last executing test programs: 14.7463506s ago: executing program 2 (id=101): r0 = io_uring_setup(0x3b4a, &(0x7f0000000ac0)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000800)="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", 0x2000, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.793673373s ago: executing program 2 (id=110): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.383870394s ago: executing program 2 (id=112): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 13.262689928s ago: executing program 2 (id=113): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000040)) fchdir(r1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000002c0)={r9, &(0x7f0000000200)=""/51}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff0000000036090800ff0f0000c39af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0x9, 0x7f, "ea147d", 0x2}]}}}, 0x12) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002c0001"], 0x14}}, 0x0) 13.013375802s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0xff}, 0xa}}}, 0x7) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000400)=0x1, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80840, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000500)={0xc9, 0x0, 0xc}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000005c0)={0x2, 0xb5, "1cfb54ff61a071abf7f65e864d57b383d56d14af91a492d42d54a27aacd8edc44b5554298eeab5a89843dd873e8c0c7702ad02814e728a8f4cfd42358ca24d7df5cf6034b63ea5c3a6cc5241ed0b626f16fe81d7f50b75a94e04e7f2bef6c881fd582abf6dff32f17ec22149b49d3d3f8107231983d5719fcd1e204b7149b488ee1aac2d6b9c0aab6ca029fc2651b0b7f9d4da8e7b0ce52e02fe0b9001906bf144d529c5d089c69a6bf3f20f74f2cdd8d2469e572b"}) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0x2, 0x22000) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f00000007c0)={0x9f1, &(0x7f00000006c0)="5b0380b50426d4056b651921b31e464e7a793926e61c9b2aa881e185f9284e7e7af738dc415100f6949dd66c645eda579a116941ce536af5b17d59667e7066f35cc679ea8d97920a440e53e926bb5318c07d3956471a849d46d793520ea69bbcc70bf1b506a6b94e2672ea751111b9b6317f2818620fc2cce0feb177365aea56c24f82d3f9dde516d8588d134f37b7f3c78d796db252bab75b15a46b7597a8df498681c7369e847fa5d39ee8ae8ee027756037219cb649afcd9b964b4ce3200571837ea4ae2286102657b1f8da7a1f644179c8e41d143b380ef1"}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000800)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000880)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) pselect6(0x40, &(0x7f00000008c0)={0x4, 0x4c49, 0x6, 0x9, 0x40000, 0x3, 0x0, 0x2}, &(0x7f0000000900)={0xffff, 0x831, 0x8001, 0x566, 0x3, 0x10, 0x10, 0x7}, &(0x7f0000000940)={0xe757, 0x9, 0x5, 0x9, 0x1, 0x7ff, 0x10001, 0x401}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x2]}, 0x8}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) 12.820792964s ago: executing program 2 (id=115): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x401) execveat$binfmt(r1, r0, &(0x7f00000002c0)={[&(0x7f00000000c0)='timers\x00', &(0x7f0000000180)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00', &(0x7f00000001c0)='timers\x00', &(0x7f0000000240)='timers\x00', &(0x7f0000000280)='timers\x00']}, &(0x7f0000000380)={[&(0x7f0000000300)='##%\x00', &(0x7f0000000340)='\xd7}+@\x00']}, 0x1000) (async) execveat$binfmt(r1, r0, &(0x7f00000002c0)={[&(0x7f00000000c0)='timers\x00', &(0x7f0000000180)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00', &(0x7f00000001c0)='timers\x00', &(0x7f0000000240)='timers\x00', &(0x7f0000000280)='timers\x00']}, &(0x7f0000000380)={[&(0x7f0000000300)='##%\x00', &(0x7f0000000340)='\xd7}+@\x00']}, 0x1000) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0xff, 0x7, 0x5, 0x8000, 0x4, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x34, 0x1011, 0xffffffffffffffff, @void, @value}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x34, 0x1011, 0xffffffffffffffff, @void, @value}, 0x20) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac01]}]]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac01]}]]}, 0x34}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'ip6erspan0\x00', &(0x7f0000000580)=@ethtool_dump={0x3f, 0x2, 0x7fffffff, 0x53, "462e15266efc72fecb73d1cd33239acfdd5610f0d14eced9b33c68f51d77ce4868db62267315088ea488cd4d60f0b33996b18ac3158a0e364d7d3c99b181593215244192b8f9aea0d2c5aa9f5aaee9257fe2fc"}}) kcmp(r5, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9}, 0x8) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000200)={[&(0x7f0000000100)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00\x00\x00', &(0x7f0000000140)='timers\x00', 0x0]}, 0x1000) pipe2(&(0x7f0000000000), 0x4000) 12.226344193s ago: executing program 32 (id=115): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x401) execveat$binfmt(r1, r0, &(0x7f00000002c0)={[&(0x7f00000000c0)='timers\x00', &(0x7f0000000180)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00', &(0x7f00000001c0)='timers\x00', &(0x7f0000000240)='timers\x00', &(0x7f0000000280)='timers\x00']}, &(0x7f0000000380)={[&(0x7f0000000300)='##%\x00', &(0x7f0000000340)='\xd7}+@\x00']}, 0x1000) (async) execveat$binfmt(r1, r0, &(0x7f00000002c0)={[&(0x7f00000000c0)='timers\x00', &(0x7f0000000180)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00', &(0x7f00000001c0)='timers\x00', &(0x7f0000000240)='timers\x00', &(0x7f0000000280)='timers\x00']}, &(0x7f0000000380)={[&(0x7f0000000300)='##%\x00', &(0x7f0000000340)='\xd7}+@\x00']}, 0x1000) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0xff, 0x7, 0x5, 0x8000, 0x4, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x34, 0x1011, 0xffffffffffffffff, @void, @value}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x34, 0x1011, 0xffffffffffffffff, @void, @value}, 0x20) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac01]}]]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac01]}]]}, 0x34}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'ip6erspan0\x00', &(0x7f0000000580)=@ethtool_dump={0x3f, 0x2, 0x7fffffff, 0x53, "462e15266efc72fecb73d1cd33239acfdd5610f0d14eced9b33c68f51d77ce4868db62267315088ea488cd4d60f0b33996b18ac3158a0e364d7d3c99b181593215244192b8f9aea0d2c5aa9f5aaee9257fe2fc"}}) kcmp(r5, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9}, 0x8) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000200)={[&(0x7f0000000100)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00\x00\x00', &(0x7f0000000140)='timers\x00', 0x0]}, 0x1000) pipe2(&(0x7f0000000000), 0x4000) 4.513798986s ago: executing program 1 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b64, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a601a00070282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) recvmsg$kcm(r1, 0x0, 0x42) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'netdevsim0\x00', 0x102e}) 4.1926424s ago: executing program 1 (id=151): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x181140) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xa42) 3.99029417s ago: executing program 4 (id=153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.885536761s ago: executing program 1 (id=154): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @link_local, @broadcast}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="42ef26bd7000ffdbdf25700000000a00060008021100000100000a400600ffffffffffff00000a000600ffffffffffff00005111f6ddd51392a22fe61b053cfaab666e4fb3bccadabf2fc0d46686d3f1ec59e982f69fc98cbef53045c6c067025686ccf7060bcb08e33606bce6b94dd22599192ef9bd75748987bb72a11c7a942b85e6ef78e19364c3eb2687983324e4be3f8c0d9feb26a678d6da63d28108e361a182e8c6a59396ac9af0214f59369d7cbe2d5fb7c66c6a2b633b2881765b4261ab8f29c5d7ca5146bc06be9e0b85af73af4c7a921cc123"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) mmap(&(0x7f0000000000/0xb36000)=nil, 0x200000, 0x0, 0x28011, r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x8122}, 0x45, 0x0) 3.661896629s ago: executing program 0 (id=156): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mlock(&(0x7f0000a1b000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.892486503s ago: executing program 1 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140013001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a09"], 0xb0}}, 0x0) 2.669585475s ago: executing program 0 (id=160): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x2, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = userfaultfd(0x80001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x450}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(r1, r1, 0x2) close(r3) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r6, 0x0, &(0x7f0000000180), 0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x0, 0x0, 0x0}) 2.611917545s ago: executing program 3 (id=161): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d8faebab25c9440f1e0b429560dea05fcfa134c5886328060189b9c9d245a4ec", "ddff6f80bb17115c263975c19a199a87b509ec91752b1f6b9fe52dd68897d0dd66c8047ecb3c1ccab1b385024cd3ef42", "7af3756a000040002683eb956c290000000000220000000400000008", {"e311f95152ce9fab74b351abd67a3e95", "f543716814ec69725136619246be0a0c"}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/119, 0x77}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.512764124s ago: executing program 1 (id=162): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=""/120, &(0x7f00000001c0)=""/43, 0x100000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x0, 0x8, 0x1, 0x0, 0x70bd28}, 0x10}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e000075000000000001000080c32cab5eafbfa6bfaa000900210073797a30000900000900"], 0x2c}, 0x1, 0x60000000}, 0x0) 2.147815519s ago: executing program 5 (id=116): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4c800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pipe(&(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r6], 0x0) 2.061992986s ago: executing program 1 (id=163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x1, @private1, 0x8}]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x3994, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/llc/socket\x00') ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x5, 0x7}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r7, 0x0, 0x20}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) getpid() r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, 0x0, 0x0) listen(r8, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 1.981613266s ago: executing program 3 (id=164): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000000004e"]) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r4 = accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req={0xfffffff7, 0x8000, 0xfffff89f, 0xf}, 0x10) ioctl$FS_IOC_SETVERSION(r2, 0x40305839, 0x0) 1.685603091s ago: executing program 4 (id=165): syz_emit_ethernet(0x11, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf4, '|'}}}}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x38011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) fadvise64(r0, 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d2940)={0x0, [], 0x0, "a86738f60fe38a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.533640906s ago: executing program 0 (id=166): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 1.485493269s ago: executing program 3 (id=167): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101e40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) userfaultfd(0x801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x54) syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r3], 0x20) 1.316778897s ago: executing program 0 (id=168): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000088df77fa9ad8b0af000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x800, 0x8001, 0x3, 0xd, 0x1, 0x2, 0x1, 0x8, 0x6, 0x40, 0x9, 0x9, 0xe, 0x5, 0xfff, 0x3, 0x101, 0x20, 0x1ff, 0x9, 0x1, 0x1, 0xffffffff, 0xc, 0x80000001, 0x4, 0x9, 0x1000, 0x7, 0x40, 0x100, 0x800]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 957.038747ms ago: executing program 3 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0xff}, 0xa}}}, 0x7) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000400)=0x1, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80840, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000500)={0xc9, 0x0, 0xc}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000005c0)={0x2, 0xb5, "1cfb54ff61a071abf7f65e864d57b383d56d14af91a492d42d54a27aacd8edc44b5554298eeab5a89843dd873e8c0c7702ad02814e728a8f4cfd42358ca24d7df5cf6034b63ea5c3a6cc5241ed0b626f16fe81d7f50b75a94e04e7f2bef6c881fd582abf6dff32f17ec22149b49d3d3f8107231983d5719fcd1e204b7149b488ee1aac2d6b9c0aab6ca029fc2651b0b7f9d4da8e7b0ce52e02fe0b9001906bf144d529c5d089c69a6bf3f20f74f2cdd8d2469e572b"}) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0x2, 0x22000) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f00000007c0)={0x9f1, &(0x7f00000006c0)="5b0380b50426d4056b651921b31e464e7a793926e61c9b2aa881e185f9284e7e7af738dc415100f6949dd66c645eda579a116941ce536af5b17d59667e7066f35cc679ea8d97920a440e53e926bb5318c07d3956471a849d46d793520ea69bbcc70bf1b506a6b94e2672ea751111b9b6317f2818620fc2cce0feb177365aea56c24f82d3f9dde516d8588d134f37b7f3c78d796db252bab75b15a46b7597a8df498681c7369e847fa5d39ee8ae8ee027756037219cb649afcd9b964b4ce3200571837ea4ae2286102657b1f8da7a1f644179c8e41d143b380ef1"}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000800)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000880)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 956.649026ms ago: executing program 0 (id=170): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ec0)=""/108, 0x6c}], 0x1}, 0xfffffff7}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xfffffff8, 0x4) r2 = socket$inet6(0xa, 0x80001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet(0x2, 0x3, 0x4) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 767.382656ms ago: executing program 3 (id=171): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @broadcast}], 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x212000, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000240)=0x8) mq_timedsend(r2, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 666.384739ms ago: executing program 4 (id=172): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x1, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) process_mrelease(0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x1, 0x400}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000001180)={"74db760724474a5eb7ba69a32991b0fb45d6868363282917cefff4533553", 0xc0, 0xff, 0x7fff, [0xfff, 0xb8357e, 0x9, 0x66338c08, 0x0, 0x0, 0x9, 0x1, 0x2, 0x6, 0xf272, 0x1, 0x29b, 0xfffffffd, 0xe, 0x5, 0x7e6, 0x6]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000001140)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000001380)={@host, 0xfb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) 572.652781ms ago: executing program 3 (id=173): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x5, 0x716, 0xffffffff, 0x0, 0xfffffffc, '&\x00', 0x0, 0xfe, 0xfc, 0x0, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0/file0', [], 0xa, "f527cb5acad3e495bc6fcbec7ba46b5aa77a4e0e08878758492a65dc812f25c30f6916ba424ccae9f10db48edd5cb4ded1851a7187214e01b1a4da5cc420ec3c779faf5903f05ebdb97712dfc986ffa7eaeef01f1fc42bc18c8ebd3007988a1467d72ff0bae4d4dde9cc77dad6ac6507a97b133466202a524a4878afe57fb2a6248c1fcd74de3e99cf26fb314ba258e433107db1151643741f6051456ae80e00ab853f97f358ccc73ed3eb6efd7e"}, 0xbf) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x7fffffffffffffff, 0x8000) epoll_create1(0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) write$cgroup_pressure(r2, &(0x7f00000000c0)={'full', 0x20, 0x5, 0x20, 0x4}, 0x2f) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) 570.024657ms ago: executing program 5 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mlock(&(0x7f00002d9000/0x1000)=nil, 0x1000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x6}, &(0x7f0000000040)=0xb3e6, &(0x7f0000000140)=0x8000000000000000, 0x1, 0x2, 0x3, 0xb, 0x21}}], 0x58, 0x8040}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fsname=rootmode,mask=MAY_EXEC,euid>', @ANYRESDEC=r3, @ANYBLOB="2c736d61636b66736465663d85402d2dd52d25242c402d5c5c232c6673757569643d30656630386461622d316235372d313738002d383438342d65613035656534622c736d61636b66736465663d2f6465762f66757365002c00"]) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="40102e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x698c}, 0x90) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 413.537069ms ago: executing program 4 (id=175): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20140) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x80000f, 0xffffffff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 311.850958ms ago: executing program 4 (id=176): open(&(0x7f0000000040)='./file0\x00', 0x268c5, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000004e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x7bda, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f0000000280)='dirsync\x00', 0x0, 0x4) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}]}]}, 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$alg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="980000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000006800128009000100766c616e000000005800028006000100000000000400f674040004801c0004800c00012081000000070000000c000100ff0f0000100000001c0003800c00010004000000020000000c001f0002000000010000800c0002001817", @ANYRES32], 0x98}}, 0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0xfdef}]) 69.883082ms ago: executing program 4 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8, 0x878}}, './file1\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x0, 0x0, 0x210, 0x2a8, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @inet=@DSCP={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 0s ago: executing program 0 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x800) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c8f000/0x4000)=nil, &(0x7f0000de2000/0x6000)=nil, 0x4000, 0x3}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20060881}, 0x40010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 70.154335][ T5835] cgroup: Unknown subsys name 'net' [ 70.272115][ T5835] cgroup: Unknown subsys name 'cpuset' [ 70.280840][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.691757][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.698421][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.905505][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.674236][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.702585][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.719186][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.727629][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.749624][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.760714][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.769430][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.769489][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.784976][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.784976][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.785910][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.797167][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.800370][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.807748][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.814819][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.836243][ T5860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.837368][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.844888][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.851456][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.858194][ T5860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.867015][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.871964][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.883551][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.886063][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.893000][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.900261][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.907871][ T5862] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.928621][ T5857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.944609][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.952053][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.440383][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 76.478161][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 76.514735][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 76.575535][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 76.618646][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 76.735712][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.744642][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.752442][ T5869] bridge_slave_0: entered allmulticast mode [ 76.759847][ T5869] bridge_slave_0: entered promiscuous mode [ 76.806542][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.813926][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.821788][ T5869] bridge_slave_1: entered allmulticast mode [ 76.828982][ T5869] bridge_slave_1: entered promiscuous mode [ 76.836052][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.843369][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.850747][ T5865] bridge_slave_0: entered allmulticast mode [ 76.857498][ T5865] bridge_slave_0: entered promiscuous mode [ 76.886155][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.893434][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.900990][ T5868] bridge_slave_0: entered allmulticast mode [ 76.907728][ T5868] bridge_slave_0: entered promiscuous mode [ 76.923684][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.931471][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.939025][ T5865] bridge_slave_1: entered allmulticast mode [ 76.945851][ T5865] bridge_slave_1: entered promiscuous mode [ 76.975658][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.983009][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.991122][ T5864] bridge_slave_0: entered allmulticast mode [ 76.997967][ T5864] bridge_slave_0: entered promiscuous mode [ 77.005456][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.012923][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.020450][ T5868] bridge_slave_1: entered allmulticast mode [ 77.027330][ T5868] bridge_slave_1: entered promiscuous mode [ 77.055141][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.068105][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.075542][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.083203][ T5864] bridge_slave_1: entered allmulticast mode [ 77.090458][ T5864] bridge_slave_1: entered promiscuous mode [ 77.109497][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.121570][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.132818][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.202353][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.214998][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.226399][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.255237][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.262606][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.270137][ T5867] bridge_slave_0: entered allmulticast mode [ 77.277196][ T5867] bridge_slave_0: entered promiscuous mode [ 77.295335][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.307927][ T5869] team0: Port device team_slave_0 added [ 77.316754][ T5869] team0: Port device team_slave_1 added [ 77.325096][ T5865] team0: Port device team_slave_0 added [ 77.331531][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.338976][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.346184][ T5867] bridge_slave_1: entered allmulticast mode [ 77.353216][ T5867] bridge_slave_1: entered promiscuous mode [ 77.388047][ T5865] team0: Port device team_slave_1 added [ 77.427994][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.440739][ T5864] team0: Port device team_slave_0 added [ 77.456824][ T5868] team0: Port device team_slave_0 added [ 77.476724][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.484166][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.510948][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.524865][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.544755][ T5864] team0: Port device team_slave_1 added [ 77.569187][ T5868] team0: Port device team_slave_1 added [ 77.575557][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.582899][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.615151][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.650416][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.657437][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.684182][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.716118][ T5867] team0: Port device team_slave_0 added [ 77.724948][ T5867] team0: Port device team_slave_1 added [ 77.732169][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.739220][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.765285][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.779036][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.786042][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.812201][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.836926][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.844203][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.870366][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.891522][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.898812][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.925204][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.933052][ T5857] Bluetooth: hci1: command tx timeout [ 77.962469][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.969636][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.995956][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.008464][ T5857] Bluetooth: hci4: command tx timeout [ 78.008646][ T5846] Bluetooth: hci2: command tx timeout [ 78.014215][ T5857] Bluetooth: hci3: command tx timeout [ 78.019885][ T5862] Bluetooth: hci0: command tx timeout [ 78.062886][ T5869] hsr_slave_0: entered promiscuous mode [ 78.070070][ T5869] hsr_slave_1: entered promiscuous mode [ 78.089690][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.096685][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.123149][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.146938][ T5864] hsr_slave_0: entered promiscuous mode [ 78.153282][ T5864] hsr_slave_1: entered promiscuous mode [ 78.160236][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.168071][ T5864] Cannot create hsr debugfs directory [ 78.177048][ T5865] hsr_slave_0: entered promiscuous mode [ 78.183953][ T5865] hsr_slave_1: entered promiscuous mode [ 78.190433][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.198129][ T5865] Cannot create hsr debugfs directory [ 78.225805][ T5868] hsr_slave_0: entered promiscuous mode [ 78.232894][ T5868] hsr_slave_1: entered promiscuous mode [ 78.239705][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.247357][ T5868] Cannot create hsr debugfs directory [ 78.254081][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.261385][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.287989][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.436348][ T5867] hsr_slave_0: entered promiscuous mode [ 78.442934][ T5867] hsr_slave_1: entered promiscuous mode [ 78.449749][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.457330][ T5867] Cannot create hsr debugfs directory [ 78.749599][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.764854][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.786198][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.804741][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.842884][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.852335][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.869728][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.880151][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.945382][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.963795][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.990697][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.000882][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.074870][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.091578][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.127117][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.139044][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.224453][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.235060][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.254003][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.266685][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.300328][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.336784][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.377804][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.396822][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.404389][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.433771][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.440973][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.477921][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.504042][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.557534][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.564758][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.586858][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.596659][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.603934][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.622231][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.656103][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.663288][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.686791][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.694003][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.733073][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.762028][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.769241][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.786385][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.793570][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.821954][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.869359][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.884023][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.931308][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.938518][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.971485][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.978708][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.009191][ T5862] Bluetooth: hci1: command tx timeout [ 80.048083][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.082336][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.089187][ T5862] Bluetooth: hci0: command tx timeout [ 80.094711][ T5862] Bluetooth: hci2: command tx timeout [ 80.100872][ T5846] Bluetooth: hci3: command tx timeout [ 80.106437][ T5846] Bluetooth: hci4: command tx timeout [ 80.142243][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.164522][ T5869] veth0_vlan: entered promiscuous mode [ 80.196890][ T5869] veth1_vlan: entered promiscuous mode [ 80.237855][ T5864] veth0_vlan: entered promiscuous mode [ 80.255395][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.325414][ T5869] veth0_macvtap: entered promiscuous mode [ 80.343030][ T5864] veth1_vlan: entered promiscuous mode [ 80.351566][ T5865] veth0_vlan: entered promiscuous mode [ 80.389548][ T5867] veth0_vlan: entered promiscuous mode [ 80.396476][ T5869] veth1_macvtap: entered promiscuous mode [ 80.410046][ T5868] veth0_vlan: entered promiscuous mode [ 80.419358][ T5865] veth1_vlan: entered promiscuous mode [ 80.453151][ T5864] veth0_macvtap: entered promiscuous mode [ 80.477922][ T5864] veth1_macvtap: entered promiscuous mode [ 80.486179][ T5868] veth1_vlan: entered promiscuous mode [ 80.497563][ T5867] veth1_vlan: entered promiscuous mode [ 80.510265][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.544923][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.565731][ T5869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.576759][ T5869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.585921][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595880][ T5869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.619388][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.630795][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.643709][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.657194][ T5865] veth0_macvtap: entered promiscuous mode [ 80.677154][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.687808][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.701139][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.726001][ T5868] veth0_macvtap: entered promiscuous mode [ 80.746957][ T5865] veth1_macvtap: entered promiscuous mode [ 80.757761][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767714][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.777057][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786670][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.801959][ T5867] veth0_macvtap: entered promiscuous mode [ 80.812526][ T5868] veth1_macvtap: entered promiscuous mode [ 80.861466][ T5867] veth1_macvtap: entered promiscuous mode [ 80.906982][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.917664][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.928087][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.939229][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951034][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.974064][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.991998][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.002433][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.015150][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.025448][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.036377][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.047847][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.060233][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.071134][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.082391][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.093491][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.104989][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.136291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.144954][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.163477][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.174298][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.185255][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.196105][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.206312][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.217880][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.230532][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.258131][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.267906][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276935][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.285850][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306735][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.307264][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.317208][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.327913][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.343833][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.356139][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.366362][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.377678][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.387715][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.398400][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.409863][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.419261][ T5868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.428010][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.436966][ T5868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445777][ T5868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.486884][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.497840][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.509445][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.520077][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.530144][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.541023][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.550939][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.561750][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.573137][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.611624][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620926][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631569][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641330][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.671389][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.682536][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.699094][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.707075][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.813330][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.840558][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.850488][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.946377][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.984650][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.007591][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.031969][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.092586][ T5846] Bluetooth: hci1: command tx timeout [ 82.095831][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.113511][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.169669][ T5846] Bluetooth: hci4: command tx timeout [ 82.178995][ T5846] Bluetooth: hci2: command tx timeout [ 82.184454][ T5846] Bluetooth: hci3: command tx timeout [ 82.190203][ T5846] Bluetooth: hci0: command tx timeout [ 82.219898][ T29] audit: type=1326 audit(1730140925.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd831b7e719 code=0x0 [ 82.237996][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.249538][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.256939][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.270231][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.303455][ T5911] netdevsim netdevsim1 .`: renamed from netdevsim0 (while UP) [ 82.330855][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.438531][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 82.471606][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.492117][ T8] usb 3-1: config 179 has no interface number 0 [ 82.518794][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 82.548352][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.566456][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.578590][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 82.590897][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.605067][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.614567][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.644814][ T5907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.676931][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.080425][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 83.418534][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.585698][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.585721][ T5905] usb 3-1: USB disconnect, device number 2 [ 83.600630][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.616444][ T5905] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 83.617103][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 83.658104][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.678068][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 83.696886][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 83.708897][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.725657][ T8] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 83.735297][ T8] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 83.743641][ T8] usb 1-1: Product: syz [ 83.748020][ T8] usb 1-1: Manufacturer: syz [ 83.753916][ T8] usb 1-1: SerialNumber: syz [ 83.776999][ T8] usb 1-1: config 0 descriptor?? [ 83.788841][ T8] usb 1-1: NFC: intf ffff888030060000 id ffffffff8f31b3a0 [ 83.818523][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.968730][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 83.980369][ T5927] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.994215][ T5927] usb 4-1: config 179 has no interface number 0 [ 84.003155][ T5927] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.035843][ T5927] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.047900][ T5927] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.065140][ T5927] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.077511][ T5927] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.080347][ T8] usb 1-1: USB disconnect, device number 2 [ 84.110866][ T5927] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.126043][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.145512][ T5934] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 84.169027][ T5862] Bluetooth: hci1: command tx timeout [ 84.253553][ T5862] Bluetooth: hci0: command tx timeout [ 84.259582][ T5846] Bluetooth: hci3: command tx timeout [ 84.259620][ T5855] Bluetooth: hci4: command tx timeout [ 84.271130][ T5857] Bluetooth: hci2: command tx timeout [ 84.350286][ T5947] FAULT_INJECTION: forcing a failure. [ 84.350286][ T5947] name failslab, interval 1, probability 0, space 0, times 1 [ 84.376257][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.2.15 Not tainted 6.12.0-rc5-syzkaller #0 [ 84.385461][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.395579][ T5947] Call Trace: [ 84.398913][ T5947] [ 84.401902][ T5947] dump_stack_lvl+0x241/0x360 [ 84.406654][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.411925][ T5947] ? __pfx__printk+0x10/0x10 [ 84.416579][ T5947] ? __kmalloc_noprof+0xb0/0x400 [ 84.421579][ T5947] ? __pfx___might_resched+0x10/0x10 [ 84.426964][ T5947] should_fail_ex+0x3b0/0x4e0 [ 84.431699][ T5947] ? kernfs_fop_write_iter+0x15a/0x500 [ 84.437221][ T5947] should_failslab+0xac/0x100 [ 84.442059][ T5947] ? kernfs_fop_write_iter+0x15a/0x500 [ 84.447666][ T5947] __kmalloc_noprof+0xd8/0x400 [ 84.452489][ T5947] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 84.458460][ T5947] kernfs_fop_write_iter+0x15a/0x500 [ 84.463820][ T5947] vfs_write+0xaeb/0xd30 [ 84.468155][ T5947] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 84.474057][ T5947] ? __pfx_vfs_write+0x10/0x10 [ 84.478912][ T5947] ? fdget_pos+0x24e/0x320 [ 84.483387][ T5947] ksys_write+0x183/0x2b0 [ 84.487843][ T5947] ? __pfx_ksys_write+0x10/0x10 [ 84.492809][ T5947] ? do_syscall_64+0x100/0x230 [ 84.497616][ T5947] ? do_syscall_64+0xb6/0x230 [ 84.502321][ T5947] do_syscall_64+0xf3/0x230 [ 84.506863][ T5947] ? clear_bhb_loop+0x35/0x90 [ 84.511587][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.517527][ T5947] RIP: 0033:0x7f254217e719 [ 84.521975][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.541610][ T5947] RSP: 002b:00007f2542fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.550062][ T5947] RAX: ffffffffffffffda RBX: 00007f2542335f80 RCX: 00007f254217e719 [ 84.558147][ T5947] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000004 [ 84.566175][ T5947] RBP: 00007f2542fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 84.574179][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.582177][ T5947] R13: 0000000000000000 R14: 00007f2542335f80 R15: 00007f254245fa28 [ 84.590186][ T5947] [ 84.599006][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.640614][ T8] usb 4-1: USB disconnect, device number 2 [ 84.640620][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.640760][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 84.781289][ T5900] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 84.796202][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.836725][ T5900] usb 5-1: config 0 descriptor?? [ 84.846167][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.047690][ T5956] xt_connbytes: Forcing CT accounting to be enabled [ 85.087333][ T5956] Cannot find add_set index 0 as target [ 85.101415][ T5956] process 'syz.1.19' launched '/dev/fd/9' with NULL argv: empty string added [ 85.164140][ T5960] netlink: 'syz.1.19': attribute type 11 has an invalid length. [ 85.177344][ T5960] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.19'. [ 85.259097][ T5927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.290732][ T5945] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 85.297430][ T5945] PKCS7: Only support pkcs7_signedData type [ 85.349974][ T5900] hackrf 5-1:0.0: Board ID: 00 [ 85.355038][ T5900] hackrf 5-1:0.0: Firmware version: [ 85.388727][ T5900] hackrf 5-1:0.0: Registered as swradio24 [ 85.408463][ T5927] usb 1-1: device descriptor read/64, error -71 [ 85.425325][ T5900] videodev: could not get a free minor [ 85.441455][ T5900] hackrf 5-1:0.0: Failed to register as video device (-23) [ 85.473480][ T5900] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 85.573098][ T5968] netdevsim netdevsim3 .`: renamed from netdevsim0 (while UP) [ 85.648486][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.682501][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 85.718712][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 85.748935][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.806229][ T5927] usb 1-1: device descriptor read/64, error -71 [ 85.897263][ T5976] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.907823][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 85.910851][ T5927] usb usb1-port1: attempt power cycle [ 85.924414][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.941289][ T5905] usb 5-1: USB disconnect, device number 2 [ 85.950842][ T5851] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 85.963196][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.979390][ T5851] usb 2-1: Product: syz [ 85.989170][ T5851] usb 2-1: Manufacturer: syz [ 85.993857][ T5851] usb 2-1: SerialNumber: syz [ 86.031830][ T5851] usb 2-1: config 0 descriptor?? [ 86.129964][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.309701][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.369504][ T5927] usb 1-1: device descriptor read/8, error -71 [ 86.450172][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 86.457810][ T5851] usb 2-1: Firmware version (0.0) predates our first public release. [ 86.467607][ T5851] usb 2-1: Please update to version 0.2 or newer [ 86.484567][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 86.557722][ T5851] usb 2-1: USB disconnect, device number 2 [ 86.618637][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.638885][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.669176][ T5927] usb 1-1: device descriptor read/8, error -71 [ 86.785551][ T5941] usb 3-1: device descriptor read/64, error -71 [ 86.798970][ T5927] usb usb1-port1: unable to enumerate USB device [ 87.028413][ T5941] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.078474][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.079624][ T25] cfg80211: failed to load regulatory.db [ 87.154486][ T6009] netlink: 'syz.1.38': attribute type 11 has an invalid length. [ 87.187323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.209835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.222134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.258373][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 87.416287][ T6009] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.38'. [ 87.498792][ T8] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 87.519204][ T8] usb 4-1: config 8 has no interface number 0 [ 87.525423][ T8] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 87.539013][ T8] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.554151][ T8] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 87.558512][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.563566][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.570967][ T5941] usb 3-1: device descriptor read/64, error -71 [ 87.579164][ T8] usb 4-1: Product: syz [ 87.620380][ T8] usb 4-1: Manufacturer: syz [ 87.648287][ T8] usb 4-1: SerialNumber: syz [ 87.711813][ T5941] usb usb3-port1: attempt power cycle [ 87.759159][ T5905] usb 5-1: config 0 has no interfaces? [ 87.807064][ T5905] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 87.825343][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.833791][ T5905] usb 5-1: Product: syz [ 87.838048][ T5905] usb 5-1: Manufacturer: syz [ 87.849986][ T5905] usb 5-1: SerialNumber: syz [ 87.859680][ T5905] usb 5-1: config 0 descriptor?? [ 87.957500][ T8] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 87.973249][ T8] usb 4-1: USB disconnect, device number 3 [ 88.088762][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.140936][ T5941] usb 3-1: device descriptor read/8, error -71 [ 88.144766][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.172090][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.219306][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.279680][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.309388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.311897][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.376466][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.388657][ T5941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.431954][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.465654][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.482361][ T5941] usb 3-1: device descriptor read/8, error -71 [ 88.551173][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.567343][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.591766][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.598848][ T5941] usb usb3-port1: unable to enumerate USB device [ 88.631236][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.684330][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.738622][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.785209][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.832088][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.860427][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.913986][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.940061][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.008681][ T5941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.152235][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.207937][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 89.268500][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 89.299971][ T5941] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.314824][ T5941] usb 4-1: config 0 has no interface number 0 [ 89.385119][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 89.385251][ T5941] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.401325][ T5900] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 89.411018][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.419273][ T5941] usb 4-1: Product: syz [ 89.423500][ T5941] usb 4-1: Manufacturer: syz [ 89.425319][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.428189][ T5941] usb 4-1: SerialNumber: syz [ 89.438439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.450339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 89.481790][ T5900] usb 2-1: Product: syz [ 89.486411][ T5900] usb 2-1: Manufacturer: syz [ 89.500369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.502181][ T5900] usb 2-1: SerialNumber: syz [ 89.528709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.546795][ T5900] usb 2-1: config 0 descriptor?? [ 89.570400][ T5941] usb 4-1: config 0 descriptor?? [ 89.597899][ T5900] xr_serial 2-1:0.0: skipping garbage [ 89.645034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.654372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.697908][ T5941] smsc95xx v2.0.0 [ 89.798513][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 89.818278][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.827565][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.891899][ T6025] bridge0: entered promiscuous mode [ 89.974304][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 89.974985][ T6025] input: syz1 as /devices/virtual/input/input7 [ 90.027075][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.061664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.132466][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 90.163845][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.198838][ T9] usb 1-1: config 0 descriptor?? [ 90.307485][ T8] usb 5-1: USB disconnect, device number 3 [ 90.562703][ T5941] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 90.574621][ T5941] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.595191][ T5941] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 90.606642][ T5941] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 90.654099][ T9] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 90.701482][ T6037] fuse: Bad value for 'rootmode' [ 90.855392][ T9] ft260 0003:0403:6030.0001: chip code: 5e81 abf2 [ 91.064429][ T9] ft260 0003:0403:6030.0001: uart interface is not supported [ 91.203813][ T5941] usb 4-1: USB disconnect, device number 4 [ 91.208536][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.213823][ T5927] usb 2-1: USB disconnect, device number 3 [ 91.278617][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 91.318505][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.356791][ T8] usb 5-1: device descriptor read/64, error -71 [ 91.409308][ T9] usb 1-1: USB disconnect, device number 7 [ 91.476505][ T6048] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 91.501600][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.513335][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 91.522971][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.532649][ T25] usb 3-1: Product: syz [ 91.536916][ T25] usb 3-1: Manufacturer: syz [ 91.541969][ T25] usb 3-1: SerialNumber: syz [ 91.558658][ T25] usb 3-1: config 0 descriptor?? [ 91.568376][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.628388][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.718829][ T5941] usb 4-1: device descriptor read/64, error -71 [ 91.748622][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.758645][ T8] usb 5-1: device descriptor read/64, error -71 [ 91.878957][ T8] usb usb5-port1: attempt power cycle [ 91.921795][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 91.978410][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.003381][ T5927] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 92.019723][ T5927] usb 2-1: config 0 has no interface number 1 [ 92.026169][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.050510][ T5927] usb 2-1: config 0 interface 206 has no altsetting 0 [ 92.060557][ T5927] usb 2-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 92.073348][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.082315][ T5927] usb 2-1: Product: syz [ 92.086532][ T5927] usb 2-1: Manufacturer: syz [ 92.099642][ T5927] usb 2-1: SerialNumber: syz [ 92.108419][ T5941] usb 4-1: device descriptor read/64, error -71 [ 92.117135][ T5927] usb 2-1: config 0 descriptor?? [ 92.220662][ T5941] usb usb4-port1: attempt power cycle [ 92.258458][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.279084][ T8] usb 5-1: device descriptor read/8, error -71 [ 92.356817][ T5927] usb 2-1: USB disconnect, device number 4 [ 92.518411][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.553357][ T8] usb 5-1: device descriptor read/8, error -71 [ 92.588474][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.609034][ T5941] usb 4-1: device descriptor read/8, error -71 [ 92.672689][ T8] usb usb5-port1: unable to enumerate USB device [ 92.824258][ T5900] usb 3-1: USB disconnect, device number 7 [ 92.852702][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 92.868420][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.910995][ T5941] usb 4-1: device descriptor read/8, error -71 [ 92.954349][ T6063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.064656][ T5941] usb usb4-port1: unable to enumerate USB device [ 93.137415][ T6070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.223893][ T5900] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 93.267998][ T6073] x_tables: duplicate entry at hook 2 [ 93.338464][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 93.378558][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 93.389163][ T5900] usb 3-1: config 1 has an invalid interface number: 120 but max is 6 [ 93.397429][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 93.415994][ T5900] usb 3-1: config 1 has no interface number 0 [ 93.438339][ T5900] usb 3-1: config 1 interface 120 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 93.460218][ T6076] fuse: Bad value for 'fd' [ 93.465558][ T5900] usb 3-1: config 1 interface 120 has no altsetting 0 [ 93.476109][ T5900] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 93.486251][ T5900] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 93.495282][ T5900] usb 3-1: Product: syz [ 93.502348][ T5900] usb 3-1: Manufacturer: syz [ 93.509193][ T5900] usb 3-1: SerialNumber: syz [ 93.509792][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 93.524451][ T8] usb 1-1: config 9 has an invalid interface number: 2 but max is 1 [ 93.536427][ T8] usb 1-1: config 9 has an invalid interface number: 73 but max is 1 [ 93.548908][ T8] usb 1-1: config 9 has an invalid interface number: 230 but max is 1 [ 93.557232][ T8] usb 1-1: config 9 has 3 interfaces, different from the descriptor's value: 2 [ 93.569583][ T8] usb 1-1: config 9 has no interface number 0 [ 93.576640][ T8] usb 1-1: config 9 has no interface number 1 [ 93.595707][ T8] usb 1-1: config 9 interface 2 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 93.607691][ T8] usb 1-1: config 9 interface 2 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 93.619209][ T8] usb 1-1: config 9 interface 2 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 93.632553][ T8] usb 1-1: too many endpoints for config 9 interface 73 altsetting 69: 225, using maximum allowed: 30 [ 93.644967][ T8] usb 1-1: config 9 interface 73 altsetting 69 has a duplicate endpoint with address 0x6, skipping [ 93.656384][ T8] usb 1-1: config 9 interface 73 altsetting 69 endpoint 0x4 has invalid maxpacket 1600, setting to 64 [ 93.668341][ T8] usb 1-1: config 9 interface 73 altsetting 69 has a duplicate endpoint with address 0xE, skipping [ 93.686296][ T8] usb 1-1: config 9 interface 73 altsetting 69 endpoint 0x2 has an invalid bInterval 128, changing to 4 [ 93.698508][ T8] usb 1-1: config 9 interface 73 altsetting 69 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 93.725261][ T8] usb 1-1: config 9 interface 73 altsetting 69 endpoint 0xD has invalid maxpacket 975, setting to 64 [ 93.761777][ T8] usb 1-1: config 9 interface 73 altsetting 69 has 7 endpoint descriptors, different from the interface descriptor's value: 225 [ 93.781750][ T8] usb 1-1: config 9 interface 2 has no altsetting 0 [ 93.789222][ T8] usb 1-1: config 9 interface 73 has no altsetting 0 [ 93.796052][ T8] usb 1-1: config 9 interface 230 has no altsetting 0 [ 93.806534][ T8] usb 1-1: New USB device found, idVendor=0411, idProduct=0137, bcdDevice=63.fe [ 93.819854][ T6081] program syz.2.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.823009][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.837318][ T8] usb 1-1: Product: ꁓᢺ癙̒ᶱ舁鹤龛꛰㫙鞂慄ඣ坮𣏕௾跿䉑﬽ⵈƫ劯↭熡⤍㦒ꗽ憣㙞柙䩨ᔃ넂辬牗䬔襋ᔠ閖呅蘽䰿䮛릔臇呙鳿龓檃䔋闇뇜ꌁм텶辟෻⮎Ҙ뛼㕇뵚퇗࿐ [ 93.860892][ T8] usb 1-1: Manufacturer: Ѓ [ 93.865488][ T8] usb 1-1: SerialNumber: ࠦ [ 93.875803][ T12] tipc: Subscription rejected, illegal request [ 94.030372][ T5941] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.095384][ T5900] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 94.105298][ T5900] visor 3-1:1.120: probe with driver visor failed with error -71 [ 94.137127][ T5900] usb 3-1: USB disconnect, device number 8 [ 94.179942][ T8] usb 1-1: USB disconnect, device number 8 [ 94.205440][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 94.223102][ T5941] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 94.241216][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.261204][ T5941] usb 2-1: config 0 descriptor?? [ 94.276163][ T5941] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 94.308144][ T6086] atomic_op ffff888060bb9198 conn xmit_atomic 0000000000000000 [ 94.318969][ T6086] fuse: Unknown parameter 'fsname' [ 94.368415][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 94.475959][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.485979][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.530437][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 94.540016][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.551588][ T9] usb 5-1: config 0 descriptor?? [ 94.562239][ T9] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 94.628600][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.816525][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 94.826844][ T6084] netdevsim netdevsim4 .: renamed from netdevsim0 (while UP) [ 94.839426][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 94.849846][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 94.860524][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 94.863659][ T5927] usb 5-1: USB disconnect, device number 8 [ 94.878073][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 94.906303][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.945216][ T8] usb 4-1: config 0 descriptor?? [ 94.950840][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.111259][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.118192][ T6080] tap0: tun_chr_ioctl cmd 1074025677 [ 95.126621][ T6080] tap0: linktype set to 823 [ 95.126810][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 95.150083][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.158681][ T9] usb 3-1: Product: syz [ 95.162996][ T9] usb 3-1: Manufacturer: syz [ 95.168141][ T8] hdpvr 4-1:0.0: firmware version 0x0 dated [ 95.175581][ T5900] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.183405][ T9] usb 3-1: SerialNumber: syz [ 95.197716][ T8] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 95.206134][ T9] usb 3-1: config 0 descriptor?? [ 95.339601][ T5900] usb 1-1: device descriptor read/64, error -71 [ 95.579667][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 95.625857][ T8] hdpvr 4-1:0.0: Could not setup controls [ 95.632334][ T8] hdpvr 4-1:0.0: registering videodev failed [ 95.645258][ T8] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 95.655643][ T8] usb 4-1: USB disconnect, device number 9 [ 95.718366][ T5900] usb 1-1: device descriptor read/64, error -71 [ 95.828908][ T5900] usb usb1-port1: attempt power cycle [ 95.866131][ T6108] netlink: 156 bytes leftover after parsing attributes in process `syz.4.74'. [ 96.168560][ T5900] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 96.200506][ T5900] usb 1-1: device descriptor read/8, error -71 [ 96.448578][ T5900] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.499085][ T5900] usb 1-1: device descriptor read/8, error -71 [ 96.598502][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 96.611368][ T5900] usb usb1-port1: unable to enumerate USB device [ 96.833622][ T25] usb 4-1: config 0 has no interfaces? [ 96.850088][ T25] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.864676][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.873980][ T25] usb 4-1: Product: syz [ 96.883117][ T25] usb 4-1: Manufacturer: syz [ 96.890989][ T25] usb 4-1: SerialNumber: syz [ 96.937213][ T25] usb 4-1: config 0 descriptor?? [ 97.010928][ T25] usb 2-1: USB disconnect, device number 5 [ 97.408368][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.538367][ T25] usb 2-1: device descriptor read/64, error -71 [ 97.720750][ T5927] usb 3-1: USB disconnect, device number 9 [ 97.801144][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.963014][ T25] usb 2-1: device descriptor read/64, error -71 [ 98.088858][ T25] usb usb2-port1: attempt power cycle [ 98.198478][ T5927] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 98.354843][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.368083][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.398915][ T5927] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.412747][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.432563][ T5927] usb 3-1: SerialNumber: syz [ 98.457502][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.525745][ T25] usb 2-1: device descriptor read/8, error -71 [ 98.688016][ T5927] usb 3-1: 0:2 : does not exist [ 98.696133][ T5927] usb 3-1: unit 255 not found! [ 98.763651][ T5927] usb 3-1: USB disconnect, device number 10 [ 98.769735][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.821156][ T25] usb 2-1: device descriptor read/8, error -71 [ 98.876969][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.949306][ T25] usb usb2-port1: unable to enumerate USB device [ 99.679587][ T5927] usb 4-1: USB disconnect, device number 10 [ 99.951740][ T6149] FAULT_INJECTION: forcing a failure. [ 99.951740][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 99.965591][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.2.88 Not tainted 6.12.0-rc5-syzkaller #0 [ 99.974559][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.984685][ T6149] Call Trace: [ 99.987994][ T6149] [ 99.990934][ T6149] dump_stack_lvl+0x241/0x360 [ 99.995785][ T6149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.001032][ T6149] ? __pfx__printk+0x10/0x10 [ 100.005658][ T6149] ? fs_reclaim_acquire+0x93/0x130 [ 100.010812][ T6149] ? __pfx___might_resched+0x10/0x10 [ 100.016218][ T6149] should_fail_ex+0x3b0/0x4e0 [ 100.020936][ T6149] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.026717][ T6149] should_failslab+0xac/0x100 [ 100.031466][ T6149] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.037206][ T6149] __kmalloc_noprof+0xd8/0x400 [ 100.041998][ T6149] tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.047575][ T6149] tomoyo_path_number_perm+0x23a/0x880 [ 100.053057][ T6149] ? tomoyo_path_number_perm+0x208/0x880 [ 100.058709][ T6149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.064758][ T6149] ? __fget_files+0x29/0x470 [ 100.069397][ T6149] ? __fget_files+0x3f3/0x470 [ 100.074162][ T6149] security_file_ioctl+0xc6/0x2a0 [ 100.079226][ T6149] __se_sys_ioctl+0x47/0x170 [ 100.083871][ T6149] do_syscall_64+0xf3/0x230 [ 100.088407][ T6149] ? clear_bhb_loop+0x35/0x90 [ 100.093126][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.099081][ T6149] RIP: 0033:0x7f254217e719 [ 100.103551][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.123403][ T6149] RSP: 002b:00007f2542fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.131877][ T6149] RAX: ffffffffffffffda RBX: 00007f2542335f80 RCX: 00007f254217e719 [ 100.139873][ T6149] RDX: 0000000020000440 RSI: 0000000000008922 RDI: 0000000000000005 [ 100.148469][ T6149] RBP: 00007f2542fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 100.156943][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.165461][ T6149] R13: 0000000000000000 R14: 00007f2542335f80 R15: 00007f254245fa28 [ 100.173498][ T6149] [ 100.176718][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.209649][ T6149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.318935][ T5927] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 100.481244][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.502069][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.513682][ T6161] Cannot find add_set index 0 as target [ 100.537567][ T5927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.553927][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.578335][ T5927] usb 4-1: SerialNumber: syz [ 100.609031][ T6161] netlink: 'syz.1.93': attribute type 11 has an invalid length. [ 100.617078][ T6161] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.678436][ T5905] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.801294][ T5927] usb 4-1: 0:2 : does not exist [ 100.808114][ T5927] usb 4-1: unit 255 not found! [ 100.842120][ T5927] usb 4-1: USB disconnect, device number 11 [ 100.856594][ T5905] usb 1-1: config 0 has no interfaces? [ 100.870803][ T6172] xt_socket: unknown flags 0x8 [ 100.889568][ T5905] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.919542][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.927617][ T5905] usb 1-1: Product: syz [ 100.961318][ T5905] usb 1-1: Manufacturer: syz [ 100.963943][ T6174] netlink: 56 bytes leftover after parsing attributes in process `syz.1.98'. [ 100.989160][ T5905] usb 1-1: SerialNumber: syz [ 100.990626][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.000361][ T5905] usb 1-1: config 0 descriptor?? [ 101.041055][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 101.195493][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 101.279141][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.428414][ T8] usb 5-1: device descriptor read/64, error -71 [ 101.682990][ T5927] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 101.698440][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 101.858622][ T8] usb 5-1: device descriptor read/64, error -71 [ 101.870848][ T5927] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 101.886197][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.905859][ T5927] usb 2-1: Product: syz [ 101.921042][ T5927] usb 2-1: Manufacturer: syz [ 101.938069][ T5927] usb 2-1: SerialNumber: syz [ 101.959000][ T5927] usb 2-1: config 0 descriptor?? [ 101.988859][ T8] usb usb5-port1: attempt power cycle [ 102.313404][ T6206] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 102.364297][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.392872][ T6190] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 102.434042][ T8] usb 5-1: device descriptor read/8, error -71 [ 102.579359][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 102.698729][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 102.699856][ T5927] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 102.758669][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 102.771935][ T8] usb 5-1: device descriptor read/8, error -71 [ 102.776571][ T5905] usb 4-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 102.797135][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.829213][ T5905] usb 4-1: Product: syz [ 102.841054][ T5905] usb 4-1: Manufacturer: syz [ 102.854575][ T5905] usb 4-1: SerialNumber: syz [ 102.866810][ T5905] usb 4-1: config 0 descriptor?? [ 102.880103][ T5905] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 102.888678][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 102.896836][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 102.906887][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 102.909492][ T8] usb usb5-port1: unable to enumerate USB device [ 102.915498][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 102.932674][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 102.942927][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 102.964363][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 102.983912][ T5905] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.007153][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 103.021561][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 103.031558][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 103.053751][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 103.078606][ T5905] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 103.092246][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.127311][ T5905] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 103.153386][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.239003][ T986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.264604][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.271332][ C1] hrtimer: interrupt took 28460072 ns [ 103.300064][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.351854][ T9] usb 1-1: USB disconnect, device number 13 [ 103.390589][ T6203] kvm: pic: non byte write [ 103.403983][ T5927] usb 4-1: USB disconnect, device number 12 [ 103.414385][ T5927] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.484050][ T5927] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.495854][ T5927] keyspan 4-1:0.0: device disconnected [ 103.597435][ T986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.791191][ T986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.089486][ T986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.333249][ T6217] xt_connbytes: Forcing CT accounting to be enabled [ 104.350133][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.361039][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.394164][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.409953][ T6217] Cannot find add_set index 0 as target [ 104.416783][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.425196][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.439943][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.459976][ T8] usb 2-1: USB disconnect, device number 10 [ 104.548074][ T6221] netlink: 'syz.4.118': attribute type 11 has an invalid length. [ 104.598751][ T6221] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.118'. [ 104.750651][ T986] bridge_slave_1: left allmulticast mode [ 104.750726][ T986] bridge_slave_1: left promiscuous mode [ 104.752016][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.756799][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 104.799990][ T986] bridge_slave_0: left allmulticast mode [ 104.800035][ T986] bridge_slave_0: left promiscuous mode [ 104.800206][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.223060][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 105.400720][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 105.419468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.460464][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 105.474317][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 105.513938][ T9] usb 5-1: Manufacturer: syz [ 105.543145][ T9] usb 5-1: config 0 descriptor?? Stopping sshd: [ 105.690648][ T9] rc_core: IR keymap rc-hauppauge not found [ 105.698104][ T9] Registered IR keymap rc-empty [ 105.721424][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 105.759734][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 105.790511][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.818854][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.864386][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.894474][ T986] bond0 (unregistering): Released all slaves [ 105.977098][ T5904] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 106.020055][ C0] igorplugusb 5-1:0.0: receive overflow, at least 7 lost [ 106.046255][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.108818][ T5904] usb 1-1: Product: syz [ 106.131577][ T6252] netlink: 24062 bytes leftover after parsing attributes in process `syz.3.127'. [ 106.147195][ T5904] usb 1-1: Manufacturer: syz [ 106.148408][ T6252] netlink: 188348 bytes leftover after parsing attributes in process `syz.3.127'. [ 106.190447][ T5904] usb 1-1: SerialNumber: syz [ 106.239098][ T5904] usb 1-1: config 0 descriptor?? [ 106.288930][ T5904] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 106.423129][ T6256] netlink: 140 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.492172][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 106.505387][ T5855] Bluetooth: hci1: command tx timeout Connection to 10.128.0.96 closed by remote host. [ 106.807439][ T5904] sonixb 1-1:0.0: Error writing register 01: -71 [ 106.815074][ T5904] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 OK [ 106.840305][ T5941] usb 5-1: USB disconnect, device number 13 [ 106.859421][ T5904] usb 1-1: USB disconnect, device number 14 [ 106.867383][ T5851] usb 4-1: new high-speed USB device number 13 using dummy_hcd Stopping dhcpcd... [ 107.061968][ T5851] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 107.083412][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 stopped /sbin/dhcpcd (pid 5507) [ 107.147228][ T5851] usb 4-1: config 0 descriptor?? [ 107.194771][ T5851] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 107.213398][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.220716][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.238007][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.247352][ T6225] bridge_slave_0: entered allmulticast mode [ 107.255569][ T6225] bridge_slave_0: entered promiscuous mode Stopping network: [ 107.308899][ T986] hsr_slave_0: left promiscuous mode [ 107.315241][ T986] hsr_slave_1: left promiscuous mode [ 107.324416][ T986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.332693][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.344443][ T986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.352604][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.386821][ T5927] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 107.416672][ T5851] gp8psk: usb in 128 operation failed. [ 107.426747][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.439672][ T986] veth1_macvtap: left promiscuous mode [ 107.445805][ T986] veth0_macvtap: left promiscuous mode [ 107.467542][ T5927] usb 2-1: config 0 descriptor?? [ 107.473205][ T5851] gp8psk: usb in 137 operation failed. [ 107.487574][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.503003][ T986] veth1_vlan: left promiscuous mode [ 107.518713][ T986] veth0_vlan: left promiscuous mode [ 107.585452][ T5851] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 107.594625][ T5851] usb 4-1: media controller created [ 107.615910][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.638844][ T5851] gp8psk_fe: Frontend attached [ 107.644027][ T5851] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 107.652862][ T5851] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 107.667505][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 107.824679][ T5927] gp8psk: usb in 128 operation failed. [ 107.863483][ T5927] gp8psk: usb in 137 operation failed. [ 107.869351][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.883812][ T6294] kernel profiling enabled (shift: 7) [ 107.894992][ T5927] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 107.917558][ T5927] usb 2-1: media controller created [ 107.957594][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.968499][ T5904] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.012458][ T5927] gp8psk_fe: Frontend attached [ 108.017566][ T5927] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 108.040581][ T5927] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 108.060338][ T5851] gp8psk: usb in 137 operation failed. [ 108.065859][ T5851] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 108.089426][ T5851] gp8psk: found Genpix USB device pID = 203 (hex) [ 108.111277][ T5851] usb 4-1: USB disconnect, device number 13 [ 108.143414][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 108.155269][ T5904] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.174131][ T5904] usb 1-1: config 0 has no interface number 0 [ 108.209226][ T5904] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 108.244498][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.265846][ T5904] usb 1-1: Product: syz [ 108.279117][ T5904] usb 1-1: Manufacturer: syz [ 108.292030][ T5904] usb 1-1: SerialNumber: syz [ 108.351684][ T5904] usb 1-1: config 0 descriptor?? [ 108.357428][ T5851] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 108.368176][ T5927] gp8psk: usb in 137 operation failed. [ 108.379643][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 108.386759][ T5904] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 108.405139][ T5927] gp8psk: found Genpix USB device pID = 203 (hex) [ 108.426957][ T5927] usb 2-1: USB disconnect, device number 11 [ 108.514353][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 108.568500][ T5855] Bluetooth: hci1: command tx timeout [ 108.765879][ T986] team0 (unregistering): Port device team_slave_1 removed [ 108.836881][ T986] team0 (unregistering): Port device team_slave_0 removed [ 109.145282][ T6310] netlink: 24062 bytes leftover after parsing attributes in process `syz.1.139'. [ 109.156011][ T6310] netlink: 188348 bytes leftover after parsing attributes in process `syz.1.139'. [ 109.479974][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.489193][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.496468][ T6225] bridge_slave_1: entered allmulticast mode [ 109.519390][ T6225] bridge_slave_1: entered promiscuous mode [ 109.539319][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.136'. [ 109.553001][ T6306] warning: `syz.3.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.621112][ T5904] gspca_spca1528: reg_w err -71 [ 109.626154][ T5904] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 109.653058][ T5904] usb 1-1: USB disconnect, device number 15 [ 109.687351][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.772806][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.929603][ T6225] team0: Port device team_slave_0 added [ 109.977662][ T6225] team0: Port device team_slave_1 added [ 110.046993][ T6321] FAULT_INJECTION: forcing a failure. [ 110.046993][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 110.070490][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 110.080996][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.1.143 Not tainted 6.12.0-rc5-syzkaller #0 [ 110.089939][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.100213][ T6321] Call Trace: [ 110.103914][ T6321] [ 110.107429][ T6321] dump_stack_lvl+0x241/0x360 [ 110.112356][ T6321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.117595][ T6321] ? __pfx__printk+0x10/0x10 [ 110.122211][ T6321] ? __kmalloc_noprof+0xb0/0x400 [ 110.127266][ T6321] ? __pfx___might_resched+0x10/0x10 [ 110.132658][ T6321] should_fail_ex+0x3b0/0x4e0 [ 110.137379][ T6321] ? fib6_info_alloc+0x2e/0xf0 [ 110.142171][ T6321] should_failslab+0xac/0x100 [ 110.146885][ T6321] ? fib6_info_alloc+0x2e/0xf0 [ 110.151695][ T6321] __kmalloc_noprof+0xd8/0x400 [ 110.156485][ T6321] fib6_info_alloc+0x2e/0xf0 [ 110.161107][ T6321] ip6_route_info_create+0x445/0x12b0 [ 110.166501][ T6321] ? mark_lock+0x9a/0x360 [ 110.170951][ T6321] inet6_rtm_newroute+0x764/0x2310 [ 110.176125][ T6321] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.181702][ T6321] ? __mutex_lock+0x9a1/0xd70 [ 110.186623][ T6321] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.192220][ T6321] rtnetlink_rcv_msg+0x73f/0xcf0 [ 110.197199][ T6321] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 110.202352][ T6321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.207847][ T6321] ? ref_tracker_free+0x643/0x7e0 [ 110.212896][ T6321] netlink_rcv_skb+0x1e3/0x430 [ 110.217675][ T6321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.223170][ T6321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.228508][ T6321] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.233742][ T6321] netlink_unicast+0x7f6/0x990 [ 110.238570][ T6321] ? __pfx_netlink_unicast+0x10/0x10 [ 110.243898][ T6321] ? __virt_addr_valid+0x183/0x530 [ 110.249229][ T6321] ? __check_object_size+0x48e/0x900 [ 110.254666][ T6321] netlink_sendmsg+0x8e4/0xcb0 [ 110.259493][ T6321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.264979][ T6321] ? aa_sock_msg_perm+0x91/0x160 [ 110.270130][ T6321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.276146][ T6321] __sock_sendmsg+0x221/0x270 [ 110.280880][ T6321] ____sys_sendmsg+0x52a/0x7e0 [ 110.285674][ T6321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.291262][ T6321] __sys_sendmmsg+0x3ab/0x730 [ 110.295976][ T6321] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.301225][ T6321] ? __pfx_lock_release+0x10/0x10 [ 110.306281][ T6321] ? kstrtouint_from_user+0x128/0x190 [ 110.311896][ T6321] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 110.317924][ T6321] ? ksys_write+0x229/0x2b0 [ 110.322445][ T6321] ? __pfx_lock_release+0x10/0x10 [ 110.327597][ T6321] ? vfs_write+0x730/0xd30 [ 110.332056][ T6321] ? __mutex_unlock_slowpath+0x21d/0x750 [ 110.337987][ T6321] ? __fget_files+0x3f3/0x470 [ 110.342721][ T6321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.348909][ T6321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.355377][ T6321] ? do_syscall_64+0x100/0x230 [ 110.360700][ T6321] __x64_sys_sendmmsg+0xa0/0xb0 [ 110.365627][ T6321] do_syscall_64+0xf3/0x230 [ 110.370244][ T6321] ? clear_bhb_loop+0x35/0x90 [ 110.375462][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.381561][ T6321] RIP: 0033:0x7efe8177e719 [ 110.386105][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.405829][ T6321] RSP: 002b:00007efe825a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.414368][ T6321] RAX: ffffffffffffffda RBX: 00007efe81935f80 RCX: 00007efe8177e719 [ 110.422362][ T6321] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 110.430451][ T6321] RBP: 00007efe825a0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.438458][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.446456][ T6321] R13: 0000000000000000 R14: 00007efe81935f80 R15: 00007efe81a5fa28 [ 110.454480][ T6321] [ 110.628325][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 110.638996][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.648463][ T5855] Bluetooth: hci1: command tx timeout [ 110.656216][ T6331] input: syz1 as /devices/virtual/input/input10 [ 110.664796][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.672020][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.714224][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.746758][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.779608][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.826205][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.826228][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. OK [ 110.826257][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.829193][ T6336] netlink: 140 bytes leftover after parsing attributes in process `syz.1.147'. [ 110.834802][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 Stopping iptables: [ 110.835021][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.835051][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.934924][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.054623][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 111.054671][ T8] usbtmc 5-1:16.0: can't read capabilities [ 111.093248][ T6225] hsr_slave_0: entered promiscuous mode OK [ 111.100630][ T6225] hsr_slave_1: entered promiscuous mode [ 111.124980][ T6225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.125060][ T6225] Cannot create hsr debugfs directory [ 111.130549][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 111.308835][ T8] usb 5-1: USB disconnect, device number 14 Stopping system message bus: [ 111.530611][ T6352] netlink: 24062 bytes leftover after parsing attributes in process `syz.1.149'. [ 111.530644][ T6352] netlink: 188348 bytes leftover after parsing attributes in process `syz.1.149'. [ 111.785769][ T6225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.845862][ T6225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.891222][ T6225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.964894][ T6225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.106962][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.139515][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.189786][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.197034][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.258526][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 112.265128][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.274953][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.312938][ T6373] mmap: syz.0.156 (6373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. done [ 112.490313][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.520202][ T6378] xt_connbytes: Forcing CT accounting to be enabled [ 112.529567][ T6378] Cannot find add_set index 0 as target [ 112.529998][ T6225] veth0_vlan: entered promiscuous mode [ 112.548303][ T6225] veth1_vlan: entered promiscuous mode [ 112.576844][ T6225] veth0_macvtap: entered promiscuous mode [ 112.588084][ T6225] veth1_macvtap: entered promiscuous mode [ 112.657115][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.667977][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.678629][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.690030][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.700838][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.711481][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.721903][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.732561][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.744228][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.760304][ T5855] Bluetooth: hci1: command tx timeout [ 112.767713][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.788764][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.798832][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.810406][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.820499][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.831040][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.841070][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.851780][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.864155][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.874947][ T6225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.883896][ T6225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.893631][ T6225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.903421][ T6225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.979018][ T5905] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 113.022425][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.032362][ T5905] usb 5-1: Product: syz [ 113.036626][ T5905] usb 5-1: Manufacturer: syz [ 113.058540][ T5905] usb 5-1: SerialNumber: syz [ 113.103559][ T5905] usb 5-1: config 0 descriptor?? [ 113.150894][ T5905] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 113.236508][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.278714][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.382392][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.425723][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.517222][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.642232][ T5905] sonixb 5-1:0.0: Error writing register 01: -71 [ 113.649405][ T5905] sonixb 5-1:0.0: probe with driver sonixb failed with error -71 [ 113.665074][ T5905] usb 5-1: USB disconnect, device number 15 [ 114.081414][ T6424] program syz.3.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.188411][ T5851] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.373660][ T5851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.415739][ T5851] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.447792][ T5851] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.474965][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.490382][ T5851] usb 6-1: SerialNumber: syz Stopping klogd: [ 114.727168][ T5851] usb 6-1: 0:2 : does not exist [ 114.755987][ T5851] usb 6-1: unit 255 not found! [ 114.777543][ T5851] usb 6-1: USB disconnect, device number 2 OK [ 115.080375][ T29] audit: type=1326 audit(1730140958.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e797e719 code=0x0 Stopping acpid: [ 115.464222][ T6472] atomic_op ffff8880610e2198 conn xmit_atomic 0000000000000000 [ 115.475118][ T6472] fuse: Unknown parameter 'fsname' [ 115.507763][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 115.523024][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 115.647970][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 115.728405][ T5941] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.881590][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.903612][ T5941] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 115.943173][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 115.959570][ T5941] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 115.971204][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 115.980938][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.009654][ T6492] [ 116.012081][ T6492] ====================================================== [ 116.019094][ T6492] WARNING: possible circular locking dependency detected [ 116.026106][ T6492] 6.12.0-rc5-syzkaller #0 Not tainted [ 116.031554][ T6492] ------------------------------------------------------ [ 116.038563][ T6492] syz.0.178/6492 is trying to acquire lock: [ 116.044441][ T6492] ffff88807a004418 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0 [ 116.055160][ T6492] [ 116.055160][ T6492] but task is already holding lock: [ 116.062530][ T6492] ffff888026da8198 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 116.072584][ T6492] [ 116.072584][ T6492] which lock already depends on the new lock. [ 116.072584][ T6492] [ 116.083077][ T6492] [ 116.083077][ T6492] the existing dependency chain (in reverse order) is: [ 116.092090][ T6492] [ 116.092090][ T6492] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 116.099706][ T6492] lock_acquire+0x1ed/0x550 [ 116.104765][ T6492] down_read_killable+0xca/0xd30 [ 116.110249][ T6492] mmap_read_lock_killable+0x1d/0x70 [ 116.116077][ T6492] lock_mm_and_find_vma+0x29c/0x2f0 [ 116.121815][ T6492] exc_page_fault+0x1bf/0x8c0 [ 116.127020][ T6492] asm_exc_page_fault+0x26/0x30 [ 116.132407][ T6492] fault_in_readable+0x111/0x2d0 [ 116.137877][ T6492] fault_in_iov_iter_readable+0x229/0x280 [ 116.144146][ T6492] generic_perform_write+0x259/0x6d0 [ 116.149959][ T6492] shmem_file_write_iter+0xf9/0x120 [ 116.155690][ T6492] vfs_write+0xaeb/0xd30 [ 116.160477][ T6492] ksys_write+0x183/0x2b0 [ 116.165339][ T6492] do_syscall_64+0xf3/0x230 [ 116.170380][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.176804][ T6492] [ 116.176804][ T6492] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 116.185513][ T6492] validate_chain+0x18ef/0x5920 [ 116.190893][ T6492] __lock_acquire+0x1384/0x2050 [ 116.196277][ T6492] lock_acquire+0x1ed/0x550 [ 116.201319][ T6492] down_write+0x99/0x220 [ 116.206093][ T6492] process_measurement+0x439/0x1fb0 [ 116.211825][ T6492] ima_file_mmap+0x13d/0x2b0 [ 116.216946][ T6492] security_mmap_file+0x7e7/0xa40 [ 116.222497][ T6492] __se_sys_remap_file_pages+0x6e6/0xa50 [ 116.228651][ T6492] do_syscall_64+0xf3/0x230 [ 116.233678][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.240097][ T6492] [ 116.240097][ T6492] other info that might help us debug this: [ 116.240097][ T6492] [ 116.250324][ T6492] Possible unsafe locking scenario: [ 116.250324][ T6492] [ 116.257771][ T6492] CPU0 CPU1 [ 116.263143][ T6492] ---- ---- [ 116.268530][ T6492] lock(&mm->mmap_lock); [ 116.272881][ T6492] lock(&sb->s_type->i_mutex_key#12); [ 116.280880][ T6492] lock(&mm->mmap_lock); [ 116.287741][ T6492] lock(&sb->s_type->i_mutex_key#12); [ 116.293217][ T6492] [ 116.293217][ T6492] *** DEADLOCK *** [ 116.293217][ T6492] [ 116.301370][ T6492] 1 lock held by syz.0.178/6492: [ 116.306317][ T6492] #0: ffff888026da8198 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 116.316786][ T6492] [ 116.316786][ T6492] stack backtrace: [ 116.322677][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.0.178 Not tainted 6.12.0-rc5-syzkaller #0 [ 116.331552][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.341611][ T6492] Call Trace: [ 116.344897][ T6492] [ 116.347832][ T6492] dump_stack_lvl+0x241/0x360 [ 116.352522][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.357731][ T6492] ? __pfx__printk+0x10/0x10 [ 116.362339][ T6492] print_circular_bug+0x13a/0x1b0 [ 116.367384][ T6492] check_noncircular+0x36a/0x4a0 [ 116.372364][ T6492] ? __pfx_check_noncircular+0x10/0x10 [ 116.377835][ T6492] ? lockdep_lock+0x123/0x2b0 [ 116.382568][ T6492] validate_chain+0x18ef/0x5920 [ 116.387436][ T6492] ? __pfx_validate_chain+0x10/0x10 [ 116.392642][ T6492] ? mark_lock+0x9a/0x360 [ 116.396980][ T6492] ? __lock_acquire+0x1384/0x2050 [ 116.402031][ T6492] ? look_up_lock_class+0x77/0x170 [ 116.407152][ T6492] ? register_lock_class+0x102/0x980 [ 116.412548][ T6492] ? __pfx_register_lock_class+0x10/0x10 [ 116.418202][ T6492] ? mark_lock+0x9a/0x360 [ 116.422539][ T6492] ? ima_match_policy+0x115/0x22f0 [ 116.427688][ T6492] __lock_acquire+0x1384/0x2050 [ 116.432576][ T6492] lock_acquire+0x1ed/0x550 [ 116.437107][ T6492] ? process_measurement+0x439/0x1fb0 [ 116.442492][ T6492] ? __pfx_lock_acquire+0x10/0x10 [ 116.447545][ T6492] ? __pfx___might_resched+0x10/0x10 [ 116.452845][ T6492] ? ima_match_policy+0x115/0x22f0 [ 116.457973][ T6492] ? __pfx_ima_match_policy+0x10/0x10 [ 116.463367][ T6492] ? __pfx___schedule+0x10/0x10 [ 116.468232][ T6492] down_write+0x99/0x220 [ 116.472496][ T6492] ? process_measurement+0x439/0x1fb0 [ 116.477884][ T6492] ? __pfx_down_write+0x10/0x10 [ 116.482751][ T6492] ? ima_get_action+0x75/0xb0 [ 116.487464][ T6492] process_measurement+0x439/0x1fb0 [ 116.492679][ T6492] ? __pfx_process_measurement+0x10/0x10 [ 116.498323][ T6492] ? __pfx_lock_acquire+0x10/0x10 [ 116.503366][ T6492] ? aa_file_perm+0x137/0xf50 [ 116.508071][ T6492] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 116.514249][ T6492] ima_file_mmap+0x13d/0x2b0 [ 116.518854][ T6492] ? __pfx_ima_file_mmap+0x10/0x10 [ 116.523975][ T6492] ? end_current_label_crit_section+0x151/0x180 [ 116.530230][ T6492] ? common_file_perm+0x1a6/0x210 [ 116.535269][ T6492] security_mmap_file+0x7e7/0xa40 [ 116.540316][ T6492] __se_sys_remap_file_pages+0x6e6/0xa50 [ 116.545957][ T6492] ? __pfx_do_futex+0x10/0x10 [ 116.550676][ T6492] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 116.556850][ T6492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.563198][ T6492] ? do_syscall_64+0x100/0x230 [ 116.567978][ T6492] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 116.573713][ T6492] do_syscall_64+0xf3/0x230 [ 116.578231][ T6492] ? clear_bhb_loop+0x35/0x90 [ 116.582932][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.588837][ T6492] RIP: 0033:0x7ff7e797e719 [ 116.593265][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.612877][ T6492] RSP: 002b:00007ff7e875d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 116.621300][ T6492] RAX: ffffffffffffffda RBX: 00007ff7e7b35f80 RCX: 00007ff7e797e719 [ 116.629280][ T6492] RDX: 0000000000000000 RSI: 0000000000400d10 RDI: 000000002051c000 [ 116.637255][ T6492] RBP: 00007ff7e79f132e R08: 0000000000000000 R09: 0000000000000000 [ 116.645230][ T6492] R10: 000000000000051c R11: 0000000000000246 R12: 0000000000000000 [ 116.653213][ T6492] R13: 0000000000000000 R14: 00007ff7e7b35f80 R15: 00007ff7e7c5fa28 [ 116.661234][ T6492] [ 116.666003][ T5941] usb 6-1: config 0 descriptor?? OK