442210][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.449361][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.504130][ T8572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.538127][ T8784] loop9: detected capacity change from 0 to 7 [ 307.553419][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.560585][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.589515][ T8784] Dev loop9: unable to read RDB block 7 [ 307.595162][ T8784] loop9: unable to read partition table [ 307.624417][ T8784] loop9: partition table beyond EOD, truncated [ 307.642675][ T8784] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.813139][ T8791] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 308.161301][ T8784] geneve2: entered promiscuous mode [ 308.191931][ T8784] geneve2: entered allmulticast mode [ 308.426839][ T8803] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 308.578050][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.648671][ T8572] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.760940][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.768170][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.771837][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.779020][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.005484][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 310.077642][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.539'. [ 310.165674][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 310.171119][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.195382][ T9] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 310.215917][ T9] usb 6-1: config 0 has no interface number 0 [ 310.244734][ T9] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 310.273527][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.296189][ T8532] veth0_vlan: entered promiscuous mode [ 310.305839][ T9] usb 6-1: Product: syz [ 310.310122][ T9] usb 6-1: Manufacturer: syz [ 310.325295][ T9] usb 6-1: SerialNumber: syz [ 310.342879][ T9] usb 6-1: config 0 descriptor?? [ 310.362039][ T8532] veth1_vlan: entered promiscuous mode [ 310.376434][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 310.432118][ T8532] veth0_macvtap: entered promiscuous mode [ 310.503331][ T8532] veth1_macvtap: entered promiscuous mode [ 310.527964][ T8572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.594134][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.635188][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.666573][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.697428][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.727919][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.748915][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.761719][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.775589][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.797292][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.837271][ T8839] vlan2: entered allmulticast mode [ 310.842454][ T8839] dummy0: entered allmulticast mode [ 310.865537][ T8839] dummy0: left allmulticast mode [ 310.963363][ T8843] sp0: Synchronizing with TNC [ 310.991843][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.018363][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.038910][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.064094][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.081099][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.104324][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.125670][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.146044][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.156224][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.166983][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.179180][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.188886][ T8838] [U] è [ 311.247999][ T8532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.258161][ T8532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.267274][ T8532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.276538][ T8532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.358920][ T8572] veth0_vlan: entered promiscuous mode [ 311.426925][ T8572] veth1_vlan: entered promiscuous mode [ 311.516604][ T8572] veth0_macvtap: entered promiscuous mode [ 311.529754][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.552601][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.576403][ T8572] veth1_macvtap: entered promiscuous mode [ 311.670049][ T5825] usb 6-1: USB disconnect, device number 6 [ 312.234594][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.307608][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.387858][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 312.389162][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.395817][ T8863] ceph: No mds server is up or the cluster is laggy [ 312.439780][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.445634][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 312.451552][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.470180][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.480460][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.491222][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.501984][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.523232][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.681153][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.898010][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.919807][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.949953][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.985675][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.035092][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.050848][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.202191][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.229398][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.245472][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.277580][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.316589][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.348793][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.368152][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.387119][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.436561][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.536742][ T8572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.552006][ T8572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.575657][ T8572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.584608][ T8572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.671862][ T8872] syzkaller1: entered promiscuous mode [ 313.734708][ T8872] syzkaller1: entered allmulticast mode [ 313.935720][ T974] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 314.296528][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 314.396120][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.558032][ T974] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 314.582976][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 314.613805][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 314.627513][ T8886] fuse: Unknown parameter '000000000000000000060x0000000000000007' [ 314.680418][ T974] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 314.692457][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.727660][ T974] usb 6-1: Product: syz [ 314.732047][ T974] usb 6-1: Manufacturer: syz [ 314.742879][ T974] usb 6-1: SerialNumber: syz [ 314.760271][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.778548][ T974] usb 6-1: config 0 descriptor?? [ 314.791065][ T8882] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 314.803196][ T974] smsusb:smsusb_probe: board id=2, interface number 0 [ 314.815006][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.831448][ T974] smsusb:siano_media_device_register: media controller created [ 314.859722][ T5939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.907635][ T974] ------------[ cut here ]------------ [ 314.913169][ T974] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 315.001191][ T974] WARNING: CPU: 0 PID: 974 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 [ 315.010872][ T974] Modules linked in: [ 315.014805][ T974] CPU: 0 UID: 0 PID: 974 Comm: kworker/0:2 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 315.025886][ T974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.036051][ T974] Workqueue: usb_hub_wq hub_event [ 315.041129][ T974] RIP: 0010:usb_submit_urb+0xc4e/0x18c0 [ 315.046763][ T974] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 b1 08 00 00 45 8b 07 48 c7 c7 a0 9a af 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 11 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 90 55 59 8f [ 315.066699][ T974] RSP: 0018:ffffc90003a46a48 EFLAGS: 00010246 [ 315.072815][ T974] RAX: 159f854adfab1d00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 315.080889][ T974] RDX: ffffc90018bbd000 RSI: 00000000000314f9 RDI: 00000000000314fa [ 315.089001][ T974] RBP: 0000000000000003 R08: ffffffff81800b32 R09: fffffbfff1cfa588 [ 315.098379][ T974] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff88802504aa80 [ 315.107361][ T974] R13: ffff88803533e600 R14: 0000000000000001 R15: ffffffff8caf988c [ 315.115630][ T974] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 315.124590][ T974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.131321][ T974] CR2: 00007f69dd979178 CR3: 000000005ea8c000 CR4: 00000000003526f0 [ 315.139395][ T974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.152713][ T974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.160798][ T974] Call Trace: [ 315.164094][ T974] [ 315.167081][ T974] ? __warn+0x165/0x4d0 [ 315.171284][ T974] ? usb_submit_urb+0xc4e/0x18c0 [ 315.176331][ T974] ? report_bug+0x2b3/0x500 [ 315.180883][ T974] ? usb_submit_urb+0xc4e/0x18c0 [ 315.185950][ T974] ? handle_bug+0x60/0x90 [ 315.190315][ T974] ? exc_invalid_op+0x1a/0x50 [ 315.195042][ T974] ? asm_exc_invalid_op+0x1a/0x20 [ 315.201293][ T974] ? __warn_printk+0x292/0x360 [ 315.206916][ T974] ? usb_submit_urb+0xc4e/0x18c0 [ 315.211899][ T974] ? usb_submit_urb+0xc4d/0x18c0 [ 315.216982][ T974] smsusb_start_streaming+0x22/0x340 [ 315.222336][ T974] smsusb_probe+0x1c54/0x2410 [ 315.227353][ T974] ? __pfx_smsusb_probe+0x10/0x10 [ 315.232437][ T974] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 315.238100][ T974] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.244026][ T974] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.250486][ T974] ? __pm_runtime_set_status+0x6c1/0xa10 [ 315.256289][ T974] usb_probe_interface+0x641/0xbb0 [ 315.261462][ T974] ? __pfx_usb_probe_interface+0x10/0x10 [ 315.267191][ T974] really_probe+0x2b9/0xad0 [ 315.271747][ T974] __driver_probe_device+0x1a2/0x390 [ 315.277418][ T974] driver_probe_device+0x50/0x430 [ 315.282488][ T974] __device_attach_driver+0x2d6/0x530 [ 315.287990][ T974] bus_for_each_drv+0x24e/0x2e0 [ 315.292883][ T974] ? __pfx___device_attach_driver+0x10/0x10 [ 315.299807][ T974] ? __pfx_bus_for_each_drv+0x10/0x10 [ 315.305231][ T974] __device_attach+0x333/0x520 [ 315.310877][ T974] ? __pfx_lock_release+0x10/0x10 [ 315.316027][ T974] ? __pfx___device_attach+0x10/0x10 [ 315.321353][ T974] ? do_raw_spin_unlock+0x13c/0x8b0 [ 315.326637][ T974] bus_probe_device+0x189/0x260 [ 315.331539][ T974] device_add+0x856/0xbf0 [ 315.335958][ T974] usb_set_configuration+0x1976/0x1fb0 [ 315.341480][ T974] usb_generic_driver_probe+0x88/0x140 [ 315.347019][ T974] usb_probe_device+0x1b8/0x380 [ 315.351927][ T974] ? __pfx_usb_probe_device+0x10/0x10 [ 315.357430][ T974] really_probe+0x2b9/0xad0 [ 315.361984][ T974] __driver_probe_device+0x1a2/0x390 [ 315.367440][ T974] driver_probe_device+0x50/0x430 [ 315.372545][ T974] __device_attach_driver+0x2d6/0x530 [ 315.378029][ T974] bus_for_each_drv+0x24e/0x2e0 [ 315.382924][ T974] ? __pfx___device_attach_driver+0x10/0x10 [ 315.389062][ T974] ? __pfx_bus_for_each_drv+0x10/0x10 [ 315.394505][ T974] __device_attach+0x333/0x520 [ 315.399393][ T974] ? __pfx___device_attach+0x10/0x10 [ 315.405765][ T974] bus_probe_device+0x189/0x260 [ 315.410686][ T974] device_add+0x856/0xbf0 [ 315.415056][ T974] usb_new_device+0x104a/0x19a0 [ 315.420958][ T974] ? __pfx_usb_new_device+0x10/0x10 [ 315.426279][ T974] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.431528][ T974] ? lockdep_hardirqs_on+0x99/0x150 [ 315.436838][ T974] hub_event+0x2d6d/0x5150 [ 315.441345][ T974] ? __pfx_hub_event+0x10/0x10 [ 315.446189][ T974] ? __pfx_lock_acquire+0x10/0x10 [ 315.451259][ T974] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.457512][ T974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.463901][ T974] ? process_scheduled_works+0x976/0x1840 [ 315.469754][ T974] process_scheduled_works+0xa66/0x1840 [ 315.475535][ T974] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.481566][ T974] ? assign_work+0x364/0x3d0 [ 315.486217][ T974] worker_thread+0x870/0xd30 [ 315.490848][ T974] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.496889][ T974] ? __kthread_parkme+0x169/0x1d0 [ 315.501942][ T974] ? __pfx_worker_thread+0x10/0x10 [ 315.507963][ T974] kthread+0x7a9/0x920 [ 315.512067][ T974] ? __pfx_kthread+0x10/0x10 [ 315.517601][ T974] ? __pfx_worker_thread+0x10/0x10 [ 315.522750][ T974] ? __pfx_kthread+0x10/0x10 [ 315.527460][ T974] ? __pfx_kthread+0x10/0x10 [ 315.532188][ T974] ? __pfx_kthread+0x10/0x10 [ 315.536906][ T974] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.542131][ T974] ? lockdep_hardirqs_on+0x99/0x150 [ 315.547659][ T974] ? __pfx_kthread+0x10/0x10 [ 315.552283][ T974] ret_from_fork+0x4b/0x80 [ 315.556894][ T974] ? __pfx_kthread+0x10/0x10 [ 315.561520][ T974] ret_from_fork_asm+0x1a/0x30 [ 315.566365][ T974] [ 315.569420][ T974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.576728][ T974] CPU: 0 UID: 0 PID: 974 Comm: kworker/0:2 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 315.587391][ T974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.597448][ T974] Workqueue: usb_hub_wq hub_event [ 315.602494][ T974] Call Trace: [ 315.605780][ T974] [ 315.608735][ T974] dump_stack_lvl+0x241/0x360 [ 315.613451][ T974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.618660][ T974] ? __pfx__printk+0x10/0x10 [ 315.623267][ T974] ? _printk+0xd5/0x120 [ 315.627452][ T974] ? __init_begin+0x41000/0x41000 [ 315.632498][ T974] ? vscnprintf+0x5d/0x90 [ 315.636840][ T974] panic+0x349/0x880 [ 315.640743][ T974] ? __warn+0x174/0x4d0 [ 315.644902][ T974] ? __pfx_panic+0x10/0x10 [ 315.649337][ T974] ? ret_from_fork_asm+0x1a/0x30 [ 315.654277][ T974] __warn+0x344/0x4d0 [ 315.658268][ T974] ? usb_submit_urb+0xc4e/0x18c0 [ 315.663240][ T974] report_bug+0x2b3/0x500 [ 315.667574][ T974] ? usb_submit_urb+0xc4e/0x18c0 [ 315.672523][ T974] handle_bug+0x60/0x90 [ 315.676693][ T974] exc_invalid_op+0x1a/0x50 [ 315.681204][ T974] asm_exc_invalid_op+0x1a/0x20 [ 315.686064][ T974] RIP: 0010:usb_submit_urb+0xc4e/0x18c0 [ 315.691616][ T974] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 b1 08 00 00 45 8b 07 48 c7 c7 a0 9a af 8c 48 8b 34 24 4c 89 e2 89 e9 e8 33 11 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 90 55 59 8f [ 315.711237][ T974] RSP: 0018:ffffc90003a46a48 EFLAGS: 00010246 [ 315.717351][ T974] RAX: 159f854adfab1d00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 315.725327][ T974] RDX: ffffc90018bbd000 RSI: 00000000000314f9 RDI: 00000000000314fa [ 315.733309][ T974] RBP: 0000000000000003 R08: ffffffff81800b32 R09: fffffbfff1cfa588 [ 315.741284][ T974] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff88802504aa80 [ 315.749254][ T974] R13: ffff88803533e600 R14: 0000000000000001 R15: ffffffff8caf988c [ 315.757233][ T974] ? __warn_printk+0x292/0x360 [ 315.762031][ T974] ? usb_submit_urb+0xc4d/0x18c0 [ 315.766982][ T974] smsusb_start_streaming+0x22/0x340 [ 315.772284][ T974] smsusb_probe+0x1c54/0x2410 [ 315.776987][ T974] ? __pfx_smsusb_probe+0x10/0x10 [ 315.782054][ T974] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 315.787634][ T974] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.793532][ T974] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.799866][ T974] ? __pm_runtime_set_status+0x6c1/0xa10 [ 315.805519][ T974] usb_probe_interface+0x641/0xbb0 [ 315.810663][ T974] ? __pfx_usb_probe_interface+0x10/0x10 [ 315.816311][ T974] really_probe+0x2b9/0xad0 [ 315.820837][ T974] __driver_probe_device+0x1a2/0x390 [ 315.826135][ T974] driver_probe_device+0x50/0x430 [ 315.831167][ T974] __device_attach_driver+0x2d6/0x530 [ 315.836566][ T974] bus_for_each_drv+0x24e/0x2e0 [ 315.841428][ T974] ? __pfx___device_attach_driver+0x10/0x10 [ 315.847340][ T974] ? __pfx_bus_for_each_drv+0x10/0x10 [ 315.852736][ T974] __device_attach+0x333/0x520 [ 315.857515][ T974] ? __pfx_lock_release+0x10/0x10 [ 315.862559][ T974] ? __pfx___device_attach+0x10/0x10 [ 315.867865][ T974] ? do_raw_spin_unlock+0x13c/0x8b0 [ 315.873079][ T974] bus_probe_device+0x189/0x260 [ 315.877963][ T974] device_add+0x856/0xbf0 [ 315.882300][ T974] usb_set_configuration+0x1976/0x1fb0 [ 315.887790][ T974] usb_generic_driver_probe+0x88/0x140 [ 315.893275][ T974] usb_probe_device+0x1b8/0x380 [ 315.898134][ T974] ? __pfx_usb_probe_device+0x10/0x10 [ 315.903682][ T974] really_probe+0x2b9/0xad0 [ 315.908194][ T974] __driver_probe_device+0x1a2/0x390 [ 315.913491][ T974] driver_probe_device+0x50/0x430 [ 315.918557][ T974] __device_attach_driver+0x2d6/0x530 [ 315.923935][ T974] bus_for_each_drv+0x24e/0x2e0 [ 315.928796][ T974] ? __pfx___device_attach_driver+0x10/0x10 [ 315.934697][ T974] ? __pfx_bus_for_each_drv+0x10/0x10 [ 315.940102][ T974] __device_attach+0x333/0x520 [ 315.944872][ T974] ? __pfx___device_attach+0x10/0x10 [ 315.950170][ T974] bus_probe_device+0x189/0x260 [ 315.955050][ T974] device_add+0x856/0xbf0 [ 315.959387][ T974] usb_new_device+0x104a/0x19a0 [ 315.964260][ T974] ? __pfx_usb_new_device+0x10/0x10 [ 315.969475][ T974] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.974678][ T974] ? lockdep_hardirqs_on+0x99/0x150 [ 315.979913][ T974] hub_event+0x2d6d/0x5150 [ 315.984384][ T974] ? __pfx_hub_event+0x10/0x10 [ 315.989173][ T974] ? __pfx_lock_acquire+0x10/0x10 [ 315.994204][ T974] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.000198][ T974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.006545][ T974] ? process_scheduled_works+0x976/0x1840 [ 316.012277][ T974] process_scheduled_works+0xa66/0x1840 [ 316.017858][ T974] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.023856][ T974] ? assign_work+0x364/0x3d0 [ 316.028464][ T974] worker_thread+0x870/0xd30 [ 316.033073][ T974] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.038978][ T974] ? __kthread_parkme+0x169/0x1d0 [ 316.044009][ T974] ? __pfx_worker_thread+0x10/0x10 [ 316.049128][ T974] kthread+0x7a9/0x920 [ 316.053210][ T974] ? __pfx_kthread+0x10/0x10 [ 316.057819][ T974] ? __pfx_worker_thread+0x10/0x10 [ 316.062945][ T974] ? __pfx_kthread+0x10/0x10 [ 316.067548][ T974] ? __pfx_kthread+0x10/0x10 [ 316.072155][ T974] ? __pfx_kthread+0x10/0x10 [ 316.076767][ T974] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.081978][ T974] ? lockdep_hardirqs_on+0x99/0x150 [ 316.087214][ T974] ? __pfx_kthread+0x10/0x10 [ 316.091820][ T974] ret_from_fork+0x4b/0x80 [ 316.096247][ T974] ? __pfx_kthread+0x10/0x10 [ 316.100849][ T974] ret_from_fork_asm+0x1a/0x30 [ 316.105634][ T974] [ 316.109014][ T974] Kernel Offset: disabled [ 316.113394][ T974] Rebooting in 86400 seconds..